Vincent Koc
4aeb0255f3
docs: rename TaskFlow to Task Flow in prose
2026-04-03 03:22:01 +09:00
Peter Steinberger
0ebb69b882
build: set release version to 2026.4.2
2026-04-02 19:09:58 +01:00
Agustin Rivera
49d08382a9
iOS: restrict A2UI action dispatch to trusted canvas URLs ( #58471 )
...
* fix(ios): restrict a2ui bridge trust
* test(ios): cover fragment-strip trust and document raw-string equality
* fix(ios): normalize capability URL before trust comparison in canvas commands
* fix(ios): trim canvas.navigate url before trust comparison
* chore: add changelog for iOS A2UI trust boundary
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:51:09 -06:00
Peter Steinberger
00aa31a30c
docs(changelog): remove duplicate entries
2026-04-02 18:48:27 +01:00
Agustin Rivera
676b748056
Limit connect snapshot metadata to admin-scoped clients ( #58469 )
...
* fix(gateway): gate connect snapshot metadata by scope
* fix(gateway): clarify connect snapshot trust boundary
* fix(gateway): note connect snapshot change in changelog
* fix(gateway): remove changelog changes from PR
* chore: add changelog for scoped gateway snapshot metadata
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:41:47 -06:00
Peter Steinberger
a4a372825e
docs(changelog): reorder unreleased fixes
2026-04-02 18:39:31 +01:00
Peter Steinberger
45c8207ef2
fix(exec): clarify auto routing semantics ( #58897 ) (thanks @vincentkoc)
2026-04-03 02:37:12 +09:00
Agustin Rivera
5874a387ae
fix(windows): reject unresolved cmd wrappers ( #58436 )
...
* fix(windows): reject unresolved cmd wrappers
* fix(windows): add wrapper policy coverage
* fix(windows): document wrapper fallback migration
* fix(windows): drop changelog entry from pr
* chore: add changelog for Windows wrapper fail-closed behavior
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-02 11:35:50 -06:00
Peter Steinberger
3e452f2671
fix: preserve strict inline-eval approval boundaries ( #59780 ) (thanks @luoyanglang)
2026-04-02 18:30:29 +01:00
Peter Steinberger
d56415e353
fix(openai): support reference-image edits
2026-04-03 02:26:33 +09:00
Agustin Rivera
a941a4fef9
fix(android): require TLS for remote gateway endpoints ( #58475 )
...
* fix(android): require tls for remote gateway endpoints
* fix(android): expand loopback gateway coverage
* fix(android): validate scanned gateway endpoints
* fix(android): handle mapped loopback literals
* fix(android): allow emulator bridge host
* fix(changelog): note android gateway tls hardening
* fix(android): preserve first-time tls trust prompts
* fix(changelog): drop android gateway entry from pr
* fix(android): scope emulator bridge tls bypass
* fix(android): normalize ipv6 gateway hosts
* fix(android): preserve ipv6 gateway url brackets
* fix(android): preserve auth across tls trust prompt
* fix(android): normalize bracketed ipv6 gateway hosts
* chore: add changelog for Android remote gateway TLS
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
Co-authored-by: Devin Robison <drobison00@users.noreply.github.com >
2026-04-02 11:23:51 -06:00
Peter Steinberger
2ea0ca08f6
test: add cross-provider approval availability coverage ( #59776 ) (thanks @joelnishanth)
2026-04-03 02:21:17 +09:00
Peter Steinberger
9b48a4d90a
docs: fix changelog conflict markers ( #59466 )
2026-04-03 02:19:32 +09:00
Peter Steinberger
bacc938c2a
docs: note windows exec landing ( #59466 ) (thanks @lawrence3699)
2026-04-03 02:19:32 +09:00
pgondhi987
7eb094a00d
fix(infra): align env key normalization in approval binding path ( #59182 )
...
* fix: address issue
* fix: address PR review feedback
* fix: address review feedback
* fix: address review feedback
* chore: add changelog for Windows env approval binding
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:14:33 -06:00
Peter Steinberger
f30b4bc717
fix: remove leaked changelog conflict marker
2026-04-02 18:07:39 +01:00
Peter Steinberger
247a06813e
fix: avoid gateway cwd for node exec ( #58977 ) (thanks @Starhappysh)
2026-04-03 02:04:26 +09:00
pgondhi987
8aceaf5d0f
fix(security): close fail-open bypass in exec script preflight [AI] ( #59398 )
...
* fix: address issue
* fix: finalize issue changes
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* fix: address PR review feedback
* fix: address PR review feedback
* chore: add changelog for exec preflight fail-closed hardening
---------
Co-authored-by: Devin Robison <drobison@nvidia.com >
2026-04-02 11:00:39 -06:00
Peter Steinberger
2170d36171
docs(changelog): add Windows drive-less exec fix note ( #58040 ) (thanks @SnowSky1)
2026-04-03 01:53:25 +09:00
Agustin Rivera
a26f4d0f3e
Separate Gemini OAuth state from PKCE verifier ( #59116 )
...
* fix(google): separate oauth state from pkce verifier
* fix(google): drop unused oauth callback state arg
* docs(changelog): add #59116 google oauth state fix
---------
Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com >
2026-04-02 09:51:11 -07:00
Devin Robison
96b55821bc
fix: share ACP owner-only approval classes ( #201 ) ( #59255 )
...
Co-authored-by: OpenClaw Dummy Agent <octriage-dummy@example.invalid >
2026-04-02 10:45:41 -06:00
Jacob Tomlinson
176c059b05
node-host: bind pnpm dlx approval scripts ( #58374 )
...
* node-host: bind pnpm dlx approval scripts
* node-host: cover pnpm dlx package alias
* node-host: cover pnpm dlx flag forms
* node-host: fail closed on unsafe pnpm dlx flags
* node-host: narrow pnpm dlx fail-closed guard
* node-host: scan pnpm dlx past global --
* node-host: allow pnpm dlx file args
* node-host: allow pnpm dlx data args
* node-host: fail closed on unknown pnpm dlx flags
* node-host: support pnpm workspace-root flag
* node-host: restrict pnpm dlx tail scan
* node-host: support pnpm parallel flag
* changelog: node-host pnpm dlx approval binding (#58374 )
2026-04-02 09:41:28 -07:00
pgondhi987
7cea7c2970
fix(zalo): scope replay dedupe cache key to path and account [AI] ( #59387 )
...
* fix: address issue #139
* changelog: add zalo replay dedupe fix entry
---------
Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com >
2026-04-02 09:36:35 -07:00
Peter Steinberger
bf1fcf2e5f
docs(approvals): clarify auto native approval routing
2026-04-02 17:31:02 +01:00
Ayaan Zaidi
34a5c47351
fix: preserve Android assistant auto-send queue
2026-04-02 21:39:24 +05:30
pgondhi987
462b4020bc
fix(browser): block SSRF redirect bypass via real-time route interception ( #58771 )
...
Install a Playwright route handler before `page.goto()` so navigations
to private/internal IPs are intercepted and aborted mid-redirect instead
of being checked post-hoc after the request already reached the internal
host. Blocked targets are permanently marked and rejected for subsequent
tool calls.
Thanks @pgondhi987
2026-04-02 09:07:57 -07:00
Ayaan Zaidi
59bdf870b9
fix: add Android assistant auto-send changelog ( #59721 )
2026-04-02 21:27:14 +05:30
seonang
4207ca2eb8
Fix Telegram exec approval delivery and auto-resume fallback
2026-04-03 00:56:54 +09:00
Priyansh Gupta
77e636cf78
fix(agents): include received keys in missing-param error for write tool ( #55317 )
...
Merged via squash.
Prepared head SHA: c1cf0691c933621094+priyansh19@users.noreply.github.com >
Co-authored-by: jalehman <550978+jalehman@users.noreply.github.com >
Reviewed-by: @jalehman
2026-04-02 08:54:28 -07:00
Peter Steinberger
c0b6531ec7
docs: add changelog for cron exec timeout fix ( #58247 ) (thanks @skainguyen1412)
2026-04-03 00:43:42 +09:00
Peter Steinberger
7e2a450e31
docs: remove duplicated beta changelog fixes
2026-04-02 16:33:51 +01:00
Peter Steinberger
1f531d373b
docs: dedupe changelog mirror fixes
2026-04-02 16:33:21 +01:00
Peter Steinberger
423f7c3487
build: prep 2026.4.2-beta.1 release
2026-04-02 16:33:21 +01:00
Vincent Koc
0ad2dbd307
fix(providers): route image generation through shared transport ( #59729 )
...
* fix(providers): route image generation through shared transport
* fix(providers): use normalized minimax image base url
* fix(providers): fail closed on image private routes
* fix(providers): bound shared HTTP fetches
2026-04-03 00:32:37 +09:00
Peter Steinberger
0a76780f57
docs(changelog): mark 2026.4.1 as stable
2026-04-02 16:19:06 +01:00
Peter Steinberger
eb261fa690
fix: land Windows exec allowlist ( #56285 ) (thanks @kpngr)
2026-04-03 00:09:28 +09:00
Peter Steinberger
831729be4a
docs(changelog): note telegram approval alias fix ( #59217 ) (thanks @jameslcowan)
2026-04-02 23:41:12 +09:00
mappel-nv
53c29df2a9
Channel setup: ignore untrusted workspace shadows ( #59158 )
...
Keeps untrusted workspace channel metadata from overriding setup/login resolution for built-in channels. Workspace channel entries are only eligible during setup when the plugin is already explicitly trusted in config.
- Track discovered origin on channel catalog entries and add a setup-time catalog lookup that excludes workspace discoveries when needed
- Add resolver regression coverage for untrusted shadowing and trusted workspace overrides
Thanks @mappel-nv
2026-04-02 07:40:23 -07:00
wangchunyue
b40ef364b7
fix: pin admin-only subagent gateway scopes ( #59555 ) (thanks @openperf)
...
* fix(agents): pin subagent gateway calls to admin scope to prevent scope-upgrade pairing failures
callSubagentGateway forwards params to callGateway without explicit scopes,
so callGatewayLeastPrivilege negotiates the minimum scope per method
independently. The first connection pairs the device at a lower tier and
every subsequent higher-tier call triggers a scope-upgrade handshake that
headless gateway-client connections cannot complete interactively
(close 1008 "pairing required").
Pin callSubagentGateway to operator.admin so the device is paired at the
ceiling scope on the very first (silent, local-loopback) handshake, avoiding
any subsequent scope-upgrade negotiation entirely.
Fixes #59428
* fix: pin admin-only subagent gateway scopes (#59555 ) (thanks @openperf)
---------
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-04-02 19:40:03 +05:30
jacky
ecf72319ed
fix: use JSON5 parser for plugin manifest loading ( #57734 ) [AI-assisted] ( #59084 )
...
Merged via squash.
Prepared head SHA: 58a4d537fc179357632+singleGanghood@users.noreply.github.com >
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
Reviewed-by: @hxy91819
2026-04-02 22:02:04 +08:00
Vincent Koc
b0f94a227b
refactor(providers): normalize transport policy wiring ( #59682 )
...
* refactor(providers): normalize transport policy wiring
* fix(providers): address transport policy review
* fix(providers): harden transport overrides
* fix(providers): keep env proxy tls separate
* fix(changelog): note provider transport policy hardening
2026-04-02 22:54:34 +09:00
Peter Steinberger
c678ae7e7a
feat(exec): default host exec to yolo
2026-04-02 14:52:51 +01:00
Vincent Koc
0500b410c5
docs: update config paths for Firecrawl web_fetch and xAI x_search migrations, add Android assistant section, backfill PR numbers
2026-04-02 22:52:00 +09:00
Peter Steinberger
1ecd92af89
chore: refresh deps and backfill changelog
2026-04-02 14:49:47 +01:00
Ayaan Zaidi
a1f95e5278
fix: land Android assistant entrypoints ( #59596 )
2026-04-02 19:16:34 +05:30
Agustin Rivera
290e5bf219
fix(dotenv): block helper interpreter workspace overrides ( #58473 )
...
* fix(dotenv): block helper interpreter workspace overrides
* fix(dotenv): cover trusted helper interpreter envs
* fix(changelog): note dotenv helper override hardening
* fix(changelog): remove dotenv entry from pr
* changelog: note dotenv helper override hardening
---------
Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com >
2026-04-02 06:45:13 -07:00
Jacob Tomlinson
3528e15817
changelog: add openshell mirror sync fix entry ( #58515 )
2026-04-02 13:23:58 +00:00
Peter Steinberger
3cca07a983
docs: reorder changelog entries by user interest
2026-04-02 14:22:19 +01:00
Vincent Koc
3e4de956c0
!refactor(xai): move x_search config behind plugin boundary ( #59674 )
...
* refactor(xai): move x_search config behind plugin boundary
* chore(changelog): note x_search config migration
* fix(xai): include x_search migration helpers
2026-04-02 22:08:59 +09:00
Agustin Rivera
ef7c553dd1
fix(zalo): scope webhook replay dedupe ( #58444 )
...
* fix(zalo): scope webhook replay dedupe
* fix(zalo): harden replay metadata reads
* docs(changelog): add Zalo replay scope fix entry
---------
Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com >
2026-04-02 06:07:14 -07:00
