Josh Lehman
12c52963ea
fix: allow cron self-removal in isolated runs ( #73028 )
2026-04-28 18:16:31 -07:00
hcl
46783d41e9
fix(whatsapp): gate pairing access-control on extractable inbound user content ( #73797 ) ( #73823 )
...
Merged via squash.
Prepared head SHA: 61506e1439
Co-authored-by: hclsys <7755017+hclsys@users.noreply.github.com >
Co-authored-by: mcaxtr <7562095+mcaxtr@users.noreply.github.com >
Reviewed-by: @mcaxtr
2026-04-28 22:09:23 -03:00
Peter Steinberger
381c2e1d1a
fix(security): tighten telegram dm audit coverage
2026-04-29 02:04:20 +01:00
Peter Steinberger
a968f4f437
test(parallels): reset macos state after restore
2026-04-29 02:03:26 +01:00
Peter Steinberger
a5824b9d01
fix(ci): stabilize full release validation
2026-04-29 02:00:30 +01:00
Peter Steinberger
28ff82dcda
chore: add Clownfish cloud PR skill
2026-04-29 01:40:04 +01:00
Vincent Koc
b96e7739a9
docs(install/docker): document compose config dir default fallback
...
For 054b2e1b7e : docs/install/docker.md "Storage and persistence" now
records that the bundled docker-compose.yml falls back to
${HOME}/.openclaw (and ${HOME}/.openclaw/workspace for the workspace
mount), or /tmp/.openclaw when HOME is also unset, when
OPENCLAW_CONFIG_DIR / OPENCLAW_WORKSPACE_DIR are not provided. That
matches the new default expressions in the compose file and prevents an
empty-source volume spec on bare environments.
2026-04-28 17:38:25 -07:00
Vincent Koc
293348b429
fix(plugins): prebuild private qa for gauntlet
2026-04-28 17:34:18 -07:00
Vincent Koc
8e5fcfff50
fix(test): stabilize core runtime infra shard
2026-04-28 17:31:35 -07:00
Peter Steinberger
7229ec5e04
fix(ci): pin release validation child ref
2026-04-29 01:30:53 +01:00
Peter Steinberger
ceeb3a7398
ci: dispatch commit reviews on main pushes
2026-04-29 01:27:45 +01:00
pashpashpash
4aa8da3756
Route sensitive group commands to the owner privately ( #73872 )
...
* fix(commands): route sensitive group approvals privately
* fix(commands): require owner private routes
* test(commands): cover owner-derived Telegram diagnostics routing
2026-04-29 09:27:18 +09:00
Peter Steinberger
e94e9347a4
fix(cli): load plugins for local JSON agent runs
2026-04-29 01:25:50 +01:00
Peter Steinberger
c24c8bab13
test(parallels): prefer arm64 mingit downloads
2026-04-29 01:25:08 +01:00
Peter Steinberger
a820a307df
fix(ci): keep postinstall script self-contained
2026-04-29 01:20:37 +01:00
Peter Steinberger
45f3074ee6
fix(cli): skip plugin preload for json agent runs
2026-04-29 01:19:05 +01:00
Peter Steinberger
3286e99bc2
refactor: share docker e2e instance helpers
2026-04-29 01:17:19 +01:00
Peter Steinberger
6249c32826
ci: raise Blacksmith Docker cache caps
2026-04-29 01:14:39 +01:00
Peter Steinberger
03b1731d0f
fix(ci): preserve imported dist chunks after install
2026-04-29 01:13:03 +01:00
Joe LaPenna
054b2e1b7e
fix(docker): add config dir defaults to compose mounts ( #64485 )
...
Merged via squash.
Prepared head SHA: 2c5b954a2c
Reviewed-by: @sallyom
2026-04-28 20:12:24 -04:00
Vincent Koc
fd2625a162
fix(plugins): resolve ClawHub tags in prerelease CI
2026-04-28 17:04:01 -07:00
Vincent Koc
2eac4bacee
test(ci): add kitchen-sink npm plugin prerelease lane
2026-04-28 17:04:01 -07:00
Peter Steinberger
0487cc59f0
fix(bonjour): suppress ciao internal cancellations
...
(cherry picked from commit 27599d319e )
2026-04-29 00:59:56 +01:00
Peter Steinberger
212a32648f
fix(ci): speed up tarball checks and avoid CLI bootstrap
2026-04-29 00:52:45 +01:00
Peter Steinberger
5a0702ecf8
test: add reusable OpenClaw test instance helper
2026-04-29 00:50:55 +01:00
Peter Steinberger
8f4cbbbe66
perf(prompt): stabilize channel prompt suffix
2026-04-29 00:49:57 +01:00
Peter Steinberger
d3683a61c5
fix(bonjour): recover from ciao cancellation
...
(cherry picked from commit c34ba97262 )
2026-04-29 00:49:41 +01:00
AARON AGENT
7dc0041ca9
fix(sandbox): add once option to Docker abort listener ( #58277 )
...
Merged via squash.
Prepared head SHA: 692dd15014
Reviewed-by: @sallyom
2026-04-28 19:47:52 -04:00
Patrick Erichsen
2a7ba582cb
Use kitchen sink for ClawHub plugin E2E ( #73821 )
2026-04-28 16:44:38 -07:00
Vincent Koc
8cca1598d9
fix(plugins): satisfy gauntlet script lint
2026-04-28 16:44:13 -07:00
Vincent Koc
e4cb0f6683
fix(plugins): run gauntlet qa through source cli
2026-04-28 16:44:12 -07:00
Vincent Koc
de3f8af48e
fix(plugins): allow bundled gauntlet install scan
2026-04-28 16:44:12 -07:00
Vincent Koc
dd31a27e71
fix(plugins): run gauntlet against built cli
2026-04-28 16:44:11 -07:00
Vincent Koc
8c9cac244d
fix(plugins): print gauntlet failure details
2026-04-28 16:44:11 -07:00
Vincent Koc
516a91243f
fix(plugins): link gauntlet lifecycle installs
2026-04-28 16:44:11 -07:00
Vincent Koc
a6dfaaeb4e
test(plugins): add gateway gauntlet
2026-04-28 16:44:10 -07:00
Peter Steinberger
ef58307f84
fix(ci): keep video live helper within plugin boundary
2026-04-29 00:40:42 +01:00
Peter Steinberger
b04c9380ed
fix(ci): harden full release live checks
2026-04-29 00:36:49 +01:00
pashpashpash
43fa40a35d
fix(telegram): use owners for exec approvals ( #73852 )
2026-04-29 08:34:46 +09:00
Patrick Erichsen
a235a487d0
docs: add clawhub rescan recovery guidance ( #73414 )
...
* docs: add clawhub rescan recovery guidance
* docs: clarify clawhub rescan wording
2026-04-28 16:34:00 -07:00
imanewstudent
e2b825eba4
fix: add local build context to docker-compose ( #65894 )
...
Merged via squash.
Prepared head SHA: d8ad8d89b7
Reviewed-by: @sallyom
2026-04-28 19:29:30 -04:00
Vincent Koc
9c9dcd4d5d
ci: shard agent runtime codeql quality
...
Add the agent runtime boundary to the CodeQL Critical Quality workflow.
2026-04-28 16:18:33 -07:00
Peter Steinberger
a0f0c964fd
test(ci): tolerate live STT brand drift
2026-04-29 00:11:31 +01:00
Peter Steinberger
d86ad7a61b
test(ci): accept compact codex status output
2026-04-29 00:03:09 +01:00
Joe LaPenna
a3f74410e4
build: ignore generated docker-compose.sandbox.yml ( #64257 )
2026-04-28 19:02:45 -04:00
Peter Steinberger
955b4df093
fix(ci): stabilize full release validation
2026-04-28 23:54:43 +01:00
jinjim
490e6d6dc5
feat(docker): add OPENCLAW_SKIP_ONBOARDING env to skip onboarding during Docker setup ( #55518 )
...
Merged via squash.
Prepared head SHA: 2744ed8b53
Co-authored-by: jinjimz <201528812+jinjimz@users.noreply.github.com >
Co-authored-by: sallyom <11166065+sallyom@users.noreply.github.com >
Reviewed-by: @sallyom
2026-04-28 18:50:51 -04:00
Peter Steinberger
bcc6a2400d
fix(gateway): make handshake timeout configurable
2026-04-28 23:50:24 +01:00
Peter Steinberger
75df09b9ec
perf(plugins): cache runtime mirror file decisions
2026-04-28 23:40:43 +01:00
pashpashpash
6ce1058296
Wire diagnostics through the core chat command ( #72936 )
...
* feat: wire codex diagnostics feedback
* fix: harden codex diagnostics hints
* fix: neutralize codex diagnostics output
* fix: tighten codex diagnostics safeguards
* fix: bound codex diagnostics feedback output
* fix: tighten codex diagnostics throttling
* fix: confirm codex diagnostics uploads
* docs: clarify codex diagnostics add-on
* fix: route diagnostics through core command
* fix: tighten diagnostics authorization
* fix: pin diagnostics to bundled codex command
* fix: limit owner status in plugin commands
* fix: scope diagnostics confirmations
* fix: scope codex diagnostics cooldowns
* fix: harden codex diagnostics ownership scopes
* fix: harden diagnostics command trust and display
* fix: keep diagnostics command trust internal
* fix: clarify diagnostics exec boundary
* fix: consume codex diagnostics confirmations atomically
* test: include codex diagnostics binding metadata
* test: use string codex binding timestamps
* fix: keep reserved command trust host-only
* fix: harden diagnostics trust and resume hints
* wire diagnostics through exec approval
* fix: keep diagnostics tests aligned with bundled root trust
* fix telegram diagnostics owner auth
* route trajectory exports through exec approval
* fix trajectory exec command encoding
* fix telegram group owner auth
* fix export trajectory approval hardening
* fix pairing command owner bootstrap
* fix telegram owner exec approvals
* fix: make diagnostics approval flow pasteable
* fix: route native sensitive command followups
* fix: invoke diagnostics exports with current cli
* fix: refresh exec approval protocol models
* fix: list codex diagnostics from thread bindings
* fix: fold codex diagnostics into exec approval
* fix: preserve diagnostics approval line breaks
* docs: clarify diagnostics codex workflow
2026-04-29 07:40:37 +09:00