Peter Steinberger
3e67ee63b4
ci: route ClawSweeper command comments
2026-05-01 04:14:41 +01:00
gavyngong
0260903f7f
fix(logging): add redaction patterns for Tencent Cloud, Alibaba Cloud, HuggingFace and Replicate API keys ( #58162 )
...
Merged via squash.
Prepared head SHA: 5227c30713
Co-authored-by: gavyngong <267269824+gavyngong@users.noreply.github.com >
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Reviewed-by: @hxy91819
2026-05-01 11:13:54 +08:00
Ayaan Zaidi
d0a7986638
docs(changelog): note telegram reply latency fix
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
60bdb96f2c
fix(tools): defer media generation provider discovery
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
e0fe02fb09
fix(tools): preserve tool availability contracts
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
22d6e9564a
test(tools): mirror auth profile discovery in image tests
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
45b8645079
fix(channels): keep typing indicators off reply critical path
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
40b0b1bfe0
fix(tools): avoid web search provider loading at registration
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
3144e7a729
fix(tools): defer media model resolution
2026-05-01 08:33:02 +05:30
Ayaan Zaidi
354084b1b3
fix(providers): cache targeted runtime hook resolution
2026-05-01 08:33:02 +05:30
Peter Steinberger
5a69832833
chore: ignore sea build output
2026-05-01 03:56:12 +01:00
Peter Steinberger
8989ceee50
fix(auto-reply): move visible reply warnings to doctor ( #75367 )
...
Summary:
- The PR removes the auto-reply runtime warning for visible-reply defaults, adds doctor preview warnings and tests for message-tool visibility policy mismatches, and updates the group/channel docs and changelog wording.
ClawSweeper fixups:
- No separate fixup commits were needed after automerge opt-in.
Validation:
- ClawSweeper review passed for head 1f96b3b568 .
- Required merge gates passed before the squash merge.
Prepared head SHA: 1f96b3b568
Review: https://github.com/openclaw/openclaw/pull/75367#issuecomment-4357475980
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-05-01 02:52:23 +00:00
Josh Avant
ce833acbdb
test: strengthen published upgrade survivor lane ( #75361 )
...
* test: integrate upgrade survivor baseline controls
* test: gate published upgrade survivor path
* test: preserve upgrade survivor fixture contract
* test: keep upgrade survivor temp state off overlay
2026-04-30 21:50:36 -05:00
Peter Steinberger
6603a174bc
fix: keep async music delivery agent-mediated ( #75335 )
...
Keep async music generation completions on the requester-session wake path even when direct-send completion is enabled.
Also aligns config help, generated schema text, public docs, and the changelog so tools.media.asyncCompletion.directSend no longer claims to direct-send music completions.
Verification:
- pnpm test src/agents/tools/music-generate-background.test.ts src/agents/tools/video-generate-background.test.ts
- pnpm exec oxfmt --check --threads=1 src/agents/tools/media-generate-background-shared.ts src/agents/tools/music-generate-background.ts src/agents/tools/music-generate-background.test.ts src/config/schema.help.ts src/config/types.tools.ts docs/automation/tasks.md docs/gateway/config-tools.md CHANGELOG.md
- pnpm config:schema:check
- pnpm config:docs:check
- pnpm check:changelog-attributions
- git diff --check
- OPENCLAW_TESTBOX=1 pnpm check:changed
2026-04-30 21:48:27 -05:00
Yossi Eliaz
619064b6d7
fix(docker): require single primary key before Docker apt GPG pin ( #74254 )
...
Merged via squash.
Fixes #74234 .
Prepared head SHA: c09ca96153
Reviewed-by: @sallyom
2026-04-30 22:47:43 -04:00
Val Alexander
df0ee092f0
fix: harden gateway recovery diagnostics and media delivery
...
Harden gateway recovery diagnostics and media delivery.\n\n- Accept gateway send asVoice and map it to outbound audioAsVoice.\n- Preserve generated Swift protocol models for the gateway send schema.\n- Keep the broader recovery hardening for install/update/status/vector/TTS paths in one reviewed PR.\n\nProof:\n- Focused local gateway/outbound/update/status/doctor/sqlite-vec tests passed.\n- oxfmt --check and git diff --check passed.\n- Testbox OPENCLAW_TESTBOX=1 pnpm check:changed passed at 2f5ef650e97763a61ff43c28e61707db84c50060.\n- GitHub required checks are green at the merge SHA; the qa-lab parity gate is optional/surface-only and was still pending.
2026-04-30 21:46:22 -05:00
Peter Steinberger
98d87b06e0
docs: simplify full release validation tables
2026-05-01 03:39:32 +01:00
Peter Steinberger
6cc7432cd1
perf(test): split gateway server control-plane shard
2026-05-01 03:37:25 +01:00
Peter Steinberger
4987482e4c
perf: keep models list responsive during catalog discovery ( #75326 )
...
* perf: keep models list responsive during catalog discovery
* docs: record models list responsiveness fix
* fix: preserve models catalog load failures
2026-05-01 02:31:53 +00:00
gavyngong
fd0ca5987b
fix(nextcloud-talk): replace manual XOR with crypto.timingSafeEqual and fix length leak ( #58097 )
...
Merged via squash.
Prepared head SHA: 3cb82bce40
Co-authored-by: gavyngong <267269824+gavyngong@users.noreply.github.com >
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Reviewed-by: @hxy91819
2026-05-01 10:26:54 +08:00
Peter Steinberger
206b5f78a2
ci: tighten full release validation
2026-05-01 03:19:49 +01:00
Peter Steinberger
6bc3458222
perf(test): keep commitment runtime tests focused
2026-05-01 03:12:55 +01:00
Hani Koshaji
a853c5e8c2
fix(config-audit): redact CLI argv secrets before persisting to log ( #75095 )
...
Merged via squash.
Prepared head SHA: 3dc54de1a8
Co-authored-by: koshaji <koshaji@users.noreply.github.com >
Co-authored-by: sallyom <11166065+sallyom@users.noreply.github.com >
Reviewed-by: @sallyom
2026-04-30 22:08:14 -04:00
Peter Steinberger
e7dafaf2af
ci: add crabbox hydrate workflow
2026-05-01 03:05:40 +01:00
Peter Steinberger
f110c153c2
ci: configure crabbox actions runner labels
2026-05-01 03:05:40 +01:00
Peter Steinberger
c709b17fef
ci: add crabbox yaml config
2026-05-01 03:05:40 +01:00
Vignesh
38da2ac6f8
fix commitments extractor model selection ( #75347 )
2026-05-01 01:57:21 +00:00
Chunyue Wang
4b98f09529
fix(plugins): canonicalize packageRoot before hashing runtime-deps stage key ( #75048 )
...
Merged via squash.
Prepared head SHA: 324859fc69
Co-authored-by: openperf <80630709+openperf@users.noreply.github.com >
Co-authored-by: openperf <80630709+openperf@users.noreply.github.com >
Reviewed-by: @openperf
2026-05-01 09:56:13 +08:00
Peter Steinberger
bd20f8e07e
fix(discord): harden rate limit retries ( #75338 )
...
* fix(discord): harden rate limit retries
* fix(discord): guard voice upload fetches
* fix(discord): avoid stale rate limit requeues
2026-05-01 01:49:02 +00:00
Peter Steinberger
3c4851037b
perf: skip runtime-deps manifest scans when materialized ( #75325 )
...
* perf: skip runtime-deps manifest scans when materialized
* fix: include manifest deps in runtime fast path
* fix: type runtime deps normalizer helper
* docs: credit runtime deps event-loop fix
2026-05-01 01:25:46 +00:00
Vignesh
b277ae3f4c
[codex] Fix commitments safety and coverage ( #75302 )
...
* fix commitments safety and coverage
* Repair commitments safety PR review blockers
* fix(clawsweeper): address review for automerge-openclaw-openclaw-75302 (1)
* Repair commitments safety PR review blocker
---------
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com >
2026-05-01 01:14:07 +00:00
Val Alexander
a102f4dede
fix(gateway): harden artifact RPCs
...
Add Gateway artifact RPCs and SDK helpers for list/get/download, with transcript provenance checks, safer download source handling, task/run/session coverage, generated protocol models, docs, and the refreshed generated config schema baseline.
Closes #74706 .
Refs #74898 , #74769 , #74804 , #74786 .
2026-04-30 19:35:48 -05:00
clawsweeper[bot]
e47a7448e9
fix(ci): GitHub App active-PR-limit exemption regression ( #75311 )
...
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-30 17:10:20 -07:00
Peter Steinberger
1ad50a36ac
chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30
2026-05-01 01:06:13 +01:00
Peter Steinberger
52bf20b07d
fix(ci): escape stale update import regex
2026-05-01 00:50:15 +01:00
Peter Steinberger
1e87f6bf70
fix(qa-lab): preserve gateway log offset order
2026-05-01 00:44:17 +01:00
Peter Steinberger
48794b9f88
test(parallels): recover stale windows update swap
2026-05-01 00:43:04 +01:00
Peter Steinberger
c0058fda2f
test: add published upgrade survivor lane ( #75221 )
...
* test: add published upgrade survivor lane
* test: keep published upgrade exit chunk
2026-04-30 23:39:50 +00:00
Peter Steinberger
919a68c64d
test(parallels): retry stale post-update cli imports
2026-05-01 00:37:12 +01:00
Shadow
ef799fd57a
ci: exclude app PRs from active limit
2026-04-30 18:34:41 -05:00
Peter Steinberger
5a3b75de33
test(parallels): retry post-update cli readiness
2026-05-01 00:17:27 +01:00
Peter Steinberger
c67629fe0c
docs: surface Codex harness quick config
2026-05-01 00:05:24 +01:00
Vincent Koc
148a34679f
Update SECURITY.md
2026-04-30 16:04:53 -07:00
Peter Steinberger
359d871293
test(parallels): allow mac update script fallback user
2026-04-30 23:38:02 +01:00
Vincent Koc
e311ffdcb9
fix(plugins): stop runtime deps reinstall loops
2026-04-30 15:28:52 -07:00
Vincent Koc
f5e5256632
docs(changelog): credit TTS provider fallback report
2026-04-30 15:26:42 -07:00
Peter Steinberger
af5a1fbddb
test(parallels): harden npm update smoke transport
2026-04-30 23:16:41 +01:00
Peter Steinberger
231e5c618f
ci(release): allow public mac validation from main
2026-04-30 22:53:39 +01:00
Peter Steinberger
f48f31aac9
chore(release): update appcast for 2026.4.29
2026-04-30 22:50:16 +01:00
Vincent Koc
1d74ecd71f
fix(plugins): restore disabled TTS provider fallback
2026-04-30 14:35:00 -07:00