[dependabot]

Bumps openclaw/clawhub/.github/workflows/skill-publish.yml from 0.24.0 to 0.25.0.

Release notes

Sourced from openclaw/clawhub/.github/workflows/skill-publish.yml's releases.

clawhub 0.25.0

0.25.0 - 2026-11-01

Compatibility

• Experimental Claw packages are now Templates. Use clawhub package explore --family template and clawhub package publish <artifact.tgz> --family template; --family claw is rejected. Public scoped routes use /<owner>/templates/<slug> instead of /<owner>/claws/<slug>.
• New packages use openclaw.template in package.json. CLAW.md, existing package/version identities and published artifact bytes remain unchanged.

Fixes

• CLI: show the publishing step, file position, HTTP status and safe request ID when an upload fails, while preserving retry timing and existing error messages.

Release Proof

• npm: https://www.npmjs.com/package/clawhub/v/0.25.0
• tarball: https://registry.npmjs.org/clawhub/-/clawhub-0.25.0.tgz
• integrity: sha512-G+ofWmCHK0w/kl2MWaKurYlnucw1cUbWnH7ecRUo0uzKmmSmQI9YyyaphZV+jqt8m2pCDT4j9edHiuv3LxSa0A==
• npm preflight: https://github.com/openclaw/clawhub/actions/runs/41279997287
• npm publish: https://github.com/openclaw/clawhub/actions/runs/41280523399

clawhub 0.24.1

0.24.1 - 2026-10-28

Fixes

• CLI/API: let authorized skill owners inspect the publication state of an exact held version, including failed checks and active retries, without exposing private uploads publicly. Avoid reporting a clean older release as the held version's result, and fail file reads until that version is available.

Compatibility

• The CLI includes Plugin Inspector 0.4.3 and requires Node.js 22.13+ on the 22.x line or Node.js 24+.

Release Proof

• npm: https://www.npmjs.com/package/clawhub/v/0.24.1
• tarball: https://registry.npmjs.org/clawhub/-/clawhub-0.24.1.tgz
• integrity: sha512-je0nAOJvXBhA1WaIwLFL+9MKDNQBhu+23N074pvB3s8XCKAOV/QfjgWCr8Co2AGCGO8yE0KmllfUOqPs2CDTlQ==
• npm preflight: https://github.com/openclaw/clawhub/actions/runs/40642033913
• npm publish: https://github.com/openclaw/clawhub/actions/runs/40642249975
• Installed npm CLI and production verification

The signed npm publish was accepted while npm processed the version. The workflow’s short post-publish metadata wait expired; the public registry artifact and installed CLI were verified afterward.

Changelog

Sourced from openclaw/clawhub/.github/workflows/skill-publish.yml's changelog.

0.25.0 - 2026-11-01

Compatibility

• Experimental Claw packages are now Templates. Use clawhub package explore --family template and clawhub package publish <artifact.tgz> --family template; --family claw is rejected. Public scoped routes use /<owner>/templates/<slug> instead of /<owner>/claws/<slug>.
• New packages use openclaw.template in package.json. CLAW.md, existing package/version identities and published artifact bytes remain unchanged.

Fixes

• CLI: show the publishing step, file position, HTTP status and safe request ID when an upload fails, while preserving retry timing and existing error messages.

0.24.1 - 2026-10-28

Fixes

• CLI/API: let authorized skill owners inspect the publication state of an exact held version, including failed checks and active retries, without exposing private uploads publicly. Avoid reporting a clean older release as the held version's result, and fail file reads until that version is available.

Compatibility

• The CLI includes Plugin Inspector 0.4.3 and requires Node.js 22.13+ on the 22.x line or Node.js 24+.

Commits

• 0a3dfec chore: prepare ClawHub CLI 0.25.0 (#4196)
• ce0172c fix: stamp backend revision only after successful deployment (#4195)
• 7adec9f fix: preserve safe prepublication completion diagnostics (#4194)
• 26bc061 fix: retain publish phase and HTTP diagnostics (#4191)
• baf4d7f fix: remove blanket plugin incompatibility alert (#4192)
• e1a731d fix: acknowledge scans after committed completion (#4190)
• 413776b perf: add read-only public plugin detail snapshot (#4193)
• 6fd148d ci: run plugin category checks in local-auth shard (#4184)
• 118b7c6 fix: adopt reviewed shell quote boundaries in scan workers (#4189)
• 041bdd2 fix: preserve bounded native scanner failure diagnostics (#4188)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)