Josh Avant 36d2ae2a22 SecretRef: harden custom/provider secret persistence and reuse (#42554) ...

* Models: gate custom provider keys by usable secret semantics

* Config: project runtime writes onto source snapshot

* Models: prevent stale apiKey preservation for marker-managed providers

* Runner: strip SecretRef marker headers from resolved models

* Secrets: scan active agent models.json path in audit

* Config: guard runtime-source projection for unrelated configs

* Extensions: fix onboarding type errors in CI

* Tests: align setup helper account-enabled expectation

* Secrets audit: harden models.json file reads

* fix: harden SecretRef custom/provider secret persistence (#42554) (thanks @joshavant)

2026-03-10 23:55:10 +00:00

..

acpx

fix(acp): strip provider auth env for child ACP processes (openclaw#42250)

2026-03-10 16:50:10 -05:00

bluebubbles

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

copilot-proxy

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

device-pair

Plugins/device-pair: migrate to scoped plugin-sdk imports

2026-03-04 02:35:12 -05:00

diagnostics-otel

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

diffs

test: deduplicate diffs extension fixtures

2026-03-10 20:22:56 +00:00

discord

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

feishu

fix(feishu): pass mediaLocalRoots in sendText local-image auto-convert shim (openclaw#40623)

2026-03-09 22:26:06 -05:00

google-gemini-cli-auth

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

googlechat

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

imessage

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

irc

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

line

refactor: share channel config security scaffolding

2026-03-10 22:18:04 +00:00

llm-task

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

lobster

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

matrix

refactor: share channel config schema fragments

2026-03-10 22:18:04 +00:00

mattermost

refactor: share passive account lifecycle helpers

2026-03-10 22:18:04 +00:00

memory-core

build: raise extension openclaw peer floor

2026-03-10 08:47:56 +05:30

memory-lancedb

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

minimax-portal-auth

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

msteams

fix(msteams): use General channel conversation ID as team key for Bot Framework compatibility (#41838)

2026-03-10 09:13:41 +01:00

nextcloud-talk

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00

nostr

refactor: share channel config schema fragments

2026-03-10 22:18:04 +00:00

open-prose

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

phone-control

feature(context): extend plugin system to support custom context management (#22201)

2026-03-06 05:31:59 -08:00

qwen-portal-auth

refactor(extensions): reuse shared helper primitives

2026-03-07 10:41:05 +00:00

shared

fix(acpx): share windows wrapper resolver and add strict hardening mode

2026-03-01 23:57:06 +00:00

signal

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

slack

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

synology-chat

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

talk-voice

fix(discord): avoid native plugin command collisions

2026-03-07 21:59:44 +00:00

telegram

refactor: share telegram payload send flow

2026-03-10 22:18:04 +00:00

test-utils

fix(plugins): expose model auth API to context-engine plugins (#41090)

2026-03-09 16:07:26 -07:00

thread-ownership

Plugins/thread-ownership: migrate to scoped plugin-sdk imports

2026-03-04 02:35:13 -05:00

tlon

refactor: share scoped account config patching

2026-03-10 22:18:03 +00:00

twitch

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

voice-call

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

whatsapp

build: sync plugin versions for 2026.3.9

2026-03-09 08:39:52 +00:00

zalo

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

zalouser

SecretRef: harden custom/provider secret persistence and reuse (#42554)

2026-03-10 23:55:10 +00:00