claude plugins update doesn't pull marketplace repo, silently serves stale versions

[bethintakoma]

Bug

claude plugins update compound-engineering@every-marketplace reports the plugin is "already at the latest version" when it isn't. In this case, it reported 2.30.0 as latest when the actual latest is 2.36.4.

Root Cause

The marketplace is stored as a local git clone at ~/.claude/plugins/marketplaces/every-marketplace/. The update command checks versions against this local clone but never pulls from the remote. So users who installed the marketplace before newer versions were published are silently stuck.

Reproduction

# Shows stale version as "latest"
claude plugins update compound-engineering@every-marketplace
# → "compound-engineering is already at the latest version (2.30.0)"

# Local clone is behind
git -C ~/.claude/plugins/marketplaces/every-marketplace/ log --oneline -1
# → e4ff6a8 [2.30.0]

# Manual pull fixes it
git -C ~/.claude/plugins/marketplaces/every-marketplace/ pull

Impact

Affects all users whose marketplace clone predates the latest release. They get no indication that they're behind — update tells them they're current.

Notes

This may be a Claude Code CLI issue rather than a plugin issue — the update command's marketplace-checking logic lives in the CLI, not the plugin. Filing here for visibility since this is where affected users will look. May also warrant reporting to Anthropic.

Workaround

git -C ~/.claude/plugins/marketplaces/every-marketplace/ pull
claude plugins update compound-engineering@every-marketplace