From 035683436e90d0d9aa4b952fd3f894424a0efbcd Mon Sep 17 00:00:00 2001 From: Ziy1-Tan Date: Fri, 17 Apr 2026 10:40:03 +0800 Subject: [PATCH] revert: drop CHANGELOG entry to avoid merge conflicts --- CHANGELOG.md | 1 - 1 file changed, 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c2baa9f7ec7..996dd8f9b3f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -61,7 +61,6 @@ Docs: https://docs.openclaw.ai ### Fixes -- Config/redaction: redact credentials embedded in `browser.cdpUrl` and `browser.profiles.*.cdpUrl` config paths so query tokens and HTTP Basic auth userinfo are no longer returned in plaintext by `config.get` responses. (#67656) Thanks @Ziy1-Tan. - Gateway/tools: anchor trusted local `MEDIA:` tool-result passthrough on the exact raw name of this run's registered built-in tools, and reject client tool definitions whose names normalize-collide with a built-in or with another client tool in the same request (`400 invalid_request_error` on both JSON and SSE paths), so a client-supplied tool named like a built-in can no longer inherit its local-media trust. (#67303) - Agents/replay recovery: classify the provider wording `401 input item ID does not belong to this connection` as replay-invalid, so users get the existing `/new` session reset guidance instead of a raw 401-style failure. (#66475) Thanks @dallylee. - Gateway/webchat: enforce localRoots containment on webchat audio embedding path [AI-assisted]. (#67298) Thanks @pgondhi987.