Commit Graph

3092 Commits

Author SHA1 Message Date
Shadow
90ae151154 fix: prevent barnacle vetoing clawsweeper proof 2026-05-15 22:25:29 -05:00
Vincent Koc
89a9b4e75a fix(plugins): preserve host package during managed peer repair 2026-05-16 09:48:28 +08:00
Vincent Koc
e403af2d85 fix(test): avoid walking CI node shard plans 2026-05-16 09:43:03 +08:00
Vincent Koc
31cc26230f fix(test): avoid scanning bundled source metadata 2026-05-16 09:36:04 +08:00
Vincent Koc
a70c90a52b test(plugins): cover malformed npm package metadata 2026-05-16 09:29:40 +08:00
Vincent Koc
3064d6181d fix(test): avoid scanning static asset metadata 2026-05-16 09:26:56 +08:00
Vincent Koc
7d96d1f41a fix(test): avoid scanning bundled build entries 2026-05-16 09:14:07 +08:00
Vincent Koc
c320da79ed fix(test): avoid scanning extension ids 2026-05-16 09:08:19 +08:00
Vincent Koc
7ccd3b8e8e fix(test): avoid walking extension test plans 2026-05-16 09:02:10 +08:00
Vincent Koc
2ee856985b fix(test): avoid walking contract shard plans 2026-05-16 08:57:57 +08:00
Vincent Koc
0e7cc1ca53 fix(test): avoid walking gateway suite targets 2026-05-16 08:47:05 +08:00
Jesse Merhi
6921d9072e Adopt Proxyline for managed proxy routing
Route managed HTTP/WebSocket/fetch interception through Proxyline 0.3.0, preserving Gateway loopback bypass behavior and root undici hardening.

Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
2026-05-15 22:51:36 +01:00
Peter Steinberger
a6dd9fdf08 fix(cron): separate failure notification delivery 2026-05-15 21:51:25 +01:00
Peter Steinberger
2e5a86adfe fix: finish room event gating 2026-05-15 21:47:46 +01:00
Peter Steinberger
333f65fc8a fix: tighten release tooling checks 2026-05-15 21:21:17 +01:00
Vincent Koc
dd4613a268 fix(test): reduce changed-target import graph IO 2026-05-16 03:47:47 +08:00
Vincent Koc
dea6207dd1 fix(plugins): require npm package compatibility metadata 2026-05-16 03:08:42 +08:00
Vincent Koc
a6aa48350b fix: route crabbox proof through brokered aws 2026-05-16 02:44:06 +08:00
Vincent Koc
b21d3e5362 fix(plugins): verify packaged setup runtime entries 2026-05-16 02:32:32 +08:00
Peter Steinberger
1bcc071385 ci(release): harden beta validation gates 2026-05-15 18:28:52 +01:00
Peter Steinberger
6330fe607d fix(release): verify npm tarball before publish 2026-05-15 17:33:28 +01:00
Peter Steinberger
abbfd276ee ci(release): stringify candidate workflow fields 2026-05-15 15:43:43 +01:00
Peter Steinberger
492f59e586 ci(release): preserve candidate JSON parse cause 2026-05-15 15:32:17 +01:00
Peter Steinberger
d61051558b ci(release): harden candidate workflow dispatch lookup 2026-05-15 15:10:34 +01:00
Peter Steinberger
c91e20ac0c ci(release): add candidate evidence checklist 2026-05-15 14:54:46 +01:00
Ayaan Zaidi
f1b92c8885 fix(mantis): publish evidence to r2 (#81845)
* fix(mantis): publish evidence to r2

* ci(mantis): pass r2 artifact credentials

* ci(mantis): pin artifact bucket config

* fix(mantis): link raw evidence index
2026-05-15 16:23:53 +05:30
Peter Steinberger
dfeaf6f7cf refactor: add gateway method dispatch contract 2026-05-15 11:44:58 +01:00
Peter Steinberger
ec9d56601a test: add Gemini subagent stress e2e 2026-05-15 10:01:29 +01:00
Peter Steinberger
f4d90eb36a test: guard Telegram grammY type imports 2026-05-15 08:38:44 +01:00
Peter Steinberger
b830beb34b fix: surface update restart and plugin repair guidance 2026-05-15 07:32:29 +01:00
Peter Steinberger
a9aafc84b1 fix: fetch git installer branch refs without tags 2026-05-15 05:11:35 +01:00
Keshav's Bot
b26dcb3390 fix: scope git installer lockfile refresh 2026-05-15 05:11:35 +01:00
Keshav's Bot
36411cde8f fix: let git installer refresh lockfile 2026-05-15 05:11:35 +01:00
Keshav's Bot
e72c849359 fix: make installer pnpm install noninteractive 2026-05-15 05:11:35 +01:00
Keshav's Bot
0d22fbf312 fix: avoid tag fetch for main installer ref 2026-05-15 05:11:35 +01:00
Peter Steinberger
c9b6b0be0e fix(mantis): stop git-backed evidence publishing 2026-05-14 18:34:31 +01:00
Mason Huang
83d7ab0d36 fix(changelog): reject bot/app handles as Thanks attribution and require explicit human credit (#81357)
Summary:
- The PR expands forbidden changelog `Thanks` attribution rules for bot/app handles, shares the Node predicate ... ngelog gate, requires explicit human credit for bot/app-authored changelog entries, and adds focused tests.
- Reproducibility: yes. Current main source shows bot/app changelog authors can skip human attribution and bot/app `Thanks` handles are not all rejected; I did not execute tests because this review was read-only.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix: simplify bot changelog credit guard
- PR branch already contained follow-up commit before automerge: fix: share changelog credit attribution rule
- PR branch already contained follow-up commit before automerge: fix: tighten changelog attribution scanning
- PR branch already contained follow-up commit before automerge: test: cover legacy changelog credit exclusions
- PR branch already contained follow-up commit before automerge: fix: express changelog credit exclusions as union sets
- PR branch already contained follow-up commit before automerge: fix: avoid substring changelog credit exclusions

Validation:
- ClawSweeper review passed for head 1e6d0f53ec.
- Required merge gates passed before the squash merge.

Prepared head SHA: 1e6d0f53ec
Review: https://github.com/openclaw/openclaw/pull/81357#issuecomment-4439359411

Co-authored-by: Mason Huang <masonxhuang@tencent.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-14 15:04:43 +00:00
joshavant
8ba7927f6e fix telegram ingress worker dist entry 2026-05-14 04:55:39 -05:00
Peter Steinberger
266722500c fix(ui): avoid noisy i18n report locale warnings 2026-05-14 10:27:12 +01:00
samzong
4e76d6e427 fix(ui): harden i18n report filters
Signed-off-by: samzong <samzong.lu@gmail.com>
2026-05-14 10:27:12 +01:00
samzong
ee9d471865 feat(ui): add i18n baseline report
Signed-off-by: samzong <samzong.lu@gmail.com>
2026-05-14 10:27:12 +01:00
Peter Steinberger
a0f35574d0 Remove codex-cli backend and migrate to Codex runtime
Remove the bundled codex-cli backend, migrate legacy codex-cli refs and runtime pins to the Codex app-server runtime, and update live/backend workflow coverage for the supported CLI lanes.
2026-05-14 10:07:18 +01:00
scotthuang
c35634c729 Fix/weixin catalog update 2.4.3 (#81730)
* fix(weixin): upgrade catalog to 2.4.3

* fix(weixin): update catalog integrity for 2.4.3

---------

Co-authored-by: scotthuang <scotthuang@tencent.com>
2026-05-14 03:32:38 -05:00
Vincent Koc
94f3ecae9a perf(cli): route plugin list json directly 2026-05-14 16:29:21 +08:00
Vincent Koc
8717525fbc test(cli): cover parent startup budgets 2026-05-14 16:18:26 +08:00
Peter Steinberger
0916a19cb5 ci: block new package patches 2026-05-14 07:57:59 +01:00
Peter Steinberger
81b239dc98 build: externalize slack openshell vertex plugins 2026-05-14 07:46:58 +01:00
Peter Steinberger
36755e4057 [codex] externalize amazon bedrock providers (#81687)
* build: externalize amazon bedrock providers

* build: skip external plugins in root dist graph

* test: update managed npm override expectation

* build: mark amazon providers external-only
2026-05-14 07:27:40 +01:00
Vincent Koc
e064cc98f0 fix(ci): skip locale refresh on invalid provider auth 2026-05-14 14:13:39 +08:00
Vincent Koc
8f612787a8 fix(ci): restore control ui locale refresh 2026-05-14 13:58:27 +08:00