Devin Robison 8b2bf7b2e9 Harden update environment path resolution (#77470) ...

* Harden update environment path resolution

* docs(changelog): credit windows update env path hardening

Adds the user-facing Unreleased Fixes entry for the workspace LOCALAPPDATA
blocklist + portable Git path-prepend hardening change in this PR.

2026-05-04 13:51:09 -06:00

..

acp

test(acp): isolate persistent binding lifecycle coverage

2026-05-03 18:10:56 -07:00

agents

fix(agents): refresh deferred subagent delivery text

2026-05-04 11:54:36 -07:00

auto-reply

Feat/main session durable delivery pr (#75280)

2026-05-05 01:44:11 +08:00

bindings

…

bootstrap

refactor: trim startup channel type exports

2026-05-02 00:52:41 +01:00

canvas-host

build: refresh a2ui bundle hash

2026-05-02 01:55:51 +01:00

channels

fix(plugins): trust catalog package installs

2026-05-04 11:30:36 -07:00

chat

refactor: trim chat attachment type exports

2026-05-02 01:09:10 +01:00

cli

docs(plugins): explain catalog install trust

2026-05-04 11:31:29 -07:00

commands

fix(doctor): restore group config drift migrations (#77465)

2026-05-04 12:00:05 -07:00

commitments

refactor: trim status fixture exports

2026-05-01 22:19:14 +01:00

compat

refactor: trim status fixture exports

2026-05-01 22:19:14 +01:00

config

Feat/main session durable delivery pr (#75280)

2026-05-05 01:44:11 +08:00

context-engine

refactor: trim context engine prompt cache types

2026-05-02 02:42:13 +01:00

crestodian

Stop heartbeat tool turns from asking for HEARTBEAT_OK (#76338)

2026-05-03 13:46:26 +09:00

cron

feat(cron): surface run diagnostics in status (#75928)

2026-05-04 07:05:28 -07:00

daemon

fix(gateway): clarify systemd service scope

2026-05-04 03:33:49 -07:00

docs

fix(docs): validate plugin json examples

2026-05-03 15:47:23 -07:00

flows

fix(doctor): commit legacy migrations even when unrelated validation fails (#76800)

2026-05-04 00:34:24 +01:00

gateway

fix(gateway): add safe restart coordinator (#76923)

2026-05-04 10:58:36 -07:00

hooks

Format compaction PR changes and validate locally

2026-05-03 14:43:13 +01:00

i18n

…

image-generation

test: harden plugin and UI isolation checks

2026-05-04 11:46:05 +01:00

infra

Harden update environment path resolution (#77470)

2026-05-04 13:51:09 -06:00

interactive

refactor: trim logging helper exports

2026-05-02 00:01:20 +01:00

link-understanding

refactor: trim logging helper exports

2026-05-02 00:01:20 +01:00

logging

fix(tests): restore progress draft changed gate

2026-05-03 21:53:22 -07:00

markdown

refactor: trim logging helper exports

2026-05-02 00:01:20 +01:00

mcp

fix: resolve small triage issues

2026-05-04 07:38:42 +01:00

media

fix(media): require HEIC conversion fallback

2026-05-03 23:30:38 -07:00

media-generation

fix: normalize music generation timeouts

2026-05-02 08:52:50 +01:00

media-understanding

test: stabilize full test suite

2026-05-02 10:35:59 +01:00

memory

refactor: trim model planner exports

2026-05-02 00:21:49 +01:00

memory-host-sdk

chore: delete stale memory host bridges

2026-05-02 18:15:26 +01:00

model-catalog

fix(plugins): accept clawhub provider index installs

2026-05-02 07:27:20 -07:00

music-generation

fix: reduce WebUI session latency churn (#76277) thanks @BunsDev

2026-05-02 18:39:06 -05:00

node-host

refactor: route inline eval through command analysis

2026-05-03 18:06:10 +01:00

pairing

…

plugin-sdk

fix: pass claude cli thinking effort (#77410)

2026-05-04 18:13:53 +00:00

plugin-state

fix(plugin-state): preserve fresh evicted entries

2026-05-04 01:25:12 -07:00

plugins

fix(plugins): reserve pending delivery session slots

2026-05-04 11:21:59 -07:00

process

fix(process): kill Windows command trees on timeout

2026-05-04 20:44:27 +01:00

proxy-capture

fix: guard debug proxy CONNECT under managed proxy (#77010)

2026-05-04 03:54:18 +00:00

realtime-transcription

fix(realtime): label pre-ready transcription closes

2026-05-03 17:04:49 -07:00

realtime-voice

fix: fork google meet agent context

2026-05-04 07:36:09 +01:00

routing

refactor: trim cli helper exports

2026-05-02 07:36:54 +01:00

scripts

Fix Control UI i18n tooltip placeholders

2026-05-04 03:18:34 -05:00

secrets

refactor: keep legacy secretref migration in doctor

2026-05-03 13:10:00 +01:00

security

fix(security): block workspace env from overriding Windows system root paths [AI] (#74458)

2026-05-04 10:13:50 -06:00

sessions

…

shared

fix(gateway): bound sessions list responses

2026-05-04 06:51:56 +01:00

status

[codex] Fix Codex OAuth status auth label (#76197)

2026-05-02 20:34:00 +02:00

tasks

fix(gateway): add safe restart coordinator (#76923)

2026-05-04 10:58:36 -07:00

terminal

…

test-helpers

chore: clean up root clutter

2026-05-03 12:20:52 +01:00

test-utils

perf: route session store writes through writer queue

2026-05-02 13:11:19 +01:00

tools

test: cover tool descriptor planner

2026-05-02 07:38:59 +01:00

trajectory

fix: bound trajectory runtime flush (#77154)

2026-05-04 09:48:03 +01:00

tts

fix: require explicit TTS intent

2026-05-02 03:16:57 +01:00

tui

fix(tui): preserve code spans, code blocks, and dotted/hyphenated identifiers from long-token sanitizer (#77335)

2026-05-04 21:50:40 +08:00

types

…

utils

fix(usage): serve usage from durable transcript aggregate cache

2026-05-03 20:04:26 +01:00

video-generation

test: harden plugin and UI isolation checks

2026-05-04 11:46:05 +01:00

web

fix(gemini): reuse google provider config for web search

2026-05-02 05:15:02 +01:00

web-fetch

refactor: streamline plugin cache helpers

2026-05-02 09:54:54 +01:00

web-search

fix(web-search): scope explicit provider runtime loading

2026-05-03 23:47:35 -07:00

wizard

fix(onboarding): mask token/credential inputs in CLI wizard prompts (#76693)

2026-05-03 14:33:58 +00:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

docker-build-cache.test.ts

chore: clean up root clutter

2026-05-03 12:20:52 +01:00

docker-image-digests.test.ts

chore: clean up root clutter

2026-05-03 12:20:52 +01:00

docker-setup.e2e.test.ts

chore: clean up root clutter

2026-05-03 12:20:52 +01:00

dockerfile.test.ts

…

entry.compile-cache.test.ts

…

entry.compile-cache.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

…

entry.ts

fix: reject unowned CLI roots before plugin load (#76379)

2026-05-03 20:06:49 +01:00

entry.version-fast-path.test.ts

…

entry.version-fast-path.ts

…

extensionAPI.ts

perf: route session store writes through writer queue

2026-05-02 13:11:19 +01:00

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…