Peter Steinberger 92fcd4ed99 fix(system-agent): reject untrusted plugin specs before proposing ...

The Crestodian->OpenClaw reconciliation restored a pre-#102197 `if (opts.approved)`
wrapper around the execute-time plugin-install trust check, so an unapproved
plugin-install op produced a formatted plan for an arbitrary npm/url/file
source instead of rejecting it. Validate unconditionally, matching #102197,
and restore its dropped regression test. Also fix a stale
crestodian-ring-zero-setup id in the CI compat list and a doubled
openclaw-openclaw-planner tmpdir prefix from the mechanical rename.

2026-07-14 14:33:34 -07:00

..

actions

fix(ci): fetch exact PR base before history (#107674)

2026-07-14 10:12:40 -07:00

codeql

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

codex/prompts

ci: add codex maturity scorecard agent (#95919)

2026-06-23 01:22:21 -07:00

images/live-media-runner

…

instructions

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

ISSUE_TEMPLATE

fix(issue-template): split logs and screenshots into separate fields (#73649)

2026-06-28 13:38:16 -07:00

release/clawhub-cli

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

workflows

fix(system-agent): reject untrusted plugin specs before proposing

2026-07-14 14:33:34 -07:00

actionlint.yaml

ci: pin macOS runner labels

2026-05-28 20:52:52 +02:00

CODEOWNERS

ci: add security-sensitive file guard

2026-06-17 12:50:18 +02:00

dependabot.yml

…

labeler.yml

feat(linux): headless node device capabilities (camera, location, notifications) (#107193)

2026-07-14 02:30:36 -07:00

package-trusted-sources.json

fix: harden package URL downloads (#85578)

2026-05-23 17:28:29 +01:00

pull_request_template.md

docs: require maintainer edits on pull requests

2026-07-10 09:18:28 -05:00

zizmor.yml

…