Peter Steinberger
0fa034ed6d
fix(discord): reject unsafe rate limit headers
2026-05-29 10:17:42 -04:00
Peter Steinberger
9ae38ac821
fix(discord): validate error code integers
2026-05-29 10:13:15 -04:00
Vincent Koc
0902ee723b
fix(provider): bound Vydra and Comfy media downloads
2026-05-29 16:12:23 +02:00
Peter Steinberger
c093e4508d
fix(tts): centralize directive number parsing
2026-05-29 10:05:37 -04:00
joshavant
65f6e53e62
test(release): repair live matrix expectations
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
13926e622d
fix(exec): include mode in doctor policy warnings
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
5814f7e1d3
ci: relax native OpenAI live proof timing
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
9945060c7d
fix(exec): resolve auto approvals as runtime
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
941329b2e5
test(e2e): repair release docker smoke fixtures
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
209732535f
fix(exec): align release validation checks
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
47c578034a
fix(exec): align release validation surfaces
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
9e7110bb7d
fix(exec): harden auto-review prompt boundaries
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
c82d7011b5
fix(exec): honor node runtime policy for auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
2bfc735050
fix(exec): bind node auto-review commands
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
ab84c8cc09
fix(exec): bind gateway auto-review commands
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
0aed1641c4
fix(exec): fail closed on unknown node approval policy
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
7652eda80c
test(node-host): prove suppression edits bypass auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
49ab52894a
fix(exec): honor node approval floors before auto-review
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
765477d77a
fix(codex): preserve read-only approval floors
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
b5f8191887
fix(codex): honor exec approval floors in bindings
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
adca9a7523
fix(exec): layer session exec overrides
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
a314a923bd
fix(exec): forward auto mode defaults
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
joshavant
80227005a0
feat(exec): add normalized auto mode
...
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com >
Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com >
2026-05-30 00:04:06 +10:00
Peter Steinberger
4925f84219
fix(minimax): validate directive numbers
2026-05-29 09:58:21 -04:00
Vincent Koc
b9d609edfe
refactor: share bounded release response reader
2026-05-29 15:54:36 +02:00
Peter Steinberger
af3e354ff8
fix(signal): validate reaction message ids
2026-05-29 09:53:20 -04:00
Peter Steinberger
4ef63646d2
fix(discord): validate deploy retry-after
2026-05-29 09:50:21 -04:00
Peter Steinberger
8a4573917d
fix(sandbox): validate remote hardlink counts
2026-05-29 09:47:33 -04:00
Vincent Koc
67697fa309
test: repair current main extension checks
2026-05-29 15:45:12 +02:00
Peter Steinberger
d9db23dc2f
fix(sandbox): clamp unsafe stat sizes
2026-05-29 09:43:14 -04:00
Vincent Koc
8b12be05ec
refactor: share outbound mirror block text
2026-05-29 15:38:11 +02:00
zhang-guiping
b3c7ef6e62
fix(config): preserve empty plugin allowlist ( #87883 )
...
Summary:
- The PR changes plugin auto-enable materialization so an explicit empty `plugins.allow` stays empty while non-empty restrictive allowlists are still extended, and adds a regression test.
- PR surface: Source +3, Tests +17. Total +20 across 2 files.
- Reproducibility: yes. Source inspection of current main shows an empty array reaches `ensurePluginAllowlisted`, and the linked report gives a concrete `doctor --fix` config path that matches that code.
Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.
Validation:
- ClawSweeper review passed for head c06837f5dd .
- Required merge gates passed before the squash merge.
Prepared head SHA: c06837f5dd
Review: https://github.com/openclaw/openclaw/pull/87883#issuecomment-4570537738
Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com >
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com >
2026-05-29 13:37:50 +00:00
Peter Steinberger
80baa49342
fix(telegram): validate dispatch thread ids
2026-05-29 09:35:43 -04:00
Vincent Koc
a19225343b
fix(video): bound remaining provider downloads
2026-05-29 15:30:11 +02:00
Peter Steinberger
b022c6d770
fix(telegram): validate cached thread ids
2026-05-29 09:28:17 -04:00
Ayaan Zaidi
82c0a60777
fix(trajectory): bound runtime source ordering state
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
6361c46fe2
fix(trajectory): assign file-global runtime source order
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
d879340ed9
fix(trajectory): preserve runtime window order
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
39e3daa168
fix(trajectory): preserve safe path checks for window writes
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
538b405fdd
fix(trajectory): merge concurrent runtime window flushes
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
ac605a463a
fix(trajectory): keep latest runtime capture within cap
2026-05-29 18:55:53 +05:30
Ayaan Zaidi
f17c472f26
fix(trajectory): keep latest runtime capture within cap
2026-05-29 18:55:53 +05:30
Peter Steinberger
9a1b5f9b68
fix(feishu): validate merge-forward timestamps
2026-05-29 09:22:33 -04:00
Vincent Koc
f019e27c1d
refactor: share gateway client readiness helpers
2026-05-29 15:19:29 +02:00
Peter Steinberger
8f22632a29
fix(msteams): validate bot attachment content length
2026-05-29 09:18:40 -04:00
Peter Steinberger
7fb91317ba
fix(feishu): validate thread message timestamps
2026-05-29 09:15:07 -04:00
Peter Steinberger
001da78fab
fix(feishu): validate message create time
2026-05-29 09:12:06 -04:00
Peter Steinberger
5fbeffd56b
fix(imessage): validate chat list ids
2026-05-29 09:08:39 -04:00
Peter Steinberger
3142c97c22
fix(google): validate gemini retry timeout env
2026-05-29 09:05:38 -04:00
Peter Steinberger
58e82d91ba
fix(media): centralize content length parsing
2026-05-29 09:02:21 -04:00