Gustavo Madeira Santana
0fdb55c4e4
Docs: refresh diffs plugin docs
2026-04-02 21:47:55 -04:00
Gustavo Madeira Santana
ebc9784f26
docs: fix Matrix plugin docs
2026-04-02 21:47:34 -04:00
Gustavo Madeira Santana
78a842d055
fix(matrix): align IDB snapshot lock timing
2026-04-02 21:44:08 -04:00
Gustavo Madeira Santana
1efa923ab8
Matrix: add native exec approvals ( #58635 )
...
Merged via squash.
Prepared head SHA: d9f048e827
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-02 21:08:54 -04:00
Gustavo Madeira Santana
9e2cbf9a30
chore: tighten pr push script
2026-04-02 20:56:51 -04:00
Alejandro Martinez
3a91a4f8d4
fix(matrix): add advisory file locking to IDB crypto persistence ( #59851 )
...
Merged via squash.
Prepared head SHA: 392e411ffd
Co-authored-by: al3mart <11448715+al3mart@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-02 20:19:40 -04:00
Alejandro Martinez
b894ca6702
fix(matrix): allow secret storage recreation during repair bootstrap ( #59846 )
...
Merged via squash.
Prepared head SHA: 06b10f61eb
Co-authored-by: al3mart <11448715+al3mart@users.noreply.github.com >
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com >
Reviewed-by: @gumadeiras
2026-04-02 20:11:58 -04:00
Hyojin Kwak
739ed1bf29
fix(msteams): preserve channel reply threading in proactive fallback ( #55198 )
...
When a thread reply's turn context is revoked and falls back to proactive messaging, the normalized conversation ID lost the thread suffix, causing replies to land in the channel root instead of the original thread.
Reconstructs the threaded conversation ID (`;messageid=<activityId>`) for channel conversations in the proactive fallback path, while correctly leaving group chat conversations flat.
Fixes #27189
Thanks @hyojin
2026-04-02 18:27:13 -05:00
Josh Lehman
ed8d5b3797
fix: add Telegram native progress placeholder opt-in for plugin commands ( #59300 )
...
Merged via squash.
Prepared head SHA: 4f5bc22a89
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-02 15:55:46 -07:00
Bruce MacDonald
5f4077cc7d
fix(ollama): prefer real cloud auth over local marker
2026-04-02 15:51:57 -07:00
Peter Steinberger
64581c655d
test: make plugin activation boundary env agnostic
2026-04-03 05:02:58 +09:00
Peter Steinberger
bff6025bde
test: refresh generated baselines
2026-04-03 04:54:59 +09:00
Peter Steinberger
15b005489d
chore: bump version to 2026.4.3
2026-04-03 04:54:59 +09:00
Peter Steinberger
49f67f54f4
docs: fix task flow release note command
2026-04-03 04:39:13 +09:00
Peter Steinberger
6f67347e00
ci: restore npm token auth for dist-tag promotion
2026-04-02 20:37:49 +01:00
Peter Steinberger
04cf29f613
refactor: speed up whatsapp inbound dispatch tests
2026-04-03 04:34:58 +09:00
Peter Steinberger
694d12a90b
refactor: apply context visibility across channels
2026-04-03 04:34:57 +09:00
Peter Steinberger
35e1605147
feat: add configurable context visibility
2026-04-03 04:34:57 +09:00
Peter Steinberger
d4d2d9e479
ci: move npm promotion into trusted workflow
2026-04-02 20:29:57 +01:00
Peter Steinberger
658f0c5d2d
ci: use oidc token for npm promotion
2026-04-02 20:23:56 +01:00
Peter Steinberger
dbfb13b93a
build: update appcast for 2026.4.2
2026-04-02 20:08:40 +01:00
Vincent Koc
883df8c6a8
fix(plugins): reuse runtime registries for web provider snapshots ( #59865 )
...
* fix(plugins): reuse runtime registries for web providers
* test(plugins): clarify runtime reuse intent
* chore(changelog): note web provider runtime reuse
2026-04-03 04:07:43 +09:00
Agustin Rivera
193fdd6e3b
fix(policy): preserve restrictive tool allowlists ( #58476 )
...
* fix(policy): preserve restrictive tool allowlists
Co-authored-by: David Silva <david.silva@gendigital.com >
* fix(policy): address review follow-ups
* fix(policy): restore additive alsoAllow semantics
* fix(policy): preserve optional tool opt-ins for allow-all configs
* fix(policy): narrow plugin-only allowlist warnings
* fix(policy): add changelog entry
* Revert "fix(policy): add changelog entry"
This reverts commit 4a996bf4ca .
* chore: add changelog for restrictive tool allowlists
---------
Co-authored-by: David Silva <david.silva@gendigital.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 12:55:36 -06:00
Peter Steinberger
9f85595d80
fix: pin anthropic sdk to patched version
2026-04-02 19:50:05 +01:00
Vincent Koc
d34bca3ce6
fix(plugins): reuse runtime registry for provider resolution ( #59856 )
...
* fix(plugins): reuse runtime registry for provider resolution
* test(plugins): align provider runtime helper names
2026-04-03 03:40:24 +09:00
Peter Steinberger
be4be5e783
fix: improve parallels smoke progress
2026-04-02 19:39:23 +01:00
Agustin Rivera
d631326c5e
fix(tailscale): gate test binary override ( #58468 )
...
* fix(tailscale): gate test binary override
* fix(changelog): note tailscale override hardening
* fix(changelog): drop tailscale note from pr
* chore: add changelog for tailscale test binary gating
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 12:39:10 -06:00
Vincent Koc
f32a5b30db
chore(skills): align taskflow skill with runtime
2026-04-03 03:38:02 +09:00
Peter Steinberger
d74a12264a
fix: mirror bedrock runtime dep in root package
v2026.4.2
2026-04-02 19:26:56 +01:00
Vincent Koc
f911bbc353
refactor(plugins): separate activation from enablement ( #59844 )
...
* refactor(plugins): separate activation from enablement
* fix(cli): sanitize verbose plugin activation reasons
2026-04-03 03:22:37 +09:00
Vincent Koc
4aeb0255f3
docs: rename TaskFlow to Task Flow in prose
2026-04-03 03:22:01 +09:00
Vincent Koc
d9c662dc69
docs: restructure automation section as Automation & Tasks
2026-04-03 03:16:51 +09:00
Peter Steinberger
3bd2bbea34
docs: clarify npm release workflow inputs
2026-04-02 19:11:01 +01:00
Peter Steinberger
0ebb69b882
build: set release version to 2026.4.2
2026-04-02 19:09:58 +01:00
Peter Steinberger
38bd525888
test: align strict inline-eval awk denial expectation
2026-04-02 19:09:39 +01:00
Peter Steinberger
209535b7c7
build: make npm release tag configurable
2026-04-02 19:06:37 +01:00
Vincent Koc
bcd61e54e1
docs: fix TaskFlow CLI command path and CLI task notify policy
2026-04-03 03:03:00 +09:00
Peter Steinberger
9f3a26caa6
fix(discord): quiet Carbon reconcile log
2026-04-02 18:55:34 +01:00
Agustin Rivera
49d08382a9
iOS: restrict A2UI action dispatch to trusted canvas URLs ( #58471 )
...
* fix(ios): restrict a2ui bridge trust
* test(ios): cover fragment-strip trust and document raw-string equality
* fix(ios): normalize capability URL before trust comparison in canvas commands
* fix(ios): trim canvas.navigate url before trust comparison
* chore: add changelog for iOS A2UI trust boundary
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:51:09 -06:00
Peter Steinberger
00aa31a30c
docs(changelog): remove duplicate entries
2026-04-02 18:48:27 +01:00
Vincent Koc
7aa22959e4
refactor(tasks): rename registry hooks to observers ( #59829 )
2026-04-03 02:42:59 +09:00
Agustin Rivera
676b748056
Limit connect snapshot metadata to admin-scoped clients ( #58469 )
...
* fix(gateway): gate connect snapshot metadata by scope
* fix(gateway): clarify connect snapshot trust boundary
* fix(gateway): note connect snapshot change in changelog
* fix(gateway): remove changelog changes from PR
* chore: add changelog for scoped gateway snapshot metadata
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:41:47 -06:00
Peter Steinberger
a4a372825e
docs(changelog): reorder unreleased fixes
2026-04-02 18:39:31 +01:00
Peter Steinberger
45c8207ef2
fix(exec): clarify auto routing semantics ( #58897 ) (thanks @vincentkoc)
2026-04-03 02:37:12 +09:00
Vincent Koc
938541999e
Delete docs/internal/codex/2026-03-29-exec-target-override-fix.md
2026-04-03 02:37:12 +09:00
Vincent Koc
5dca81271c
fix(exec): clarify and cover auto host override guard
2026-04-03 02:37:12 +09:00
Vincent Koc
dae6632da1
Security: block exec host overrides under auto target
2026-04-03 02:37:12 +09:00
Agustin Rivera
5874a387ae
fix(windows): reject unresolved cmd wrappers ( #58436 )
...
* fix(windows): reject unresolved cmd wrappers
* fix(windows): add wrapper policy coverage
* fix(windows): document wrapper fallback migration
* fix(windows): drop changelog entry from pr
* chore: add changelog for Windows wrapper fail-closed behavior
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-02 11:35:50 -06:00
Peter Steinberger
3e452f2671
fix: preserve strict inline-eval approval boundaries ( #59780 ) (thanks @luoyanglang)
2026-04-02 18:30:29 +01:00
Peter Steinberger
f03d7c5a4c
refactor: centralize Windows exec invocation
2026-04-02 18:27:53 +01:00