Commit Graph

1667 Commits

Author SHA1 Message Date
Peter Steinberger
39ab11425f test: clear Windows Parallels smoke sessions 2026-05-01 11:40:32 +01:00
Vincent Koc
15adc741ff test(package): expand upgrade survivor baselines 2026-05-01 03:18:31 -07:00
Peter Steinberger
d3bb5ce9e9 test: write Windows Parallels provider timeout directly 2026-05-01 11:17:52 +01:00
Peter Steinberger
018f77cdc2 test: cover legacy runtime deps update recovery (#75288) 2026-05-01 11:15:21 +01:00
Mark Goldenstein
1e6bdf3a55 fix runtime deps update from legacy symlinks 2026-05-01 11:15:21 +01:00
Peter Steinberger
9a051d2f9b test: preseed dev channel in Parallels update 2026-05-01 11:03:16 +01:00
Peter Steinberger
ca620eaf35 test: extend Windows Parallels OpenAI timeout 2026-05-01 10:56:07 +01:00
Peter Steinberger
e8afaf512e test: use release OpenAI model in Parallels 2026-05-01 10:40:03 +01:00
Peter Steinberger
8abf2977f4 test: minimize Parallels smoke agent turns 2026-05-01 10:17:54 +01:00
Peter Steinberger
f98ba66af6 test: wait for apt locks in Parallels Linux 2026-05-01 09:55:42 +01:00
Peter Steinberger
9e01d19db3 test: disable Parallels smoke idle watchdog 2026-05-01 09:51:47 +01:00
Peter Steinberger
38e03d3af3 test: extend Parallels model smoke timeout 2026-05-01 09:46:23 +01:00
Ayaan Zaidi
86a563e899 test(rtt): use black-box telegram harness 2026-05-01 14:02:54 +05:30
Peter Steinberger
e131eaecb5 fix: force package update restart handoff 2026-05-01 09:25:33 +01:00
Vincent Koc
c48c3ecbc7 fix(e2e): isolate upgrade survivor matrix artifacts 2026-05-01 01:18:12 -07:00
Vincent Koc
dffc295a74 test(e2e): add upgrade survivor scenario probes 2026-05-01 01:18:11 -07:00
Vincent Koc
2500b5d4ec test(e2e): expand published upgrade survivor baselines 2026-05-01 01:18:11 -07:00
Peter Steinberger
7d7b610a24 fix: handle bin-only runtime deps 2026-05-01 09:07:32 +01:00
Peter Steinberger
250376f885 fix: simplify bundled runtime dependency repair (#75183)
Summary:
- Merged fix: simplify bundled runtime dependency repair after ClawSweeper review.

ClawSweeper fixups:
- Included follow-up commit: fix: verify cached bundled runtime roots
- Included follow-up commit: refactor: simplify plugin runtime startup paths
- Included follow-up commit: refactor: trim plugin startup policy helpers
- Included follow-up commit: refactor: trust package manager runtime deps materialization
- Included follow-up commit: fix: narrow channel runtime deps skip policy
- Included follow-up commit: refactor: defer startup plugin runtime deps
- Ran the ClawSweeper repair loop before final review.

Validation:
- ClawSweeper review passed for head 04dc566534.
- Required merge gates passed before the squash merge.

Prepared head SHA: 04dc566534
Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786

Co-authored-by: Peter Steinberger <steipete@gmail.com>
Co-authored-by: Shakker <shakkerdroid@gmail.com>
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-05-01 07:49:02 +00:00
Peter Steinberger
d0dac324c6 test: align lint suppression inventory 2026-05-01 08:23:26 +01:00
Ayaan Zaidi
e8810c04a4 feat(rtt): add published package measurement harness 2026-05-01 11:20:11 +05:30
joshavant
8093ae6029 test: validate published upgrade survivor baseline 2026-04-30 22:17:33 -05:00
Josh Avant
ce833acbdb test: strengthen published upgrade survivor lane (#75361)
* test: integrate upgrade survivor baseline controls

* test: gate published upgrade survivor path

* test: preserve upgrade survivor fixture contract

* test: keep upgrade survivor temp state off overlay
2026-04-30 21:50:36 -05:00
Peter Steinberger
6cc7432cd1 perf(test): split gateway server control-plane shard 2026-05-01 03:37:25 +01:00
Peter Steinberger
206b5f78a2 ci: tighten full release validation 2026-05-01 03:19:49 +01:00
Peter Steinberger
6bc3458222 perf(test): keep commitment runtime tests focused 2026-05-01 03:12:55 +01:00
Chunyue Wang
4b98f09529 fix(plugins): canonicalize packageRoot before hashing runtime-deps stage key (#75048)
Merged via squash.

Prepared head SHA: 324859fc69
Co-authored-by: openperf <80630709+openperf@users.noreply.github.com>
Co-authored-by: openperf <80630709+openperf@users.noreply.github.com>
Reviewed-by: @openperf
2026-05-01 09:56:13 +08:00
Vignesh
b277ae3f4c [codex] Fix commitments safety and coverage (#75302)
* fix commitments safety and coverage

* Repair commitments safety PR review blockers

* fix(clawsweeper): address review for automerge-openclaw-openclaw-75302 (1)

* Repair commitments safety PR review blocker

---------

Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-05-01 01:14:07 +00:00
clawsweeper[bot]
e47a7448e9 fix(ci): GitHub App active-PR-limit exemption regression (#75311)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-30 17:10:20 -07:00
Peter Steinberger
1ad50a36ac chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30 2026-05-01 01:06:13 +01:00
Peter Steinberger
c0058fda2f test: add published upgrade survivor lane (#75221)
* test: add published upgrade survivor lane

* test: keep published upgrade exit chunk
2026-04-30 23:39:50 +00:00
Shadow
ef799fd57a ci: exclude app PRs from active limit 2026-04-30 18:34:41 -05:00
Peter Steinberger
7beebc9afc test: add upgrade survivor package lane 2026-04-30 19:06:33 +01:00
Vincent Koc
9cb71f7672 chore(barnacle): add false positive close label (#75014) 2026-04-30 02:55:45 -07:00
clawsweeper[bot]
099037cca6 fix(channels): align Yuanbao catalog id
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-30 02:50:35 -07:00
Vincent Koc
092321dc9e fix(github): skip maintainer-owned Barnacle targets 2026-04-30 01:10:52 -07:00
clawsweeper[bot]
d55fafd130 fix(ci): disable install smoke Docker build cache
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 23:16:10 -07:00
clawsweeper[bot]
9177fab07b fix: environment edge case launcher regression (#74696)
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 22:39:12 -07:00
clawsweeper[bot]
fa1b8a25b8 test(ci): guard install smoke docker cache removal
Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
2026-04-29 22:06:02 -07:00
clawsweeper[bot]
a6af23a1de fix(test): keep kitchen-sink conformance diagnostics clean
* fix: test-harness regression risk

* fix: keep kitchen-sink conformance diagnostics clean

---------

Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>
2026-04-29 21:53:15 -07:00
Peter Steinberger
d363565375 fix: harden Windows Parallels update smoke 2026-04-30 05:22:04 +01:00
Peter Steinberger
5f13af6b68 fix: warn before npm prefix redirection (#73890) (thanks @Sayeem3051) 2026-04-30 04:49:03 +01:00
Peter Steinberger
6331fec05e test(scripts): align changed sdk routing expectation 2026-04-30 02:06:47 +01:00
Fred blum
9b1bde2561 fix(voice-call): close webhook in-flight limiter fail-open on empty remote address (#74453)
* fix(voice-call): close in-flight limiter fail-open on empty remote address

The webhook in-flight limiter (createWebhookInFlightLimiter in
src/plugin-sdk/webhook-request-guards.ts) returns true unconditionally
when tryAcquire is called with an empty key — that is its by-contract
fail-open path used to mean 'caller is opting out of the limiter'.

The voice-call webhook handler reached that path silently: it computed
'req.socket.remoteAddress ?? ""' and passed the empty string straight
into tryAcquire. Whenever req.socket.remoteAddress was absent (closed
socket, edge proxy quirk), the limiter became a no-op and the request
proceeded directly to readBody without any concurrency cap.

Fix: when remoteAddress is missing, log a warning and fall back to a
constant non-empty key ('__voice_call_no_remote__') so all such
requests share one in-flight bucket instead of bypassing the limiter
entirely. The bucket size stays maxInFlightPerKey (default 8), which
is the right defense-in-depth posture against slow-body attacks
arriving with stripped IP info.

Scoped to voice-call only. Other consumers of the SDK helper
(bluebubbles via openclaw/plugin-sdk/webhook-ingress) are not changed
to avoid drive-by edits to plugins this PR does not own. The shared
SDK contract (empty key = bypass) is left as-is and documented
implicitly by the fix's comment block.

The existing 8-concurrent test in webhook.test.ts continues to assert
the limiter engages on the happy path; no new test added since the
private handleRequest path is not unit-test exposed and the change is
two-line auditable from the diff alone.

* test(voice-call): cover missing webhook remote address limiter

* test: align changed package sdk routing

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-04-30 01:02:14 +00:00
Peter Steinberger
c397486648 fix(test): configure kitchen sink before enable 2026-04-30 01:35:13 +01:00
Peter Steinberger
52b57d0953 fix(cli): scope packaged compile cache 2026-04-30 01:16:38 +01:00
Peter Steinberger
172bc9d043 fix(plugin-sdk): keep test contracts publishable 2026-04-30 01:00:15 +01:00
Peter Steinberger
43f6c8b01a feat: add OpenClaw SDK package 2026-04-30 00:51:24 +01:00
Peter Steinberger
6acd588bdd test(ci): update changed gate expectations 2026-04-29 23:49:48 +01:00
Peter Steinberger
b552e31563 test: update install smoke workflow contract 2026-04-29 22:31:17 +01:00