PluginBench
Skill
Review
Audit score 70

claude-code-plugin-release

thedotmack/claude-mem

Automated semantic versioning and release workflow for Claude Code plugins with manifest sync, git tagging, and GitHub releases.

What is claude-code-plugin-release?

Handles version increments across multiple plugin manifests (package.json, marketplace.json, plugin.json), verifies build integrity, creates git tags and GitHub releases, and generates changelogs. NPM publishing is handed off to the human maintainer for security reasons.

  • Increments semantic versions across eight manifest files simultaneously
  • Verifies version consistency with git grep before and after updates
  • Runs build-and-sync to regenerate artifacts and validate the build
  • Creates annotated git tags and pushes to origin
  • Generates GitHub releases with structured release notes
  • Regenerates CHANGELOG.md from GitHub API release data

How to install claude-code-plugin-release

npx skills add https://github.com/thedotmack/claude-mem --skill claude-code-plugin-release
Prerequisites
  • Git repository with remote origin configured
  • npm installed with access to project scripts
  • GitHub CLI (gh) installed and authenticated
  • Discord webhook URL in ~/Scripts/claude-mem/.env for notifications
  • All eight manifest files present in the repository
Claude Code
Cursor
Windsurf
Cline

How to use claude-code-plugin-release

  1. 1.Determine the version bump type (PATCH, MINOR, or MAJOR) based on changes
  2. 2.Verify all eight manifest file paths exist: package.json, plugin/package.json, .claude-plugin/marketplace.json, .claude-plugin/plugin.json, plugin/.claude-plugin/plugin.json, .codex-plugin/plugin.json, plugin/.codex-plugin/plugin.json, openclaw/openclaw.plugin.json
  3. 3.Update the version string in all eight files to the new version
  4. 4.Run `git grep -n "version": "<NEW>"` to confirm all eight files match
  5. 5.Run `npm run build-and-sync` to regenerate artifacts and validate the build
  6. 6.Commit with `git add -A && git commit -m "chore: bump version to X.Y.Z"`
  7. 7.Create an annotated tag: `git tag -a vX.Y.Z -m "Version X.Y.Z"`
  8. 8.Push commits and tag: `git push origin main && git push origin vX.Y.Z`

Use cases

Good for
  • Publishing a bug fix release (PATCH) for a Claude Code plugin
  • Releasing a new feature (MINOR) with updated manifests and changelog
  • Performing a breaking change release (MAJOR) with full artifact rebuild and notification
  • Coordinating multi-manifest version updates without manual file editing
  • Automating release documentation and GitHub/Discord notifications
Who it's for
  • Plugin maintainers managing Claude Code plugin releases
  • Teams using semantic versioning across multiple config files
  • Developers who want automated, auditable release workflows
  • Projects requiring Discord notifications and GitHub release tracking

claude-code-plugin-release FAQ

Why is NPM publishing handed off to the human?

The human maintainer raised npm security concerns, so publishing requires credentials and 2FA that only they can provide. The agent must not run `npm publish` or related commands like `np` or `npm run release:*`.

What does build-and-sync do?

It regenerates build artifacts, syncs the local marketplace copy, restarts the worker, and clears the queue. Use this instead of plain `npm run build` for release validation to avoid marketplace/worker sync issues.

How many manifest files need version updates?

Eight files must be updated: package.json, plugin/package.json, .claude-plugin/marketplace.json, .claude-plugin/plugin.json, plugin/.claude-plugin/plugin.json, .codex-plugin/plugin.json, plugin/.codex-plugin/plugin.json, and openclaw/openclaw.plugin.json.

How do I verify all versions were updated correctly?

Run `git grep -n "version": "<NEW>"` to confirm all eight files match the new version, and `git grep -n "version": "<OLD>"` to ensure zero hits remain.

What happens after the human publishes to NPM?

Verify the publish succeeded with `npm view claude-mem@X.Y.Z version`, then continue with GitHub release creation, changelog regeneration, Discord notification, and final git status check.

Full instructions (SKILL.md)

Source of truth, from thedotmack/claude-mem.


name: claude-code-plugin-release description: Automated semantic versioning and release workflow for Claude Code plugins. Handles version increments across package.json, marketplace.json, plugin.json manifests, build verification, git tagging, GitHub releases, and changelog generation. NPM publishing (so npx claude-mem@X.Y.Z resolves) is handed off to the human maintainer, who raised npm security.

Version Bump & Release Workflow

IMPORTANT: Plan and write detailed release notes before starting.

CRITICAL: Commit EVERYTHING (including build artifacts). At the end of this workflow, NOTHING should be left uncommitted or unpushed. Run git status at the end to verify.

Preparation

  1. Analyze: Determine if the change is PATCH (bug fixes), MINOR (features), or MAJOR (breaking).

  2. Environment: Identify repository owner/name from git remote -v.

  3. Paths — every file that carries the version string:

    • package.jsonthe npm/npx-published version (npx claude-mem@X.Y.Z resolves from this)
    • plugin/package.json — bundled plugin runtime deps
    • .claude-plugin/marketplace.json — version inside plugins[0].version
    • .claude-plugin/plugin.json — top-level Claude-plugin manifest
    • plugin/.claude-plugin/plugin.json — bundled Claude-plugin manifest
    • .codex-plugin/plugin.json — Codex-plugin manifest
    • plugin/.codex-plugin/plugin.json — bundled Codex-plugin manifest
    • openclaw/openclaw.plugin.json — OpenClaw plugin manifest

    Verify coverage before editing: git grep -l "\"version\": \"<OLD>\"" should list all eight. If a new manifest has been added since this doc was last updated, update this list.

Workflow

  1. Update: Increment the version string in every path above. Do NOT touch CHANGELOG.md — it's regenerated.
  2. Verify: git grep -n "\"version\": \"<NEW>\"" — confirm all eight files match. git grep -n "\"version\": \"<OLD>\"" — should return zero hits.
  3. Build and sync: npm run build-and-sync to regenerate artifacts, sync the local marketplace copy, restart the worker, and clear the queue. Do not use plain npm run build for release validation because it can leave the local marketplace/worker out of sync.
  4. Commit: git add -A && git commit -m "chore: bump version to X.Y.Z".
  5. Tag: git tag -a vX.Y.Z -m "Version X.Y.Z".
  6. Push: git push origin main && git push origin vX.Y.Z.
  7. Publish to npm — HAND OFF TO HUMAN. The human maintainer raised npm security, so publishing now requires credentials/2FA only they can provide. The agent MUST NOT run npm publish (or np / npm run release:*, which also publish) itself. Hand off NPM publishing to the human now: stop and tell them the version is committed, tagged, and pushed, and that they must publish to npm to make npx claude-mem@X.Y.Z resolve. Give them the command:
    npm publish   # run by the HUMAN — the prepublishOnly script rebuilds the package
    
    Wait for the human to confirm they published, then verify it landed:
    npm view claude-mem@X.Y.Z version   # should print X.Y.Z
    
    If the publish build touched local artifacts, run npm run build-and-sync again afterward.
  8. GitHub release: gh release create vX.Y.Z --title "vX.Y.Z" --notes "RELEASE_NOTES".
  9. Changelog: Regenerate via the project's changelog script:
    npm run changelog:generate
    
    (Runs node scripts/generate-changelog.js, which pulls releases from the GitHub API and rewrites CHANGELOG.md.)
  10. Sync changelog: Commit and push the updated CHANGELOG.md.
  11. Notify: Run the Discord notification from ~/Scripts/claude-mem/, where the .env with Discord webhook details lives:
    cd ~/Scripts/claude-mem/ && npm run discord:notify vX.Y.Z
    
    Do this even when the release worktree does not have a local .env.
  12. Finalize: git status — working tree must be clean.

Checklist

  • All eight config files have matching versions
  • git grep for old version returns zero hits
  • npm run build-and-sync succeeded
  • Git tag created and pushed
  • NPM publishing handed off to the human (agent does NOT run npm publish — human raised security); once they publish, npm view claude-mem@X.Y.Z version confirms it (so npx claude-mem@X.Y.Z resolves)
  • GitHub release created with notes
  • CHANGELOG.md updated and pushed
  • Discord notification run from ~/Scripts/claude-mem/
  • git status shows clean tree