Agustin Rivera 06047005ef fix(browser): validate current tab before snapshots (#78526) ...

* fix(browser): validate current tab before snapshots

* fix(browser): reject snapshot selector before SSRF guard

* fix(test): stabilize plugin activation normalization

* fix(ci): fetch opengrep base history

* fix(snapshot): enforce snapshot ssrf policy

* docs(changelog): add unreleased entry for snapshot SSRF fix

* Revert "docs(changelog): add unreleased entry for snapshot SSRF fix"

This reverts commit 4f3031ff65.

* fix(changelog): record snapshot ssrf entry

2026-05-26 19:11:01 -07:00

..

acpx

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

active-memory

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

admin-http-rpc

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

alibaba

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

amazon-bedrock

build: use rastermill 0.3.0

2026-05-26 21:55:57 +01:00

amazon-bedrock-mantle

build: use rastermill 0.3.0

2026-05-26 21:55:57 +01:00

anthropic

fix(anthropic): pass system prompt on resumed claude-cli sessions

2026-05-27 01:31:13 +01:00

anthropic-vertex

build: use rastermill 0.3.0

2026-05-26 21:55:57 +01:00

arcee

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

azure-speech

test: speed up slow CI regressions

2026-05-26 13:13:19 +01:00

bonjour

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

brave

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

browser

fix(browser): validate current tab before snapshots (#78526)

2026-05-26 19:11:01 -07:00

byteplus

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

canvas

fix(scripts): preserve native pnpm exec paths

2026-05-26 17:36:48 +02:00

cerebras

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

chutes

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

clickclack

clickclack: enforce inbound sender allowlist [AI] (#83741)

2026-05-26 18:41:12 -07:00

cloudflare-ai-gateway

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

codex

fix(codex): quarantine unsupported dynamic tool schemas

2026-05-27 04:02:07 +02:00

comfy

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

copilot-proxy

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

deepgram

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

deepinfra

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

deepseek

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

device-pair

fix(gateway): gate talk secret bootstrap handoff (#85690)

2026-05-25 11:34:12 +03:00

diagnostics-otel

fix(diagnostics): flush OTel trace batches

2026-05-26 22:46:39 +01:00

diagnostics-prometheus

Add OpenTelemetry LLM content spans (#86191)

2026-05-26 02:24:02 +01:00

diffs

fix(deps): pin shrinkwrap patch drift to pnpm lock

2026-05-26 16:35:10 -04:00

discord

perf: trim gateway runtime hotspots

2026-05-27 02:17:29 +01:00

document-extract

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

duckduckgo

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

elevenlabs

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

exa

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

fal

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

feishu

fix: use current config sdk contract in feishu doctor

2026-05-26 17:45:24 +01:00

file-transfer

fix(filefetch): wrap fetched text as external content (#87062)

2026-05-26 18:29:48 -07:00

firecrawl

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

fireworks

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

github-copilot

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

google

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

google-meet

perf: speed up test hotspots

2026-05-27 00:30:51 +01:00

googlechat

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

gradium

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

groq

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

huggingface

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

image-generation-core

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

imessage

fix(imessage): dedupe accounts sharing the local Messages source (#86705)

2026-05-26 01:39:12 -07:00

inworld

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

irc

fix(irc): use channel routes for group inbound targets

2026-05-27 00:44:12 +01:00

kilocode

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

kimi-coding

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

line

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

litellm

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

llm-task

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

lmstudio

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

lobster

refactor: migrate validators to TypeBox (#86639)

2026-05-26 08:45:28 +01:00

matrix

fix(matrix): reject malformed integer cli values

2026-05-26 12:42:43 +01:00

mattermost

fix(mattermost): tag typed text slash control commands

2026-05-26 19:18:41 +10:00

media-understanding-core

refactor: delegate image processing to Rastermill

2026-05-26 21:55:57 +01:00

memory-core

fix(memory-core): close providers created during shutdown

2026-05-27 02:22:05 +01:00

memory-lancedb

test: fix current suite drift

2026-05-26 16:40:08 -04:00

memory-wiki

fix(memory): reject invalid CLI numeric options

2026-05-26 22:42:48 +01:00

microsoft

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

microsoft-foundry

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

migrate-claude

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

migrate-hermes

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

minimax

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

mistral

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

moonshot

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

msteams

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

nextcloud-talk

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

nostr

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

nvidia

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

oc-path

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

ollama

fix(ollama): normalize greedy top_p (#87049)

2026-05-27 02:41:30 +01:00

open-prose

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

openai

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

opencode

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

opencode-go

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

openrouter

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

openshell

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

perplexity

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

phone-control

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

policy

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

qa-channel

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

qa-lab

fix(qa): preserve corrupt auth profile files

2026-05-26 12:42:50 +01:00

qa-matrix

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

qianfan

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

qqbot

test(qqbot): make OPENCLAW_HOME media test Windows-safe

2026-05-26 05:52:05 +02:00

qwen

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

runway

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

searxng

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

senseaudio

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

sglang

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

signal

feat(plugin-sdk): add reaction approval helpers (#86735)

2026-05-26 15:28:50 -07:00

skill-workshop

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

slack

fix(slack): fast-path wildcard open DM policy

2026-05-27 00:50:48 +01:00

speech-core

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

stepfun

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

synology-chat

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

synthetic

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

talk-voice

…

tavily

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

telegram

fix(telegram): route plugin-bound topic messages

2026-05-27 02:52:25 +01:00

tencent

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

test-support

…

thread-ownership

…

tlon

build: use rastermill 0.3.0

2026-05-26 21:55:57 +01:00

together

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

tokenjuice

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

tts-local-cli

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

twitch

refactor: migrate validators to TypeBox (#86639)

2026-05-26 08:45:28 +01:00

venice

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

vercel-ai-gateway

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

video-generation-core

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

vllm

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

voice-call

perf: use typed arrays for audio codec loops (#86856)

2026-05-26 11:51:21 +01:00

volcengine

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

voyage

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

vydra

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

web-readability

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

webhooks

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

whatsapp

fix: preserve whatsapp inbound batch order

2026-05-26 18:51:18 -04:00

xai

Preserve xAI usage limit errors in local TUI (#86614)

2026-05-27 00:43:55 +01:00

xiaomi

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

zai

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

zalo

fix: stabilize media-related tests

2026-05-26 17:30:34 -04:00

zalouser

chore: bump OpenClaw to 2026.5.26

2026-05-26 01:26:00 +01:00

.npmignore

…

AGENTS.md

docs: prefer clean refactors over compat shims

2026-05-16 12:38:51 +01:00

CLAUDE.md

…

music-generation-providers.live.test.ts

fix(gateway): reject RPCs from invalidated device-token clients durin… (#70707)

2026-05-26 23:09:56 +01:00

tsconfig.package-boundary.base.json

…

tsconfig.package-boundary.paths.json

…

video-generation-providers.live.test.ts

fix(gateway): reject RPCs from invalidated device-token clients durin… (#70707)

2026-05-26 23:09:56 +01:00