Bump 15 stale plugin SHA pins to upstream HEAD#289
Open
tobinsouth wants to merge 1 commit into
Open
Conversation
Sweep of all external entries: 19 of 38 pins lag their upstream HEAD. This bumps the 15 that validate cleanly at the new SHA (plugin manifest present and parseable at the pinned path): bigdata-com, miro, sanity-plugin, zoominfo, daloopa, fastly-agent-toolkit, nimble, brightdata-plugin, atlan, postiz, adobe-for-creativity, sp-global, desktop-commander, qodo-skills, vibe-prospecting Excluded: - carta-cap-table / carta-crm / carta-investors: already bumped in #288 - mintlify: upstream restructured and no longer contains a .claude-plugin/plugin.json at any path, so a bump would break the entry; left at the old pin pending upstream fix
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Sweep of all 38 external entries in
marketplace.json: 19 pins lag upstream HEAD. This bumps the 15 that validate cleanly at the new SHA — for each, the upstream was fetched at the new pin and.claude-plugin/plugin.jsonconfirmed present and parseable at the entry's path. Diff is sha-only (15 lines).c77a09ca67c30be9706b24b69d7c3dc0236348e27e04973714752e45cfdebda5cc0d0968a4d8e1eee0f420576bd17d68b3ab05d39736dfc73714517868651246790398c8789507c0238aede641c5a9db9ca1da26e23271f66f41866e6add941c9c44119acf857bf0b1eb03898aec13d6ada4d5697ed0c4e2Excluded
0436f381) restructured: the repo now carries a.claude-plugin/marketplace.json+ bareskills/and noplugin.jsonat any path, so bumping would break the entry at sync time. Left at the old pin; needs upstream to restore a plugin manifest (or this entry needs re-sourcing).Why
These pins only ever advanced via the automated bump PR (#241), which cannot merge — required checks never register on its dispatch-triggered runs — so every pin has drifted since ~May 19. Stale pins serve users outdated plugin content (#288's carta case was partner-reported: deleted skills still being served).
After merge
Default-marketplace auto-sync picks the new pins up on merge; a force sync works too.