Vincent Koc
14ebfc88c4
fix(release): avoid caching GitHub errors
2026-07-10 17:47:32 -07:00
Vincent Koc
14a8cdc7c6
fix(release): keep Android notes aligned
2026-07-10 17:47:32 -07:00
Vincent Koc
0c16193bec
chore(release): satisfy parallel runner lint
2026-07-10 17:47:32 -07:00
Vincent Koc
80d44bf000
feat(release): add shadow preparation controller
2026-07-10 17:47:32 -07:00
Vincent Koc
a835584537
perf(release): cache changelog GitHub discovery
2026-07-10 17:47:32 -07:00
Vincent Koc
897a66881d
perf(release): parallelize shrinkwrap generation
2026-07-10 17:47:32 -07:00
Vincent Koc
82461afedb
perf(release): parallelize scoped preflight tasks
2026-07-10 17:47:32 -07:00
Vincent Koc
d801384b3b
feat(release): add atomic version preparation
2026-07-10 17:47:32 -07:00
Vincent Koc
2841edf01e
fix(ci): pin Kova auth startup fixes ( #104002 )
2026-07-10 17:42:08 -07:00
Vincent Koc
f4b3a4841f
fix(release): accept Kova collector-only phases ( #104008 )
2026-07-10 17:31:42 -07:00
Peter Steinberger
5f7a67f186
fix(release): avoid token-shaped Claude live probe ( #103994 )
2026-07-11 01:03:30 +01:00
Peter Steinberger
a0354e5243
fix(onboarding): make fresh AI setup reliable and transparent ( #103962 )
...
* fix(onboarding): harden inference setup
* fix(mac): preserve setup request cancellation
* test(crestodian): align setup audit expectation
* test(crestodian): cover approval persistence warning
* fix(crestodian): preserve setup credentials and success
* chore(pr): leave changelog to release flow
* fix(onboarding): repair native CI gates
2026-07-10 23:44:53 +01:00
Peter Steinberger
49941fab6d
fix(ci): keep hydrate-github pnpm shims writable ( #103971 )
2026-07-10 23:36:10 +01:00
soldforaloss
0e0c922cc5
fix: preserve current Node for node.exe env wrappers ( #103907 )
...
* fix: preserve current Node for node.exe env wrappers
* fix(scripts): preserve Windows Node aliases
* chore: keep contributor PR release-note only
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 23:30:57 +01:00
Vincent Koc
b0e3c85a61
fix(release): bind publish children to trusted SHAs ( #103913 )
...
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 23:25:26 +01:00
Vincent Koc
b1e688c657
fix(release): consume Kova model contract ( #103966 )
2026-07-10 15:17:15 -07:00
Vincent Koc
022dd9dc27
fix(release): unblock Meta npm bootstrap publication ( #103951 )
...
* fix(release): isolate Meta npm bootstrap
* test(release): assert OIDC npm version guard
2026-07-10 14:50:00 -07:00
Peter Steinberger
4cb9cc689e
fix(maint): avoid stale PR sync evidence ( #103944 )
2026-07-10 22:05:23 +01:00
Peter Steinberger
b5f3fe900f
fix(release): pack local AI runtime for release checks ( #103941 )
2026-07-10 21:59:59 +01:00
Peter Steinberger
9b1c36d23c
fix: prevent exec approval revocation races ( #103515 )
...
* fix(security): serialize exec approval mutations
* fix(security): preserve additive approval writes
* test(cli): expect normalized approval shape
* fix(security): preserve exec approval compatibility
* test(security): exercise locked approval initialization
* test(security): mock serialized approval helpers
* test(exec): derive enforced command path from plan
* fix(gateway): always return approval CAS conflicts
* fix(macos): serialize exec approvals writes
* fix(security): repair approval build errors
* fix(security): serialize exec approval mutations
* fix(security): fail closed on approval persistence errors
* test(security): cover detached approval persistence failures
* fix(security): harden exec approval state
* style(macos): format exec approval sources
* fix(security): complete exec approval hardening
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
* fix(macos): preserve approved login-shell semantics
* fix(macos): keep login shell approvals one-shot
* fix(security): linearize exec authorization
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
* fix(security): preserve durable approval basis
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
* fix(security): bind exec grants to current policy
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
* test(security): fix exec revocation fixtures
* test(security): align gateway approval fixtures
* fix(macos): return approval decisions
* chore(i18n): sync native approval strings
* test(security): align approval hardening fixtures
* test(node): authorize completed event fixture
* test(security): fix approval decision fixtures
* test(security): await durable approval visibility
* fix(exec): preserve concurrent approval grants
* fix(exec): address exact-head CI failures
* fix(exec): preserve concurrent approval promotions
* fix(exec): make Swift shutdown state explicit
* test(macos): handle approval read failures
* fix(macos): harden approval socket paths
* fix(macos): preserve exact shell payload bytes
* test(macos): make approval fixtures explicit
* test(macos): fix approval suite compilation
* fix(macos): bound approval socket JSONL reads
* chore: move exec approval note to release process
* chore: move exec approval note to release process
---------
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com >
2026-07-10 21:35:05 +01:00
Vincent Koc
54cc90b1b1
fix(release): publish ClawHub bootstrap artifacts immutably ( #103809 )
...
* fix(release): harden ClawHub bootstrap
* fix(release): centralize publication artifact verification
* fix(release): harden publication artifact verification
* fix(release): lock ClawHub bootstrap toolchain
* test(release): assert locked ClawHub binary
* fix(release): pack with trusted ClawHub harness
* fix(release): bound beta verifier artifact reads
* fix(release): bind target and tooling identities
* fix(release): stabilize signed package ordering
* fix(release): bind ClawHub pretag proof
* fix(release): bind ClawHub OIDC readback
* fix(release): bind ClawHub OIDC readback
2026-07-10 13:33:20 -07:00
Peter Steinberger
fece8c9f54
fix(release): keep validation evidence immutable across reruns ( #103906 )
...
* fix(release): bind validation evidence to exact attempts
* test(release): cover exact validation attempts
2026-07-10 20:16:19 +01:00
Vincent Koc
69f8198ba3
fix(release): keep no-push Docker images validation-only ( #103891 )
...
* fix(release): make no-push Docker artifacts portable
* fix(release): keep no-push images validation-only
2026-07-10 12:02:57 -07:00
Vincent Koc
2a1d6e49d5
fix(ci): run Telegram release QA from trusted harness ( #103207 )
...
* fix(ci): use trusted Telegram QA harness
* fix(ci): restrict trusted Telegram QA candidate
* fix(ci): isolate trusted Telegram QA candidate
* fix(ci): harden Telegram QA process boundary
* fix(ci): pass Telegram QA release gates
* test(qa): stub Telegram env explicitly
* fix(ci): harden Telegram release QA boundary
* test(ci): harden trusted workflow and memory guards
2026-07-10 11:32:24 -07:00
Peter Steinberger
b91e117dcd
fix(ci): select full Kova performance reports ( #103863 )
2026-07-10 19:01:30 +01:00
Peter Steinberger
b597a8d364
fix(release): restore prerelease and release validation startup ( #103834 )
...
* fix(release): split image publication from validation
* fix(ci): honor install smoke caller input
* fix(ci): harden Docker rerun targeting
2026-07-10 18:46:08 +01:00
Peter Steinberger
906f1b816f
fix(ci): update Kova performance model owners ( #103839 )
2026-07-10 18:08:37 +01:00
Peter Steinberger
050177c784
fix(clawdock): scope confirmation response ( #103837 )
2026-07-10 18:06:06 +01:00
Dallin Romney
0b9c2e6f95
fix(qa): simplify smoke lanes and isolate fanout ( #102262 )
...
* fix(qa): simplify smoke lanes and isolate fanout
* ci: re-enable repaired QA smoke lanes
* ci: split Crabline smoke into three shards
* ci: eliminate repeated QA smoke builds
* fix(qa): focus control ui smoke scenario
* ci(qa): remove smoke worker launch delay
* ci(qa): bound automatic smoke coverage
2026-07-10 09:48:40 -07:00
Peter Steinberger
c08599c17b
fix(clawdock): preserve sourced zsh PATH ( #103805 )
...
Co-authored-by: wenhua <lshgdut@qq.com >
2026-07-10 17:46:08 +01:00
Vincent Koc
90322074dd
fix(ci): validate Kova bin-only dependency ( #103810 )
2026-07-10 09:41:01 -07:00
Vincent Koc
daa653c5cc
ci(release): add plugin npm artifact preflight ( #103759 )
...
* ci(release): add plugin npm preflight proof
* fix(release): bind plugin preflight package evidence
* fix(release): harden plugin preflight trust
* fix(release): bind plugin registry readback
* fix(release): retry npm packument bodies
* fix(release): retry malformed npm packuments
* fix(release): satisfy npm preflight lint
2026-07-10 09:39:10 -07:00
Peter Steinberger
e43f225c81
fix(release): prevent stale beta validation evidence ( #103798 )
...
* fix(release): ignore nested squash revert markers
* fix(release): preserve squash revert targets
* docs(release): state installer doctor contract
* fix(release): recognize conventional squash reverts
2026-07-10 17:26:56 +01:00
Vincent Koc
afd0c60f15
fix(ci): bind release status artifacts to run attempts ( #103772 )
...
* fix(ci): bind release status artifacts to run attempts
* test(ci): align release summary contract assertions
* fix(ci): preserve Tideclaw advisory status policy
2026-07-10 09:06:42 -07:00
Vincent Koc
155e196e22
fix(release): preserve beta validation evidence ( #103796 )
...
* fix(release): proxy upgrade fixtures to npm
(cherry picked from commit 30f54a5fe10782a94452ac54f80430steipete@gmail.com >
2026-07-10 09:05:14 -07:00
Peter Steinberger
366d09bcc7
fix(ci): harden release performance evidence ( #103790 )
2026-07-10 16:59:10 +01:00
Peter Steinberger
5635d74ecc
fix(release): contain installer artifact restores ( #103608 )
2026-07-10 08:27:24 -07:00
Vincent Koc
cbe3731f77
fix(release): make validation proof no-write ( #103737 )
...
* fix(release): make validation proof no-write
* test(release): align no-write workflow contracts
2026-07-10 08:18:44 -07:00
Peter Steinberger
48b8dff530
perf(test): accelerate PR lock timing proofs
2026-07-10 11:02:57 -04:00
Peter Steinberger
1439646f19
fix(ci): harden maturity scorecard publication ( #103722 )
2026-07-10 15:25:15 +01:00
JC
59e95fe3fd
feat: support GPT-5.6 Ultra across OpenClaw and Codex runtimes ( #98021 )
...
* feat: support GPT-5.6 Ultra across agent runtimes
Co-authored-by: J Cai <anyech@gmail.com >
* fix: keep harness projections discovery-free
* fix(codex): mirror V2 native subagent tasks
* chore: refresh plugin SDK surface budgets
* test: expose Ultra wire effort proof
* test(cron): avoid hoisted mock initialization race
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-10 15:23:24 +01:00
Peter Steinberger
ea6aa1dc75
fix(pr): prevent same-PR operations from overlapping ( #103669 )
...
* fix(pr): serialize operations per pull request
* fix(pr): tighten supervisor error handling
2026-07-10 13:34:03 +01:00
Peter Steinberger
a238dead67
fix(docker): package selected external plugins in source-built images ( #103629 )
...
* build(docker): package selected external plugins
* test(docker): auto-clean plugin fixture
* fix(docker): preserve selected image provenance
* fix(docker): accept manifest-only plugin selections
* fix(docker): resolve selected plugin manifest ids
* fix(docker): isolate resolved plugin selection
2026-07-10 13:00:50 +01:00
Peter Steinberger
13819996ad
fix(ci): preflight generated PR app permissions ( #103671 )
2026-07-10 12:57:30 +01:00
Peter Steinberger
a3ef0153fb
fix(ci): restore manually dispatched live suites ( #103654 )
2026-07-10 12:26:44 +01:00
Peter Steinberger
d72e618818
fix(ci): split locale publisher app permissions ( #103644 )
...
* fix(ci): split locale publisher app permissions
* fix(ci): prevent stale locale publication
2026-07-10 12:16:03 +01:00
Peter Steinberger
62bd760c0e
chore(swift): enforce current formatting and lint rules ( #103313 )
...
* style: apply SwiftFormat 0.62.1 rules
Refs #103202
* ci: enforce deterministic Swift lint
Refs #103202
* refactor: keep gateway connect lint-clean
Refs #103202
* style: keep iOS typography checks warning-free
* ci: route MLX Swift changes through pre-push
* fix: preserve native i18n extraction after Swift cleanup
* refactor: keep rebased Swift surfaces lint-clean
* style: format latest Swift additions
* chore: refresh native i18n inventory
* style: keep generated Swift formatter-clean
* fix: preserve node route invalidation callbacks
* fix: keep native translation IDs stable
* fix: retain native translation identifiers
* fix: preserve translations across Swift source moves
2026-07-10 11:54:08 +01:00
Peter Steinberger
bcf2798920
fix(ci): publish locale refreshes through exact merge ( #103625 )
2026-07-10 11:25:25 +01:00
Peter Steinberger
8d66e47773
fix(release): prove registry tarball identity before resuming a publish
...
Codex review: version existence alone does not prove the npm registry
serves the tarball this tag's preflight built — the same version could
have been published from a different artifact and npm versions are
immutable. The resume resolver now downloads the preflight manifest,
requires its releaseSha to match the target, and compares the published
registry tarball's sha256 against the manifest before skipping the core
dispatch; mismatches abort with correction-tag guidance.
2026-07-10 03:09:10 -07:00
Peter Steinberger
ef22e77f0b
perf(release): make publish reruns resumable and promote assets concurrently
...
The 2026.7.1 retro measured ~13h tag-to-published for beta.2 and stable
2026.6.11; any post-npm failure previously hard-aborted retries because
the already-published guard refused the whole run.
- resolve_openclaw_npm_publish_state replaces the abort guard: an
already-published core version skips the core npm dispatch and resumes
the remaining stages; verify_published_release still proves the
registry state matches the tag before the page leaves draft.
- Windows and Android promotion runs concurrently with the core npm
publish (their only shared prerequisite is the draft release page,
which is now created before the dispatch) and each promotion
short-circuits when the release already carries its verified asset
contract, so retries only redo failed stages.
- The release proof cites the core npm run only when this run dispatched
one; resumed publishes rely on the registry package check.
2026-07-10 03:09:09 -07:00
