Vincent Koc
f5a7f613ee
fix(release): use monthly patch versions
...
Switch release train handling to YYYY.M.PATCH monthly patch numbering, preserve pre-transition compatibility, and pin the June 2026 stable/beta floor at 2026.6.5 after the published beta.
Verification:
- node scripts/run-vitest.mjs run test/appcast.test.ts test/release-check.test.ts test/scripts/package-mac-app.test.ts test/scripts/package-mac-dist.test.ts test/openclaw-npm-release-check.test.ts test/npm-publish-plan.test.ts src/infra/npm-registry-spec.test.ts src/infra/clawhub.test.ts src/plugins/clawhub.test.ts test/plugin-npm-release.test.ts test/scripts/ios-version.test.ts test/scripts/ios-pin-version.test.ts
- node --import tsx scripts/plugin-npm-release-check.ts --base-ref origin/main --head-ref HEAD
- node --import tsx scripts/plugin-clawhub-release-check.ts --base-ref origin/main --head-ref HEAD
- git diff --check origin/main...HEAD
- .agents/skills/autoreview/scripts/autoreview --mode branch --base origin/main --no-web-search
2026-06-06 12:26:32 -07:00
Vincent Koc
e1d18e5d02
fix(ci): surface advisory release QA failures
2026-06-06 19:20:29 +02:00
Vincent Koc
cf152fe76e
fix(ci): require valid Kova partial reports
2026-06-06 18:28:22 +02:00
dependabot[bot]
2ab4eaa2b1
build(deps): bump docker/login-action from 3.6.0 to 4.1.0 ( #74980 )
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.6.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/v3.6.0...4907a6ddec9925e35a0a9e82d7399ccc52663121 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 14:12:53 -07:00
dependabot[bot]
662d366f01
chore(deps): bump the actions group across 1 directory with 4 updates ( #90601 )
...
Bumps the actions group with 4 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action ), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ), [docker/build-push-action](https://github.com/docker/build-push-action ) and [openai/codex-action](https://github.com/openai/codex-action ).
Updates `github/codeql-action` from 4 to 4.36.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Commits](https://github.com/github/codeql-action/compare/v4...v4.36.1 )
Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](4d04d5d948...d7f5e7f509 )
Updates `docker/build-push-action` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](bcafcacb16...f9f3042f7e )
Updates `openai/codex-action` from 1.7 to 1.8
- [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md )
- [Commits](5c3f4ccdb2...e0fdf01220 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.36.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: docker/setup-buildx-action
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: docker/build-push-action
dependency-version: 7.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: openai/codex-action
dependency-version: '1.8'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 13:37:40 -07:00
Mason Huang
8b29ff5f16
fix(ci): scope PR merge diff checks to first parent ( #90287 )
...
Summary:
- This PR adds opt-in first-parent merge-head diff-base handling for CI changed-scope, changed-lanes, and OpenGrep PR scans, plus synthetic merge coverage and small lint/type cleanups.
- PR surface: Source +6, Tests +204, Config +1, Other +179. Total +390 across 15 files.
- Reproducibility: yes. The synthetic merge tests and PR body live-ref proof show the stale payload-base path can include main-only files, and first-parent mode narrows it to PR-owned paths.
Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(ci): update workflow guard expectations
- PR branch already contained follow-up commit before automerge: fix(ci): resolve plugin guardrail lint failures
- PR branch already contained follow-up commit before automerge: fix(ci): preserve plugin run context typing
- PR branch already contained follow-up commit before automerge: fix(ci): scope PR merge diff checks to first parent
Validation:
- ClawSweeper review passed for head 40235e8c3d .
- Required merge gates passed before the squash merge.
Prepared head SHA: 40235e8c3d
Review: https://github.com/openclaw/openclaw/pull/90287#issuecomment-4621155576
Co-authored-by: Mason Huang <masonxhuang@tencent.com >
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: hxy91819
Co-authored-by: hxy91819 <8814856+hxy91819@users.noreply.github.com >
2026-06-04 17:24:03 +00:00
Vincent Koc
7dead6537a
test(e2e): keep tui pty smoke off arm gateway runs
2026-06-04 09:50:57 -07:00
Vincent Koc
d26cef4249
fix(ci): preserve crabbox hydrate pnpm store
2026-06-04 03:59:51 +02:00
Vincent Koc
4fbc318e30
ci: stabilize live e2e resource lanes
2026-06-04 02:59:52 +02:00
Peter Steinberger
bf368e7609
ci(release): promote Windows node installers
2026-06-03 22:39:58 +01:00
Vincent Koc
7b82901e58
ci(crabbox): keep hydrated modules under node_modules
2026-06-03 13:50:10 -07:00
Vincent Koc
b7450f83a1
ci(docker): disable alpha image publishes
2026-06-03 06:46:42 -07:00
Vincent Koc
6d788a237c
fix(ci): isolate ARM Testbox workflow
2026-06-03 00:04:12 -07:00
Vincent Koc
78b3f60dbd
fix(ci): reset crabbox pnpm hydrate state
2026-06-03 05:33:59 +02:00
Peter Steinberger
a355c8897d
ci(release): keep docker preflight cheap
2026-06-02 02:48:41 +01:00
Vincent Koc
2e6016fdec
fix(ci): keep crabbox pnpm hydrate off tmpfs
2026-06-02 03:38:51 +02:00
Peter Steinberger
e8120a72e1
ci(release): retry quiet node shard stalls
2026-06-01 23:43:03 +01:00
Peter Steinberger
4e45010203
ci(release): fail fast on red release children
...
(cherry picked from commit 8d7038775f )
2026-06-01 22:42:53 +01:00
Kevin Lin
f8491b0fcf
enhance(slack): route plugin approvals through native UI
...
Route Slack plugin approval delivery through the shared native approval route gates while preserving Slack Block Kit buttons and plugin resolver semantics.
Verification: Slack/native approval unit tests, Slack QA Lab, and live clawd native plugin approval via Slack desktop.
2026-06-01 13:55:59 -07:00
Dallin Romney
8ba6dfeaf6
fix(ci): restore dist cache before artifact builds ( #89169 )
2026-06-01 10:55:27 -07:00
Peter Steinberger
e8c126eaf2
fix(ci): use QA runtime build for release checks
2026-06-01 15:12:50 +01:00
Vincent Koc
3322212f14
fix(ci): tolerate pnpm workspace state on Windows hydrate
2026-06-01 09:36:41 +02:00
Vincent Koc
ddbd595f2f
fix(ci): link Windows hydrate node modules
2026-06-01 08:38:25 +02:00
Vincent Koc
fb17986af5
fix(ci): preserve hydrated Windows test deps
2026-06-01 06:08:10 +02:00
Peter Steinberger
0369672691
feat(minimax): add m3 model support ( #88860 )
2026-05-31 21:47:47 -04:00
Vincent Koc
fdd02444b7
ci: add ARM Testbox lane
2026-06-01 00:20:09 +01:00
Peter Steinberger
d62bfab946
ci: split startup and shrinkwrap checks
2026-05-31 15:55:43 -04:00
WT-WSL
462b52f62c
fix(ci): guard workflow template injection
...
Guard the remaining Windows Testbox workflow ref logging against GitHub Actions template injection by moving `target_ref` through step env before PowerShell reads it.
Extend the local workflow check wrapper to run pinned `zizmor` across every workflow file, and keep Workflow Sanity's CI audit explicit with trusted-base pre-commit and zizmor configs for pull-request runs.
Thanks @WT-WSL for the original report and patch.
Co-authored-by: dev111-actor <captaintobb@outlook.com >
2026-05-31 20:28:40 +01:00
zhang-guiping
2fbddce881
fix(cli): avoid catalog validation in agents add ( #88314 )
...
Fixes #76284 .
Thanks @zhangguiping-xydt.
Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com >
2026-05-31 19:22:16 +01:00
zhang-guiping
b6e9473e9f
fix(auth): skip Anthropic API keys for usage status
...
Fixes #85124 .
Anthropic standard API keys no longer resolve as provider usage auth for `openclaw status --usage`, so valid inference keys are not sent to Anthropic's OAuth usage endpoint and surfaced as misleading invalid bearer-token errors.
The provider usage-auth SDK result now has an explicit handled/no-token shape so provider hooks can suppress generic fallback without widening the OAuth helper contract. Docs, Plugin SDK API baseline, and extension package-boundary cache inputs were updated with the new contract.
Thanks @zhangguiping-xydt.
Proof:
- node scripts/run-vitest.mjs src/infra/provider-usage.auth.normalizes-keys.test.ts src/infra/provider-usage.auth.plugin.test.ts extensions/anthropic/index.test.ts
- pnpm plugin-sdk:api:check
- pnpm plugin-sdk:check-exports
- git diff --check origin/main...HEAD
- pnpm docs:list
- pnpm run test:extensions:package-boundary:compile
- autoreview clean: no accepted/actionable findings
- PR CI rollup green: 131 success, 22 skipped, 1 neutral, 0 failures
Co-authored-by: 张贵萍0668001030 <zhang.guiping@xydigit.com >
2026-05-31 18:26:03 +01:00
Peter Steinberger
d689893a6f
ci(release): extend QA runtime parity timeout
2026-05-31 15:36:35 +01:00
Peter Steinberger
d1bec469af
ci: stabilize Testbox changed checks
2026-05-31 15:34:23 +01:00
Peter Steinberger
d99934aacd
ci: use normal node_modules for Blacksmith Testbox
2026-05-31 15:04:49 +01:00
Peter Steinberger
3525a965ed
test(release): stabilize beta validation lanes
2026-05-31 12:09:49 +01:00
Peter Steinberger
7d8fdef995
ci(release): run npm preflight on larger runner
2026-05-31 11:37:04 +01:00
Peter Steinberger
d4f78c9339
ci: harden Crabbox Testbox runs
2026-05-31 09:29:56 +01:00
mochiexists
096bd13962
build(OpenClawKit): make ElevenLabsKit optional behind Talk trait
...
Adds a default-enabled SwiftPM Talk trait for OpenClawKit so chat-only consumers can opt out with traits: [] and avoid resolving ElevenLabsKit. Default traits preserve existing talk/TTS API and bundled app behavior; macOS CI now verifies the trait-off dependency graph and build.
Verification:
- CI at 85f00ebc04 passed macos-swift and Real behavior proof.
- Local Swift 6.3.2: trait-off dependency graph omitted ElevenLabsKit; full swift build with default traits disabled built through OpenClawChatUI; default dependency graph still included ElevenLabsKit; trait-off OpenClawKit target build passed.
- merge-tree against latest origin/main 4eba3e5d7d was clean.
- Current main already fails plugin-SDK declaration gates in unrelated TS files; reproduced locally with node scripts/run-tsgo.mjs -p tsconfig.plugin-sdk.dts.json --declaration true.
Thanks @mochiexists.
Co-authored-by: mochiexists <259077624+mochiexists@users.noreply.github.com >
Co-authored-by: atlascodesai <76924051+atlascodesai@users.noreply.github.com >
2026-05-31 07:40:35 +01:00
Peter Steinberger
00d8d7ead0
refactor: extract normalization core package
...
Extract shared normalization/coercion helpers into private @openclaw/normalization-core workspace package while preserving existing plugin SDK helper subpaths.\n\nAlso keeps direct normalization-core imports internal, wires UI/build/loader resolution, and replaces the slow PR network CodeQL lane with a fast added-line boundary scan while retaining full CodeQL for scheduled/manual runs.\n\nVerification: local moved tests, plugin SDK boundary tests, extension loader tests, agents-support shard, UI build/test, build artifacts, lint, workflow guards, autoreview, and GitHub CI passed on PR head 963d893715 .
2026-05-31 01:33:00 +01:00
Peter Steinberger
287687da20
feat: add internal code mode namespaces ( #88043 )
...
* feat: add internal code mode namespaces
* test: add code mode namespace live proof
* test: add live code mode Docker repro
* chore: keep code mode docker repro out of package scripts
* fix: break code mode namespace type cycle
* fix: clean code mode namespace ci drift
* fix: route code mode namespaces through tools
* fix: preserve explicit agent global sessions
* docs: explain code mode namespace registry
* test: cap realtime websocket payload
* fix: normalize code mode timeout results
* fix: satisfy code mode timeout lint
* chore: rerun code mode CI
* ci: extend node shard silence watchdog
* test: avoid child process mock deadlocks
* test: fix code mode repro shebang
* fix: scope explicit agent sentinel sessions
* test: preserve child process mock actual loader
* fix: dispatch namespace tools by exact id
* test: satisfy restart execFile mock type
2026-05-30 22:42:57 +01:00
Vincent Koc
8b50cdd151
ci: update remaining Testbox actions
2026-05-30 22:11:51 +01:00
Peter Steinberger
427df01d4e
ci(release): checkout approval helper
2026-05-30 21:13:19 +01:00
Peter Steinberger
50b7a2ffa1
ci(release): allow direct publish recovery
2026-05-30 21:13:19 +01:00
Vincent Koc
eb5e80f58a
ci: update Blacksmith Testbox actions
2026-05-30 20:51:31 +01:00
Peter Steinberger
37c6e2dfa0
ci: skip codeql network shard for test-only changes
2026-05-30 20:29:19 +01:00
Peter Steinberger
e24a9c5457
ci: keep harness changes on fast checks ( #88429 )
2026-05-30 20:27:59 +01:00
Peter Steinberger
30e1556cda
refactor: extract model catalog core package
...
* refactor: extract model catalog core package
* refactor: route model catalog imports through package boundary
* build: include model catalog in plugin sdk package dts
* fix: preserve static fallback model metadata
2026-05-30 16:33:45 +01:00
Peter Steinberger
65fe2b7e91
ci: tolerate release branches without llm core package
2026-05-30 14:48:08 +01:00
Peter Steinberger
aa0d6e1bca
refactor: extract LLM core packages ( #88117 )
...
* refactor: extract llm core packages
* chore: drop generated llm package artifacts
* fix: align llm package export artifacts
* test: fix moving main CI expectations
* fix: align llm core subpath aliases
* fix: use llm package exports
* fix: stabilize llm package boundary artifacts
* fix: sync llm boundary path contract
* test: isolate crabbox provider env
* test: pin crabbox configured-provider cases
* test: apply crabbox lease provider override
2026-05-30 07:45:04 +02:00
Dallin Romney
29b32050c1
feat(ci): autoscrub dependency lockfile-only PR changes ( #87796 )
...
* ci: autoscrub dependency lockfile residue
* ci: harden dependency autoscrub commits
* ci: scope dependency autoscrub tokens
* ci: split autoscrub base reads
* ci: expand autoscrub proof comment
2026-05-29 19:37:16 -07:00
Dallin Romney
784fbcfd16
ci: relax platform checkout fetch timeout ( #88199 )
2026-05-29 19:17:29 -07:00