Peter Steinberger
e733774e3c
fix(test): repair telegram prerelease blockers
2026-06-01 10:26:12 +01:00
Mason Huang
004835f4c7
fix(plugins): block untrusted workspace setup-only channel loads ( #86953 )
...
Summary:
- This PR blocks disabled workspace-origin channel plugins from setup-only scoped imports, rejects their channel registrations at registry assembly, documents the trust rule, and adds regression coverage.
- PR surface: Source +46, Tests +610, Docs +13. Total +669 across 22 files.
- Reproducibility: yes. source inspection gives a high-confidence reproduction path: current main's setup-only ... ce channel plugin can be imported before this PR. I did not run the repro locally in this read-only review.
Automerge notes:
- PR branch already contained follow-up commit before automerge: test(plugins): cover workspace channel registry guard
- PR branch already contained follow-up commit before automerge: fix(plugins): isolate setup channel registration errors
- PR branch already contained follow-up commit before automerge: fix(channels): mark raw catalog listing internal
- PR branch already contained follow-up commit before automerge: test(channels): cover trusted catalog filtering
- PR branch already contained follow-up commit before automerge: test(channels): mock raw catalog helper
- PR branch already contained follow-up commit before automerge: docs(changelog): credit setup channel hardening
Validation:
- ClawSweeper review passed for head 11438bc1a011438bc1a0https://github.com/openclaw/openclaw/pull/86953#issuecomment-4545730044
Co-authored-by: masonxhuang <masonxhuang@tencent.com >
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: Sebastien Tardif <sebtardif@ncf.ca >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-01 09:25:56 +00:00
Vincent Koc
3119f08009
fix(scripts): bound shrinkwrap npm commands
2026-06-01 11:23:20 +02:00
Vincent Koc
26aaf03719
fix(scripts): clean control ui i18n timeouts
2026-06-01 11:10:57 +02:00
Vincent Koc
174e7711f3
fix(build): clean CLI startup metadata timeouts
2026-06-01 10:52:27 +02:00
Vincent Koc
947dde976c
fix(release): bound plugin npm verification commands
2026-06-01 10:36:46 +02:00
Vincent Koc
e680604577
fix(e2e): clean telegram credential timeouts
2026-06-01 10:13:57 +02:00
Peter Steinberger
a4196a4445
fix(ci): cache plugin sdk declarations safely
2026-06-01 04:09:07 -04:00
Vincent Koc
f2d0fe6417
fix(release): clean cross-os process groups
2026-06-01 10:00:23 +02:00
Peter Steinberger
bc470713bb
fix(e2e): enable smoke-tested plugin channels
2026-06-01 08:38:50 +01:00
Vincent Koc
3322212f14
fix(ci): tolerate pnpm workspace state on Windows hydrate
2026-06-01 09:36:41 +02:00
Vincent Koc
ac734d8e16
fix(e2e): clean package candidate timeouts
2026-06-01 09:22:07 +02:00
Vincent Koc
61ffd6bc66
fix(ci): bootstrap raw changed gates from clean checkouts
2026-06-01 08:01:11 +01:00
Vincent Koc
8fdb1d0f55
fix(e2e): stream Parallels fresh logs
2026-06-01 08:54:22 +02:00
Vincent Koc
c11ff35841
fix(e2e): bound Parallels update logs
2026-06-01 08:42:08 +02:00
Vincent Koc
ddbd595f2f
fix(ci): link Windows hydrate node modules
2026-06-01 08:38:25 +02:00
Vincent Koc
01124cfca9
fix(e2e): clean secret proof timeouts
2026-06-01 08:30:17 +02:00
Vincent Koc
28550c3847
fix(e2e): harden Parallels host timeouts
2026-06-01 08:15:34 +02:00
Vincent Koc
fb9e091852
fix(e2e): harden plugin gauntlet cleanup
2026-06-01 07:27:35 +02:00
Peter Steinberger
00399d6c75
test(release): repair beta validation blockers
2026-06-01 06:27:02 +01:00
Vincent Koc
74a075077c
fix(e2e): harden docker all cleanup
2026-06-01 07:05:15 +02:00
Vincent Koc
1aa1a70ac5
test(installer): isolate install shell HOME
2026-06-01 05:55:34 +01:00
Vincent Koc
5957bfdc54
fix(e2e): fail bundled smoke on missing channels
2026-06-01 06:45:58 +02:00
Vincent Koc
8cab0f23f8
fix(e2e): clean bundled runtime smoke state
2026-06-01 06:35:28 +02:00
Vincent Koc
ec6ad888a4
fix(e2e): bound telegram proof commands
2026-06-01 06:26:44 +02:00
Vincent Koc
fb17986af5
fix(ci): preserve hydrated Windows test deps
2026-06-01 06:08:10 +02:00
Vincent Koc
17245a0890
fix(test): bound qa otel smoke runs
2026-06-01 06:04:30 +02:00
Peter Steinberger
817c4ce4fc
test(release): stabilize installer and matrix async checks
2026-06-01 04:55:21 +01:00
Vincent Koc
5054b20832
fix(test): harden secret provider proof cleanup
2026-06-01 05:37:45 +02:00
Vincent Koc
76fa1b99c3
fix(test): bound test group report runs
2026-06-01 05:17:27 +02:00
Vincent Koc
916ee82814
test(installer): isolate install shell snippets
2026-06-01 04:11:22 +01:00
Peter Steinberger
7722ade22e
test(install): clear node lookup cache in floor check
2026-06-01 03:56:37 +01:00
Vincent Koc
b2b9fbe033
fix(test): bound mock OpenAI request bodies
2026-06-01 04:48:32 +02:00
Vincent Koc
a9938907dc
fix(test): harden MCP E2E proof checks
2026-06-01 04:34:25 +02:00
Vincent Koc
6c73ffc51a
fix(test): bound MCP code mode client responses
2026-06-01 04:05:23 +02:00
Vincent Koc
c764eb96c4
fix(test): tolerate vanished RPC gateway teardown
2026-06-01 03:48:59 +02:00
Peter Steinberger
0369672691
feat(minimax): add m3 model support ( #88860 )
2026-05-31 21:47:47 -04:00
kiranmagic7
cc97eca9b1
test(installer): keep Node floor tied to package engine
...
Adds a focused installer regression test tying install.sh's accepted Node 22 floor to the package engine floor. Thanks @kiranmagic7.
2026-05-31 21:32:00 -04:00
Peter Steinberger
5443baa852
Persist plugin install index in SQLite ( #88794 )
...
* refactor: persist plugin install index in sqlite
* fix: merge legacy plugin index records into sqlite
* test: update plugin index sqlite fixtures
* fix: migrate custom plugin install indexes
* test: update plugin index sentinel
* fix: exclude migrated plugin index archives
* fix: read post-upgrade plugin index from sqlite
* fix: migrate legacy plugin index before agent runs
* fix: respect disabled persisted plugin registry reads
* test: type plugin install record fixtures
* fix: simplify plugin index record reader type
* test: fix sqlite plugin index CI fallout
* test: mock provider normalization in agent command tests
# Conflicts:
# src/commands/agent-command.test-mocks.ts
* build: remove unused ui three dependency
2026-05-31 20:51:33 -04:00
Peter Steinberger
27dde7a4d6
chore(lint): enable stricter error rules
2026-06-01 01:12:21 +01:00
Vincent Koc
0bfba7e26d
fix(ui): detect system chromium for e2e
2026-06-01 01:09:46 +01:00
Vincent Koc
ddbd16a04a
fix(ui): honor chromium executable override
2026-06-01 00:20:10 +01:00
Vincent Koc
16ef9c1435
fix(ci): use reliable Azure Crabbox capacity
2026-06-01 00:38:11 +02:00
Peter Steinberger
22cb7fb6b7
chore(lint): enable no-promise-executor-return
2026-05-31 23:06:13 +01:00
Peter Steinberger
b653d94918
chore(lint): enable no-useless-assignment
2026-05-31 22:40:48 +01:00
Peter Steinberger
e681569536
feat: add code-mode MCP API files
...
* feat: add code-mode MCP API files
* fix: satisfy code-mode MCP lint
2026-05-31 21:29:06 +01:00
Peter Steinberger
92b9cd21ec
test: avoid positional CI check assertion
2026-05-31 16:00:04 -04:00
Peter Steinberger
d62bfab946
ci: split startup and shrinkwrap checks
2026-05-31 15:55:43 -04:00
Peter Steinberger
b4a6244ef4
ci: split agents core test shard
2026-05-31 15:35:36 -04:00
WT-WSL
462b52f62c
fix(ci): guard workflow template injection
...
Guard the remaining Windows Testbox workflow ref logging against GitHub Actions template injection by moving `target_ref` through step env before PowerShell reads it.
Extend the local workflow check wrapper to run pinned `zizmor` across every workflow file, and keep Workflow Sanity's CI audit explicit with trusted-base pre-commit and zizmor configs for pull-request runs.
Thanks @WT-WSL for the original report and patch.
Co-authored-by: dev111-actor <captaintobb@outlook.com >
2026-05-31 20:28:40 +01:00
