The existing check only validated the first FROM line. The new bun-binary
stage (FROM ${OPENCLAW_BUN_IMAGE}) would have been invisible to it.
Add resolveAllArgBackedFromReferences that walks every FROM line and
resolves ARG-backed image references, so all pinned base stages are
checked — not just the first one.
The previous approach fetched https://bun.sh/install and executed it as
root with no version pin, checksum, or signature verification — despite
both Node base images being pinned to SHA256 digests.
Replace with a multi-stage COPY from the official oven/bun image, using
the same version (1.3.9) already pinned in
.github/actions/setup-node-env/action.yml. The new OPENCLAW_BUN_IMAGE
ARG follows the same pattern as OPENCLAW_NODE_BOOKWORM_IMAGE and can be
updated via Dependabot.
Closes#74356
Gemini 3.1 Pro Preview may emit parts with only thoughtSignature
and no text content, causing the stream to stall. Emit a
thinking_signature event to keep the stream active, and start
a thinking block when these parts arrive before any text.
Fixes#76071
Keep the new attempt-result field optional for third-party harness compatibility while defaulting absent values at the runner boundary.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Thread tool-timeout state through timeout-triggered compaction, generic timeout payload synthesis, and the changelog.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Detect run-level timeouts that fire while a tool call is still active and keep them out of assistant model fallback.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Summary:
- The PR changes Gateway reload planning, CLI plugin install-index writes, plugin runtime/cache cleanup, docs, changelog, and tests so plugin enable/disable hot reloads while install/update/uninstall stay restart-backed.
- Reproducibility: yes. The earlier blocker has a source-level reproduction: run an external plugin install/up ... watches config and only the managed plugin index changes; the PR now tests that path and queues a restart.
ClawSweeper fixups:
- Included follow-up commit: fix: hot reload plugin management changes
- Included follow-up commit: fix(clawsweeper): address review for automerge-openclaw-openclaw-7597…
- Ran the ClawSweeper repair loop before final review.
Validation:
- ClawSweeper review passed for head 860594f722.
- Required merge gates passed before the squash merge.
Prepared head SHA: 860594f722
Review: https://github.com/openclaw/openclaw/pull/75976#issuecomment-4363168379
Co-authored-by: Peter Steinberger <steipete@gmail.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Use dedicated high-contrast selection tokens for Control UI/WebChat text selection and add the user-facing changelog entry.\n\nFixes #60850.\nSupersedes #60854.
Contain the Control UI document in iOS Add-to-Home-Screen standalone mode by enabling viewport-fit=cover, applying safe-area-aware body locking, and constraining the app root so inner panes own scrolling.
Thanks @kvncrw.
Reuse the startup runtime plugin registry across provider/tool helper paths while preserving standalone CLI/MCP fallback loading.
Includes follow-up fixes for migration/provider/tool registry bootstrap and regression coverage for compatible registry reuse.
Co-authored-by: DmitryPogodaev <pogodaev.dm@gmail.com>
Fix restart recovery for main sessions that use topic-suffixed transcript files by matching cleaned transcript lock paths directly while preserving the canonical session-id fallback for stale metadata.
Thanks @anyech.
