claude-plugins-official

mirror of https://github.com/anthropics/claude-plugins-official.git synced 2026-07-11 11:56:34 -03:00

History

refactor(ci): derive external-PR scope from live repos, no maintained list

Replace the curated source-org allowlist with auto-derivation from the
live marketplace. A non-member PR stays open only if it ADDS entries
whose source.url repo ALREADY backs a live plugin here, additions-only,
nothing else touched. No list to maintain, no individuals named.

Trust is anchored in the source repo + pinned SHA (org-controlled), not
the submitter's identity; merge still requires CI + maintainer approval.

- remove external-pr-allowed-sources.json
- scripts/external-pr-scope.js: derive allowed repos from base marketplace.json
- both workflows drop the allowlist-file arg

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-25 12:00:46 -05:00

bump-plugin-shas.yml

chore(ci): re-pin validate-plugins + scan-plugins + bump-plugin-shas to community 426e469f (#3132 )

2026-06-19 14:34:56 -05:00

check-mcp-urls.yml

Fix MCP URL probe: connection failure was reported as PASS (#1922 )

2026-05-22 09:57:14 -05:00

close-external-prs.yml

refactor(ci): derive external-PR scope from live repos, no maintained list

2026-06-25 12:00:46 -05:00

external-pr-scope-guard.yml

refactor(ci): derive external-PR scope from live repos, no maintained list