Agustin Rivera b860a0d4d0 fix: harden qqbot direct media uploads ...

Harden QQBot direct media URL uploads by downloading through the local SSRF guard before QQ upload, disabling redirects, bounding fetch/setup and body reads, and routing downloaded buffers through the existing one-shot/chunked size gate.

Co-authored-by: Agustin Rivera <agustin@rivera-web.com>

2026-05-28 04:21:46 +01:00

..

auto-response.yml

Require real behavior proof for external PRs (#77622)

2026-05-05 05:45:30 +01:00

ci-build-artifacts-testbox.yml

fix(ci): kill wedged checkout fetches

2026-05-26 19:38:34 +02:00

ci-check-testbox.yml

fix(ci): kill wedged checkout fetches

2026-05-26 19:38:34 +02:00

ci.yml

fix: harden qqbot direct media uploads

2026-05-28 04:21:46 +01:00

clawsweeper-dispatch.yml

ci: keep ClawSweeper comment dispatch best effort

2026-05-11 11:02:00 +01:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

chore(ci): widen CodeQL PR guard

2026-04-29 20:06:50 -07:00

control-ui-locale-refresh.yml

fix(qa-lab): refresh parity model targets

2026-05-17 23:12:26 +08:00

crabbox-hydrate.yml

ci: support native Windows Crabbox daemon hydration (#87175)

2026-05-27 06:32:09 +01:00

dependency-change-awareness.yml

fix: cover plugin package locks in dependency review

2026-05-22 12:56:10 +01:00

docker-release.yml

fix(docker): package runtime workspace templates

2026-05-27 18:54:22 +01:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

build: align node version floor

2026-05-18 06:28:14 +01:00

docs-translate-trigger-release.yml

ci: dispatch aggregate docs translations

2026-05-06 20:24:03 +01:00

docs.yml

ci: consolidate short CI shards

2026-05-18 06:29:14 +01:00

duplicate-after-merge.yml

…

full-release-validation.yml

fix(plugin-state): evict current namespace on plugin row cap

2026-05-27 20:33:40 +01:00

install-smoke.yml

fix(ci): kill timed install smoke docker steps

2026-05-26 16:36:18 +02:00

labeler.yml

fix: cover plugin package locks in dependency review

2026-05-22 12:56:10 +01:00

live-media-runner-image.yml

chore(deps): bump actions group

2026-04-29 21:48:30 -07:00

macos-release.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

maintainer-command-reactions.yml

ci: rename clawsweeper automation labels

2026-04-29 10:18:57 +01:00

mantis-discord-smoke.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

mantis-discord-status-reactions.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

mantis-discord-thread-attachment.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

mantis-scenario.yml

ci(mantis): add agentic telegram desktop proof

2026-05-11 08:15:34 +05:30

mantis-slack-desktop-smoke.yml

Add Slack approval QA checkpoints (#85141)

2026-05-22 22:04:15 -07:00

mantis-telegram-desktop-proof.yml

ci(mantis): pass crabbox capacity regions

2026-05-26 09:02:11 +05:30

mantis-telegram-live.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

npm-telegram-beta-e2e.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

openclaw-cross-os-release-checks-reusable.yml

test: port release validation stabilizers

2026-05-25 21:50:49 +01:00

openclaw-live-and-e2e-checks-reusable.yml

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

openclaw-npm-release.yml

fix(release): accept sha-verified publish evidence

2026-05-24 04:17:40 +01:00

openclaw-performance.yml

fix(perf): tolerate passing filtered release gates

2026-05-26 02:17:54 +01:00

openclaw-release-checks.yml

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

openclaw-release-publish.yml

ci(release): accept main full-validation proof

2026-05-27 13:58:14 +01:00

openclaw-scheduled-live-checks.yml

fix(ci): require factory auth for droid live docker

2026-05-23 12:20:26 +02:00

opengrep-precise-full.yml

ci: use node24 artifact action tags

2026-05-18 10:45:59 +01:00

opengrep-precise.yml

fix(browser): validate current tab before snapshots (#78526)

2026-05-26 19:11:01 -07:00

package-acceptance.yml

ci: harden release package validation

2026-05-23 18:48:17 +01:00

plugin-clawhub-release.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

plugin-npm-release.yml

build(pnpm): use packageManager as pnpm source

2026-05-22 19:17:43 +01:00

plugin-prerelease.yml

ci(release): exclude codex app-server integration from plugin prerelease

2026-05-26 07:36:48 +01:00

qa-live-transports-convex.yml

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

real-behavior-proof.yml

fix(ci): authenticate proof verdict markers (#83692)

2026-05-18 17:42:10 +00:00

sandbox-common-smoke.yml

fix(ci): bound docker pull smoke steps

2026-05-26 17:28:37 +02:00

stale.yml

fix(ci): bound manual stale closure backfill

2026-04-30 03:52:23 -07:00

test-performance-agent.yml

chore: move swabble into apps

2026-05-03 13:10:25 +01:00

tui-pty.yml

fix(ci): kill timed tui pty test runs

2026-05-26 18:55:47 +02:00

update-migration.yml

test: add update migration package gate

2026-05-02 00:34:33 +01:00

website-installer-sync.yml

fix(ci): kill timed website installer docker steps

2026-05-26 16:51:43 +02:00

windows-blacksmith-testbox.yml

ci: preserve Windows Testbox phone-home POST

2026-05-03 22:28:30 -07:00

windows-testbox-probe.yml

ci: expand Windows WSL probe runners

2026-05-03 21:32:35 -07:00

workflow-sanity.yml

ci: use unauthenticated workflow fetches

2026-05-26 13:28:32 +01:00