runs-on: ubuntu-24.04

timeout-minutes: 5

steps:

- name: Request private evidence update

env:

RELEASE_PRIVATE_DISPATCH_TOKEN: ${{ secrets.OPENCLAW_RELEASES_PRIVATE_DISPATCH_TOKEN }}

TARGET_REF: ${{ inputs.ref }}

PACKAGE_SPEC: ${{ inputs.npm_telegram_package_spec }}

GITHUB_RUN_ID_VALUE: ${{ github.run_id }}

run: |

set -euo pipefail

if [[ -z "${RELEASE_PRIVATE_DISPATCH_TOKEN// }" ]]; then

echo "OPENCLAW_RELEASES_PRIVATE_DISPATCH_TOKEN is not configured; skipping automatic private evidence update."

exit 0

fi

release_id="${TARGET_REF#refs/tags/}"

release_id="${release_id#v}"

if [[ "$PACKAGE_SPEC" =~ ^openclaw@(.+)$ ]]; then

release_id="${BASH_REMATCH[1]}"

fi

release_id="$(printf '%s' "$release_id" | tr '/:@ ' '----' | tr -cd 'A-Za-z0-9._-')"

if [[ -z "$release_id" ]]; then

echo "::error::Could not derive release evidence id from target ref '${TARGET_REF}'."

exit 1

fi

payload="$(

jq -cn \

--arg full_validation_run_id "$GITHUB_RUN_ID_VALUE" \

--arg release_id "$release_id" \

--arg release_ref "$TARGET_REF" \

--arg package_spec "$PACKAGE_SPEC" \

--arg notes "Automatically requested by Full Release Validation ${GITHUB_RUN_ID_VALUE} after child workflows completed." \

'{

event_type: "openclaw_full_release_validation_completed",

client_payload: {

full_validation_run_id: $full_validation_run_id,

release_id: $release_id,

release_ref: $release_ref,

package_spec: $package_spec,

notes: $notes

}

}'

)"

curl --fail-with-body \

-X POST \

-H "Accept: application/vnd.github+json" \

-H "Authorization: Bearer ${RELEASE_PRIVATE_DISPATCH_TOKEN}" \

-H "X-GitHub-Api-Version: 2022-11-28" \

https://api.github.com/repos/openclaw/releases-private/dispatches \

-d "$payload"

- name: Verify child workflow results

env:

NORMAL_CI_RESULT: ${{ needs.normal_ci.result }}