# Release Blocklet Projects Safely

Blocklet release steps can fail when versioning, build output, or metadata are misaligned. This skill guides Claude, Codex, and Claude Code through a repeatable release workflow with validation before bundling.

## Install

```bash
npx skillstore add arcblock/blocklet-updater
```

## Metadata

- - Slug: arcblock-blocklet-updater
- - Version: 1.0.0
- - Author: ArcBlock
- - GitHub username: ArcBlock
- - License: MIT
- - Repository: https://github.com/ArcBlock/agent-skills/tree/main/plugins/blocklet/skills/blocklet-updater
- - Ref: main
- - Supported tools: Claude, Codex, Claude Code
- - Risk level: medium
- - Risk factors: external\_commands
- - Quality score: 74
- - Public page: https://skillstore.pages.dev/skills/arcblock-blocklet-updater
- - Manifest: https://skillstore.pages.dev/api/skills/arcblock-blocklet-updater/manifest

## Capabilities

- Runs a patch version bump for a Blocklet project.
- Detects whether package.json includes a build script.
- Installs dependencies and runs the project build when required.
- Finds index.html in common output directories.
- Updates blocklet.yml main when it points to the wrong output directory.
- Runs Blocklet metadata validation and creates a release bundle.

## Use Cases

- Prepare a Routine Patch Release: Bump the Blocklet version, build the app, validate metadata, and create a release bundle.
- Fix Release Output Alignment: Find the generated index.html and update blocklet.yml when the main field points to the wrong directory.
- Validate a Static Blocklet: Skip build steps for a static project, check the root entry point, and bundle after metadata validation.

## Prompt Templates

### Basic Blocklet Release

```
Create a new patch release for this Blocklet project. Stop if any validation or build step fails.
```

### Build and Bundle

```
Bump the Blocklet version, install dependencies, run the build, verify metadata, and create the release bundle.
```

### Repair Main Field

```
Prepare a Blocklet release and check whether blocklet.yml main matches the directory that contains index.html.
```

### Audit Release Readiness

```
Run the full Blocklet release workflow, explain any failure with the exact command that failed, and do not bundle until all checks pass.
```

## Limitations

- Requires the Blocklet CLI and pnpm to be available when commands run.
- Uses a patch version bump workflow and does not describe major or minor releases.
- Runs project and dependency scripts, so it should be used only in trusted repositories.
- Stops when blocklet.yml is missing instead of converting the project.

## Best Practices

- Run this skill in a clean working tree before starting a release.
- Review package scripts and dependency changes before allowing install or build commands.
- Check the generated bundle and blocklet.yml changes before publishing.

## Anti Patterns

- Do not run the workflow in an untrusted repository.
- Do not bundle after a failed build, metadata check, or missing entry point.
- Do not use it to convert non-Blocklet projects into Blocklets.

## Security Audit

- - Safe to publish: true
- - Audited at: 2026-06-28T10:23:33.829\+00:00
- - Summary: The static Ruby backtick and weak cryptography findings are false positives from markdown prose, inline code, and fenced command examples. The skill has a real medium-risk behavior because it instructs the agent to run blocklet and pnpm commands, including dependency installation and project build scripts, inside the user workspace.

## Stats

- - Views: 262
- - Downloads: 4
- - Favorites: 0
- - Popularity score: 0