ci(validate): match vendored plugins/*/ + external_plugins/*/ manifest and content paths

The one-level patterns (*/.claude-plugin/** etc.) never match the vendored two-level layout because * does not cross /, so a PR touching only plugins/<name>/.claude-plugin/plugin.json never fires the required validate check and blocks forever (PR #5416). Same per-level spell-out the filter already uses for plugins/*/README.md and assets.
2026-08-20 20:33:31 +00:00 · 2026-08-18 11:15:18 -05:00
1 changed files with 1 additions and 1 deletions
--- a/plugins/claude-security/.claude-plugin/plugin.json
+++ b/plugins/claude-security/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
  "name": "claude-security",
-  "version": "0.10.1",
+  "version": "0.10.1-rc7",
  "description": "Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose. See the plugin README for the tiers, the report format, and the trust model.",
  "author": {
    "name": "Anthropic",