Vincent Koc
6516be1023
fix(ci): stop ClawSweeper dispatch PAT fallback
...
Remove the maintainer PAT fallback from the ClawSweeper dispatch workflow so missing app auth fails closed instead of attributing downstream automation to a human token.
2026-04-29 13:26:02 -07:00
Peter Steinberger
7fc0859a01
perf(tests): split plugin state runtime imports
2026-04-29 21:21:38 +01:00
Peter Steinberger
12ee7f696f
fix(ollama): avoid broad provider hooks for local runs
2026-04-29 21:20:48 +01:00
Vincent Koc
f1ec163f77
fix(browser): remove unused zod dependency
2026-04-29 13:18:50 -07:00
github-actions[bot]
576f64c242
chore(ui): refresh fa control ui locale
2026-04-29 20:17:45 +00:00
github-actions[bot]
0d1ac827b3
chore(ui): refresh nl control ui locale
2026-04-29 20:17:35 +00:00
github-actions[bot]
2bf2720632
chore(ui): refresh vi control ui locale
2026-04-29 20:16:53 +00:00
github-actions[bot]
63cc63e8e0
chore(ui): refresh th control ui locale
2026-04-29 20:16:29 +00:00
github-actions[bot]
e3484727ba
chore(ui): refresh pl control ui locale
2026-04-29 20:16:20 +00:00
github-actions[bot]
565cb9029b
chore(ui): refresh id control ui locale
2026-04-29 20:16:18 +00:00
github-actions[bot]
b31369a701
chore(ui): refresh uk control ui locale
2026-04-29 20:15:30 +00:00
github-actions[bot]
7e9326026e
chore(ui): refresh tr control ui locale
2026-04-29 20:15:16 +00:00
Peter Steinberger
1738ebb385
fix(browser): declare zod runtime dependency
2026-04-29 21:15:03 +01:00
github-actions[bot]
c16a4dfce6
chore(ui): refresh it control ui locale
2026-04-29 20:15:00 +00:00
github-actions[bot]
185a3fcab8
chore(ui): refresh ar control ui locale
2026-04-29 20:14:56 +00:00
github-actions[bot]
5802fcb405
chore(ui): refresh ko control ui locale
2026-04-29 20:14:05 +00:00
github-actions[bot]
2925c801f7
chore(ui): refresh fr control ui locale
2026-04-29 20:14:01 +00:00
github-actions[bot]
92c30630ad
chore(ui): refresh ja-JP control ui locale
2026-04-29 20:13:47 +00:00
github-actions[bot]
7c4c008de8
chore(ui): refresh es control ui locale
2026-04-29 20:13:39 +00:00
github-actions[bot]
fef8203de1
chore(ui): refresh zh-TW control ui locale
2026-04-29 20:12:43 +00:00
github-actions[bot]
82629225ac
chore(ui): refresh zh-CN control ui locale
2026-04-29 20:12:39 +00:00
github-actions[bot]
b8f4338a94
chore(ui): refresh de control ui locale
2026-04-29 20:12:33 +00:00
github-actions[bot]
b799f6c451
chore(ui): refresh pt-BR control ui locale
2026-04-29 20:12:29 +00:00
Shakker
9c19335276
fix: package bundled runtime deps helper
2026-04-29 21:11:59 +01:00
Agustin Rivera
b8372a714c
fix(auth): bound bootstrap handoff scopes ( #72919 )
...
* fix(auth): bound bootstrap handoff scopes
Co-authored-by: zsx <git@zsxsoft.com >
* fix(auth): log stripped bootstrap scopes
* docs: add changelog entry for bootstrap handoff scope bounds
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-29 14:11:16 -06:00
Vincent Koc
60c2a90550
fix(ui): gate control ui raw copy
2026-04-29 13:09:47 -07:00
Vincent Koc
c9156cd9a8
chore(ci): add network SSRF CodeQL shard
...
Adds a narrow critical-security CodeQL shard for the network/SSRF boundary and documents the new category.
2026-04-29 13:08:46 -07:00
Peter Steinberger
65e969aeea
ci(dup): split duplicate scans
2026-04-29 21:02:24 +01:00
Agustin Rivera
fef42acda0
fix(commands): scope owner allowlist prefixes ( #72928 )
...
* fix(commands): scope owner allowlist prefixes
Co-authored-by: zsx <git@zsxsoft.com >
* fix(commands): annotate owner allowlist short-circuit
* docs: move changelog entry to unreleased fixes
---------
Co-authored-by: zsx <git@zsxsoft.com >
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-29 14:00:07 -06:00
Josh Lehman
f05b789736
test: align Codex provider payload test ( #74536 )
2026-04-29 12:56:27 -07:00
Michael Appel
665b0ef542
fix(agents): move groupId trust check into resolveGroupToolPolicy for all callers [AI-assisted] ( #73720 )
...
* fix: address issue
* fix: address review feedback
* fix(gateway): validate groupId against session key before persisting to session entry
* test(gateway): verify groupId is validated against session key before session entry write
* fix(agents): trust stored group metadata
* fix(gateway): keep first group selectors
* docs: add group policy trust changelog entry
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-29 13:56:26 -06:00
clawsweeper[bot]
7c51cd2baf
fix(device-pair): reject invalid remote setup URLs
...
Fail setup-code generation when gateway.remote.url is configured but malformed, instead of falling back to a bind-derived URL and issuing a bootstrap token.
2026-04-29 20:45:33 +01:00
Vincent Koc
21b3eb5c34
test(memory-wiki): remove duplicate fixture keys
2026-04-29 12:43:01 -07:00
Peter Steinberger
dac7237494
ci: shard release validation hotspots
2026-04-29 20:40:42 +01:00
Peter Steinberger
fdba408bce
fix: restore codex verbose full output
2026-04-29 20:36:36 +01:00
clawsweeper[bot]
8a3507e310
fix(memory-wiki): route natural people questions
...
Let route-question searches match people-routing metadata from natural-language prompts, and allow wiki_apply evidence provenance fields that the markdown parser already supports.
2026-04-29 20:36:31 +01:00
Devin Robison
4808361fca
fix: gate startup context for sandboxed spawned sessions ( #73611 )
...
* fix: gate startup context for sandboxed spawned sessions
* docs: add startup sandbox changelog entry
* fix: address startup sandbox review feedback
* test: format startup sandbox coverage
2026-04-29 13:35:55 -06:00
Vincent Koc
3abc90aac5
test(scripts): remove managed child race
2026-04-29 12:34:41 -07:00
Val Alexander
323985f4ca
fix(ui): align sidebar trigger affordances
...
Align the Control UI and exported transcript sidebar triggers around a shared accessible hamburger affordance.
2026-04-29 20:33:39 +01:00
Vincent Koc
f55b810412
docs(changelog): backfill last 6h user-facing entries
...
Adds six missing entries for commits that landed without their own
CHANGELOG.md update, picked from the last six hours of origin/main and
attributed to the original contributors.
Changes:
- Control UI/i18n locale registry expansion + new docs glossaries
(297f4c6e600126692bf5097eed8cd8d001c3436be69da9d57886956f71e6#74542 ).
- `openclaw status` channel context-window overrides (eb7d89f4b92dadc82cf4#73671 ).
- Control UI mobile chat settings persisted via Lit state (b1c515270e
2026-04-29 12:31:29 -07:00
Jeff
9b6670d5c9
fix(ssrf): allow IPv6 fake-ip SSRF opt-in
...
Allow trusted fake-IP proxy stacks to opt into IPv6 unique-local SSRF resolution without opening broader private-network access.
2026-04-29 20:31:17 +01:00
github-actions[bot]
cd00a6d6dd
chore(ui): refresh fa control ui locale
2026-04-29 19:29:08 +00:00
github-actions[bot]
070129f34f
chore(ui): refresh nl control ui locale
2026-04-29 19:28:59 +00:00
github-actions[bot]
d6918113f0
chore(ui): refresh vi control ui locale
2026-04-29 19:28:23 +00:00
github-actions[bot]
9ffc2f9d06
chore(ui): refresh th control ui locale
2026-04-29 19:27:46 +00:00
github-actions[bot]
38694111aa
chore(ui): refresh id control ui locale
2026-04-29 19:27:43 +00:00
github-actions[bot]
ec0836693c
chore(ui): refresh pl control ui locale
2026-04-29 19:27:40 +00:00
Vincent Koc
e1c97cb24d
fix(memory-wiki): satisfy CI guard checks
2026-04-29 12:27:22 -07:00
github-actions[bot]
9af0a7153e
chore(ui): refresh it control ui locale
2026-04-29 19:26:53 +00:00
github-actions[bot]
5de9145562
chore(ui): refresh ar control ui locale
2026-04-29 19:26:45 +00:00
