Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• fcec2e364d fix(matrix): keep plugin register sync while bootstrapping crypto runtime (#31989) Peter Steinberger 2026-03-02 19:32:47 +00:00
• 66c1da45d4 matrix: bootstrap crypto runtime when npm scripts are skipped bmendonca3 2026-03-02 10:46:37 -07:00
• dbbd41a2ed fix(security): harden file installs and race-path tests Peter Steinberger 2026-03-02 19:29:17 +00:00
• e1bc5cad25 fix(outbound): harden plain-text HTML sanitization paths (#32034) Peter Steinberger 2026-03-02 19:27:50 +00:00
• 62d0cfeee7 fix(delivery): strip HTML tags for plain-text messaging surfaces AytuncYildizli 2026-03-02 19:43:12 +03:00
• a19a7f5e6e feat(security): Harden Docker browser container chromium flags (#23889) (#31504) Vincent Koc 2026-03-02 11:28:27 -08:00
• ea1fe77c83 fix: normalize coding-plan providers in auth order validation Peter Steinberger 2026-03-02 19:25:42 +00:00
• d486b0a925 fix(telegram): scope command-sync hash cache by bot identity (#32059) Peter Steinberger 2026-03-02 19:24:16 +00:00
• 10fb632c9e fix: skip Telegram command sync when menu is unchanged (#32017) scoootscooob 2026-03-02 10:58:48 -08:00
• 4a2329e0af fix: add changelog credit for fsPolicy image/pdf propagation (#31882) (thanks @justinhuangcode) Peter Steinberger 2026-03-02 19:24:16 +00:00
• 14baadda2c fix(tools): honor fsPolicy.workspaceOnly in image/pdf tool localRoots justinhuangcode 2026-03-02 16:18:02 +00:00
• aab87ec880 fix(agents): scope volcengine-plan/byteplus-plan auth lookup to profile resolution justinhuangcode 2026-03-02 18:25:35 +00:00
• a71b8d23be fix: add changelog credit for openrouter x-ai reasoning guard (#32054) (thanks @scoootscooob) Peter Steinberger 2026-03-02 19:20:01 +00:00
• 6c7d012320 fix(openrouter): skip reasoning.effort injection for x-ai/grok models scoootscooob 2026-03-02 10:52:32 -08:00
• 0956b599e1 fix: harden slack debounce key routing and ordering (#31951) (thanks @scoootscooob) Peter Steinberger 2026-03-02 19:18:10 +00:00
• d4b20f5295 fix(slack): scope debounce key by message timestamp to prevent cross-thread collisions scoootscooob 2026-03-02 09:11:17 -08:00
• 07eaeb7350 test(perf): reduce per-case setup in script and git-hook tests Peter Steinberger 2026-03-02 19:16:33 +00:00
• 83ec545bed test(perf): trim repeated setup in cron memory and config suites Peter Steinberger 2026-03-02 19:16:28 +00:00
• 6add2bcc15 test(process): replace no-output timer subprocess with spawn mock Peter Steinberger 2026-03-02 19:16:18 +00:00
• fbb343ab30 fix: add changelog credit for heartbeat model reload (#32046) (thanks @stakeswky) Peter Steinberger 2026-03-02 19:13:46 +00:00
• e1e93d932f fix(gateway): restart heartbeat on model config changes User 2026-03-03 02:42:32 +08:00
• ee68fa86b5 fix: harden plugin command registration + telegram menu guard (#31997) (thanks @liuxiaopai-ai) Peter Steinberger 2026-03-02 19:04:19 +00:00
• 0958d11478 fix(telegram): guard malformed native menu specs liuxiaopai-ai 2026-03-03 01:52:31 +08:00
• ed55b63684 fix: add regression for memory-lancedb dimensions pass-through (#32036) (thanks @scotthuang) Peter Steinberger 2026-03-02 19:01:53 +00:00
• 31bc2cc202 fix(memory-lancedb): pass dimensions to embedding API call scotthuang 2026-03-03 01:59:06 +08:00
• c146748d7a fix: add changelog for mentions/slack null-safe guards (#31865) (thanks @stone-jin) Peter Steinberger 2026-03-02 18:59:55 +00:00
• 2a98fd3d0b fix(slack): guard against undefined text in includes calls during mention handling stone-jin 2026-03-03 00:02:48 +08:00
• ce4faedad6 fix: add changelog for HTTP 529 failover classification (#31854) (thanks @bugkill3r) Peter Steinberger 2026-03-02 18:58:50 +00:00
• 1ef9a2a8ea fix: handle HTTP 529 (Anthropic overloaded) in failover error classification Saurabh 2026-03-02 21:03:37 +05:30
• 84d9b64326 fix: add changelog for exact voice webhook path match (#31930) (thanks @afurm) Peter Steinberger 2026-03-02 18:57:27 +00:00
• 99392f9868 chore: keep #31930 scoped to voice webhook path fix Peter Steinberger 2026-03-02 18:56:56 +00:00
• 662f389f45 Tests: isolate webhook path suite and reset cron auth state Andrii Furmanets 2026-03-02 20:02:52 +02:00
• 3bd0505433 Voice Call: enforce exact webhook path match Andrii Furmanets 2026-03-02 18:51:52 +02:00
• dde43121c0 fix(deps): add strip-ansi runtime dependency SidQin-cyber 2026-02-28 10:30:43 +08:00
• 6a5041f3ff test(exec): deflake no-output timeout heartbeat scenario Peter Steinberger 2026-03-02 18:41:27 +00:00
• bcb1eb2f03 perf(test): speed up setup and config path resolution Peter Steinberger 2026-03-02 18:41:19 +00:00
• 842087319b perf(logging): skip config/fs work in default silent test path Peter Steinberger 2026-03-02 18:41:08 +00:00
• 5c1eb071ca fix(whatsapp): restore direct inbound metadata for relay agents (#31969) Lucenx9 2026-03-02 19:40:04 +01:00
• 4030de6c73 fix(cron): move session reaper to finally block so it runs reliably (#31996) scoootscooob 2026-03-02 10:38:59 -08:00
• c9558cdcd7 fix(launchd): set restrictive umask in gateway plist liuxiaopai-ai 2026-03-03 02:12:08 +08:00
• 740bb77c8c fix(reply): prefer provider over surface for run channel fallback liuxiaopai-ai 2026-03-03 00:14:59 +08:00
• 63734df3b0 fix(doctor): resolve false positive for local memory search when no explicit modelPath (#32014) Adhish Thite 2026-03-03 00:05:40 +05:30
• 534168a7a7 fix: add changelog entry for config-form secret union (#31866) (thanks @ningding97) Peter Steinberger 2026-03-02 18:34:56 +00:00
• 9c1312b5e4 fix(ui): handle SecretInput union in config form analyzer ningding97 2026-03-03 00:03:19 +08:00
• 1727279598 fix(browser): default to openclaw profile when unspecified (#32031) Mark L 2026-03-03 02:34:37 +08:00
• d52e5e1d85 fix: add regression tests for telegram token guard (#31973) (thanks @ningding97) Peter Steinberger 2026-03-02 18:33:05 +00:00
• c1c20491da fix(telegram): guard token.trim() against undefined to prevent startup crash ningding97 2026-03-03 01:31:45 +08:00
• d21cf44452 fix(slack): remove message.channels/message.groups handlers that crash Bolt 4.6 (#32033) Maho 2026-03-02 13:32:42 -05:00
• 738f5d4533 skills: make sherpa-onnx-tts bin ESM-compatible bmendonca3 2026-03-02 10:22:49 -07:00
• a8fe8b6bf8 test(guardrails): exclude suite files and harden auth temp identity naming Peter Steinberger 2026-03-02 18:21:00 +00:00
• 82f01d6081 perf(runtime): reduce startup import overhead in logging and schema validation Peter Steinberger 2026-03-02 18:20:51 +00:00
• 41c8734afd fix(gateway): move plugin HTTP routes before Control UI SPA catch-all (#31885) Sid 2026-03-03 02:16:14 +08:00
• cf5702233c docs(security)!: document messaging-only onboarding default and hook/model risk Peter Steinberger 2026-03-02 18:15:43 +00:00
• 718d418b32 fix(daemon): harden launchd plist with umask 077 (#31919) Mark L 2026-03-03 02:13:41 +08:00
• 16df7ef4a9 feat(onboarding)!: default tools profile to messaging Peter Steinberger 2026-03-02 18:12:03 +00:00
• 9b8e642475 Config: newline-join sandbox setupCommand arrays (#31953) Mark L 2026-03-03 02:11:32 +08:00
• 8b27582509 fix(cli): apply --profile before dotenv bootstrap in runCli (#31950) bmendonca3 2026-03-02 11:09:45 -07:00
• a6489ab5e9 fix(agents): cap openai-completions tool call ids to provider-safe format (#31947) bmendonca3 2026-03-02 11:08:20 -07:00
• 83c8406f01 refactor(security): split gateway auth suites and share safe write path checks Peter Steinberger 2026-03-02 18:06:58 +00:00
• 602f6439bd test(memory): stabilize windows qmd spawn expectation Peter Steinberger 2026-03-02 18:06:01 +00:00
• 1c9deeda97 refactor: split webhook ingress and policy guards Peter Steinberger 2026-03-02 18:02:10 +00:00
• fc0d374390 test(perf): drop duplicate gateway config patch validation case Peter Steinberger 2026-03-02 18:00:11 +00:00
• 0ebe0480fa test(perf): replace relay fixed sleeps with condition waits Peter Steinberger 2026-03-02 17:55:47 +00:00
• 8ae8056622 test(perf): trim telegram webhook artificial delay windows Peter Steinberger 2026-03-02 17:48:36 +00:00
• 54382a66b4 test(perf): bypass matrix send queue delay in send tests Peter Steinberger 2026-03-02 17:46:22 +00:00
• d7ae61c412 test(gateway): fix trusted-proxy control-ui auth test origin config Peter Steinberger 2026-03-02 17:45:20 +00:00
• b07589642d test(perf): remove redundant acpx healthy-command case Peter Steinberger 2026-03-02 17:41:45 +00:00
• 26b8e6d510 test(perf): avoid cron min-refire delay in auto-run coverage Peter Steinberger 2026-03-02 17:41:39 +00:00
• e339c75d5d style(docs): format faq markdown spacing Peter Steinberger 2026-03-02 17:38:06 +00:00
• 7dac9b05dd fix(security): harden zip write race handling Peter Steinberger 2026-03-02 17:38:03 +00:00
• eb35fb745d docs: remove provider recommendation language Peter Steinberger 2026-03-02 17:33:35 +00:00
• b9e820b7ed test(perf): cut exec approval metadata test timeout Peter Steinberger 2026-03-02 17:32:59 +00:00
• aee27d0e38 refactor(security): table-drive wrapper approval pinning tests Peter Steinberger 2026-03-02 17:30:41 +00:00
• 34ff873a7e test(perf): trim fixed waits in relay and startup tests Peter Steinberger 2026-03-02 17:30:22 +00:00
• 310dd24ce3 test(perf): clean acpx runtime fixtures at suite end Peter Steinberger 2026-03-02 17:30:17 +00:00
• d4bf07d075 refactor(security): unify hardened install and fs write flows Peter Steinberger 2026-03-02 17:23:24 +00:00
• d3e8b17aa6 fix: harden webhook auth-before-body handling Peter Steinberger 2026-03-02 17:20:46 +00:00
• dded569626 fix(security): preserve system.run wrapper approval semantics Peter Steinberger 2026-03-02 17:20:52 +00:00
• 104d32bb64 fix(security): unify root-bound write hardening Peter Steinberger 2026-03-02 17:11:04 +00:00
• be3a62c5e0 test(perf): defer delivery queue fixture cleanup to suite end Peter Steinberger 2026-03-02 17:10:49 +00:00
• 193ad2f4f0 fix: handle PowerShell execution policy on Windows install (#24794) Hiren Thakore 2026-03-02 12:09:01 -05:00
• a0e11e63fe docs(faq): add Windows exec encoding troubleshooting (#30736) Dalomeve 2026-03-03 01:08:26 +08:00
• 07b16d5ad0 fix(security): harden workspace bootstrap boundary reads Peter Steinberger 2026-03-02 17:07:26 +00:00
• 67b2dde7c5 Docs: add WSL2 boot auto-start guide (#31616) Mark L 2026-03-03 01:07:15 +08:00
• 7a55a3ca07 fix(install): correct Windows PATH troubleshooting docs (#28102) Glucksberg 2026-03-02 13:07:07 -04:00
• 11562c452a test(perf): avoid unused heartbeat fixture file writes Peter Steinberger 2026-03-02 17:01:34 +00:00
• eb2e20c994 fix(ui): preserve margin-top: 0 for onboarding mode Val Alexander 2026-03-02 09:36:08 -06:00
• 24a13c05b3 fix(ui): add mobile responsive margins and overflow fallback Val Alexander 2026-03-02 09:21:45 -06:00
• 20c36f7e84 fix(ui): prevent config page save button from being clipped by overflow SidQin-cyber 2026-03-02 21:51:27 +08:00
• db7a8a6982 test(perf): reuse delivery queue suite temp root Peter Steinberger 2026-03-02 16:55:09 +00:00
• 4a80311628 refactor(security): split sandbox media staging and stream safe copies Peter Steinberger 2026-03-02 16:53:10 +00:00
• 7a7eee920a refactor(gateway): harden plugin http route contracts Peter Steinberger 2026-03-02 16:47:51 +00:00
• 33e76db12a refactor(gateway): scope ws origin fallback metrics to runtime Peter Steinberger 2026-03-02 16:46:46 +00:00
• 9a68590385 refactor(logging): extract bounded regex redaction util Peter Steinberger 2026-03-02 16:46:38 +00:00
• 031bf0c6c0 refactor(security): split safe-regex parse and bounded matching Peter Steinberger 2026-03-02 16:46:31 +00:00
• 8611fd67b5 test(perf): remove duplicate bundled memory slot loader case Peter Steinberger 2026-03-02 16:46:09 +00:00
• 14c93d2646 docs(changelog): add skills archive extraction hardening note Peter Steinberger 2026-03-02 16:44:46 +00:00
• 1b462ed174 fix(test): use NTFS junctions and platform guards for symlink tests on Windows (openclaw#28747) thanks @arosstale Artale 2026-03-02 17:45:19 +01:00
• 18f8393b6c fix: harden sandbox writes and centralize atomic file writes Peter Steinberger 2026-03-02 16:44:46 +00:00
• 14e4575af5 docs(changelog): note gateway and regex hardening Peter Steinberger 2026-03-02 16:37:26 +00:00