Vincent Koc
32e89b4687
Infra: preserve wrapper executable for multiplexer trust
2026-03-23 19:04:04 -07:00
Peter Steinberger
2d5f822ca1
fix: warn on same-base prerelease configs
2026-03-24 02:02:31 +00:00
Peter Steinberger
85ed1a8986
refactor: clean up ClawHub compatibility validation
2026-03-23 18:52:37 -07:00
Val Alexander
9dd0530b97
fix(ui): redact sensitive config values in diff panel
...
Use isSensitiveConfigPath to detect token/password/secret/apiKey paths
and display REDACTED_PLACEHOLDER instead of raw values in the config
diff panel, preventing credential exposure in the UI.
2026-03-23 20:48:08 -05:00
Val Alexander
21ac4b9a8a
style(ui): continue ui clarity pass across theme, config, and usage ( #53272 ) thanks @BunsDev
...
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-03-23 20:45:43 -05:00
Peter Steinberger
ecc8fe5dc2
ci: rebalance sharded test lanes
2026-03-24 01:44:26 +00:00
Peter Steinberger
5b4fd6bf31
fix: use runtime version for ClawHub plugin API checks ( #53157 ) (thanks @futhgar)
2026-03-23 18:41:18 -07:00
futhgar
447e074bf4
fix(plugins): use runtime version for plugin API compatibility check
...
OPENCLAW_PLUGIN_API_VERSION was hardcoded to "1.2.0" while ClawHub-published
plugins require >=2026.3.22, making all plugin installs via ClawHub fail with
"requires plugin API >=2026.3.22, but this OpenClaw runtime exposes 1.2.0".
Use resolveRuntimeServiceVersion() (already imported) to read the actual
version from package.json at runtime.
Fixes #53038
2026-03-23 18:41:18 -07:00
Peter Steinberger
d25ad66069
fix: resolve catalog-backed channel login
2026-03-23 18:25:44 -07:00
Peter Steinberger
69390daa51
test: cover config correction version warnings
2026-03-23 18:23:50 -07:00
Peter Steinberger
b4bda479a4
fix: normalize bundled plugin version reporting
2026-03-23 18:23:50 -07:00
Peter Steinberger
e9905fd696
fix: avoid fd warnings in lock exit cleanup
2026-03-24 01:01:59 +00:00
Val Alexander
6c44b2ea50
fix(cli): guard channel-auth against prototype-chain pollution and control-char injection
...
- Use hasOwnProperty + isBlockedObjectKey in isConfiguredAuthPlugin to
prevent __proto__/constructor/prototype keys from matching config
- Sanitize plugin IDs with sanitizeForLog in ambiguity error messages
- Add regression test for __proto__ plugin ID
2026-03-23 19:58:16 -05:00
Val Alexander
c8f4b8533d
fix(cli): auto-select login-capable auth channels ( #53254 ) thanks @BunsDev
...
Co-authored-by: BunsDev <68980965+BunsDev@users.noreply.github.com >
Co-authored-by: Nova <nova@openknot.ai >
2026-03-23 19:54:46 -05:00
Peter Steinberger
5cb8e33a31
build: tag correction npm publishes as latest
2026-03-23 17:42:43 -07:00
Peter Steinberger
00d586b2ce
test: reduce flaky gemini live probe coverage
2026-03-24 00:40:17 +00:00
Peter Steinberger
dc02a7520f
test: stabilize moonshot and minimax live probes
2026-03-24 00:40:17 +00:00
Peter Steinberger
b8bf6c482e
ci: cap channel shard workers
2026-03-24 00:38:51 +00:00
Peter Steinberger
9334015262
fix: ship bundled plugin runtime sidecars
2026-03-23 17:38:08 -07:00
Peter Steinberger
ffd722bc2c
build: harden local release verification
2026-03-23 17:38:08 -07:00
Peter Steinberger
ce75f60ae9
fix: canonicalize malformed assistant replay content
2026-03-23 17:37:51 -07:00
Val Alexander
a5c35050f3
style: update border-radius values to use CSS variables for consistency across components ( #53238 )
2026-03-23 19:23:43 -05:00
Peter Steinberger
90fab48416
ci: stabilize sharded channel lanes
2026-03-24 00:21:50 +00:00
Peter Steinberger
e32148f1dd
build: publish 2026.3.23 mac appcast
2026-03-23 17:01:06 -07:00
Peter Steinberger
2d19d2acb9
ci: shorten main critical path
2026-03-23 23:45:51 +00:00
Peter Steinberger
36de481541
docs: capture windows parallels install learnings
2026-03-23 16:40:53 -07:00
Peter Steinberger
ea99984e23
test: fix windows parallels agent quoting
2026-03-23 16:39:51 -07:00
Sally O'Malley
34dc712f36
changelog ( #53229 )
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-03-23 19:37:59 -04:00
Peter Steinberger
a0483086b9
docs: fix 2026.3.22 and 2026.3.23 release notes
2026-03-23 16:27:14 -07:00
Peter Steinberger
ccfeecb688
test: harden parallels macos dashboard smoke
v2026.3.23
2026-03-23 16:13:20 -07:00
Peter Steinberger
a921b5bdff
test: fix update-cli default path assertion
2026-03-23 23:05:25 +00:00
Peter Steinberger
725a2cc2ca
test: expand gemini live transcript stripping
2026-03-23 23:01:22 +00:00
Peter Steinberger
67dbb1ad42
test: update command coverage
2026-03-23 23:01:22 +00:00
Peter Steinberger
d67efbfbd3
test: stabilize test isolation
2026-03-23 23:01:22 +00:00
Sally O'Malley
ae336d1602
Doctor: prune stale plugin allowlist and entry refs ( #53187 )
...
Signed-off-by: sallyom <somalley@redhat.com >
2026-03-23 18:58:54 -04:00
Vincent Koc
03231c0633
fix(auth): prevent stale auth store reverts ( #53211 )
2026-03-23 15:56:46 -07:00
Peter Steinberger
47bdc36831
test: make update-cli checkout path assertion platform-safe
2026-03-23 22:54:32 +00:00
Vincent Koc
19295994f3
fix(ci): stabilize whatsapp extension checks
2026-03-23 15:50:19 -07:00
Vincent Koc
6f5df14308
test(whatsapp): preserve harness session exports
2026-03-23 15:50:19 -07:00
Vincent Koc
7b03502175
test(whatsapp): preserve media test module exports
2026-03-23 15:50:19 -07:00
Vincent Koc
e87a64f8d0
test(whatsapp): preserve session exports in login coverage
2026-03-23 15:50:19 -07:00
Vincent Koc
dad6018230
test(whatsapp): stabilize login coverage in shared workers
2026-03-23 15:50:19 -07:00
Peter Steinberger
e808f8d6ef
docs(changelog): reorder release highlights
2026-03-23 15:44:18 -07:00
Onur
6ab6e7a493
Release: document manual macOS asset upload ( #53178 )
...
* Release: document manual macOS asset upload
* Release: document macOS smoke-test mode
2026-03-23 23:19:52 +01:00
Robin Waslander
fb6588cb99
fix(diagnostics): redact credentials from cache-trace diagnostic output
...
Refs #53103
2026-03-23 22:59:09 +01:00
Onur
6e8d5cd578
Release: privatize macOS publish flow ( #53166 )
2026-03-23 22:35:51 +01:00
George Zhang
ade0182ae0
feat(modelstudio): add standard (pay-as-you-go) DashScope endpoints for Qwen ( #43878 )
...
Add Standard API Key auth methods for China (dashscope.aliyuncs.com)
and Global/Intl (dashscope-intl.aliyuncs.com) pay-as-you-go endpoints
alongside the existing Coding Plan (subscription) endpoints.
Also updates group label to 'Qwen (Alibaba Cloud Model Studio)' and
fixes glm-4.7 -> glm-5 in Coding Plan note messages.
Co-authored-by: wenmeng zhou <wenmengzhou@users.noreply.github.com >
2026-03-23 14:35:19 -07:00
Ayush Ojha
64f4df1886
fix: generalize api_error detection for fallback model triggering ( #49611 )
...
Co-authored-by: Ayush Ojha <7945279+ayushozha@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
2026-03-24 00:34:27 +03:00
Vincent Koc
3814f956d1
Infra: tighten shell-wrapper positional-argv allowlist matching ( #53133 )
...
* Infra: tighten shell carrier allowlist matching
* fix(security): tighten shell carrier allowlist matcher
2026-03-23 14:11:38 -07:00
theo674
dbe7da7684
fix: prevent delivery-mirror re-delivery and raise Slack chunk limit ( #45489 )
...
Merged via squash.
Prepared head SHA: c7664c7b6e
Co-authored-by: theo674 <261068216+theo674@users.noreply.github.com >
Co-authored-by: altaywtf <9790196+altaywtf@users.noreply.github.com >
Reviewed-by: @altaywtf
2026-03-24 00:11:19 +03:00