Josh Avant d30dc28b8c Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370) ...

* Secrets: harden exec SecretRef validation and reload LKG coverage

* Tests: harden exec fast-exit stdin regression case

* Tests: align lifecycle daemon test formatting with oxfmt 0.36

2026-03-10 13:45:37 -05:00

..

.i18n

fix(docs): revert accidental es/pt-BR translation scaffold from #18473

2026-02-17 02:23:41 +01:00

assets

docs: add Vercel sponsorship (#29270)

2026-03-02 06:25:46 +00:00

automation

mattermost: fix DM media upload for unprefixed user IDs (#29925)

2026-03-10 14:22:24 +05:30

channels

fix: thread runtime config through Discord/Telegram sends (#42352) (thanks @joshavant) (#42352)

2026-03-10 13:30:57 -05:00

cli

acp: enrich streaming updates for ide clients (#41442)

2026-03-09 22:26:46 +01:00

concepts

feat: allow compaction model override via config (#38753)

2026-03-08 10:47:34 -07:00

debug

Docs: enable markdownlint autofixables except list numbering (#10476)

2026-02-06 10:08:59 -05:00

design

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

diagnostics

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

experiments

docs(protocol): document slash-delimited schema lookup plugin ids

2026-03-06 08:53:29 -05:00

gateway

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

help

Secrets: reject exec SecretRef traversal ids across schema/runtime/gateway (#42370)

2026-03-10 13:45:37 -05:00

images

docs(feishu): Feishu docs – add verificationToken and align zh-CN with EN (openclaw#31555) thanks @xbsheng

2026-03-02 21:33:41 -06:00

install

fix(ci): pin multi-arch docker base digests

2026-03-08 02:55:15 +00:00

ja-JP

docs: fix broken dashboard image on i18n pages (#38031)

2026-03-07 00:22:19 +03:00

nodes

refactor: centralize talk silence timeout defaults

2026-03-08 14:58:29 +00:00

platforms

build: bump unreleased version to 2026.3.9

2026-03-09 08:33:58 +00:00

plugins

docs: context engine

2026-03-06 08:55:58 -05:00

providers

fix(models): discover Vercel AI Gateway catalog

2026-03-08 13:44:10 +00:00

refactor

chore(docs): drop refactor cleanup tracker

2026-03-09 00:26:20 +00:00

reference

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

security

docs: fix Mintlify-incompatible links in security docs (#27698)

2026-03-03 14:51:28 -08:00

start

Docs: remove MDX-breaking secret markers

2026-03-07 10:09:00 -08:00

tools

docs(acp): document resumeSessionId for session resume (#42280)

2026-03-10 18:06:09 +01:00

web

fix(ui): preserve control-ui auth across refresh (#40892)

2026-03-09 12:50:47 +01:00

zh-CN

Revert "docs: add Browserbase as hosted remote CDP option"

2026-03-08 18:48:10 +00:00

auth-credential-semantics.md

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

brave-search.md

docs: update Brave Search API docs for Feb 2026 plan restructuring (#40111)

2026-03-08 14:06:21 -04:00

ci.md

CI: gate Windows checks by windows-relevant scope (#32456)

2026-03-02 19:10:58 -08:00

CNAME

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00

date-time.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

docs.json

docs: add WSL2 + Windows remote Chrome CDP troubleshooting (#39407) (thanks @Owlock)

2026-03-08 19:21:42 +00:00

index.md

fix(android): remove mic and screen foreground services

2026-03-08 16:25:49 +05:30

logging.md

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

nav-tabs-underline.js

docs(ui): add animated underline for nav tabs (#21912)

2026-02-20 09:33:46 -05:00

network.md

docs: canonicalize docs paths and align zh navigation (#11428)

2026-02-07 15:40:35 -05:00

perplexity.md

fix(secrets): resolve web tool SecretRefs atomically at runtime

2026-03-09 22:57:03 -05:00

pi-dev.md

docs: replace removed pi test script with current commands

2026-02-22 21:07:34 +01:00

pi.md

fix(pi): stop history image reinjection token blowup

2026-02-26 16:38:20 +01:00

prose.md

docs: canonicalize docs paths and align zh navigation (#11428)

2026-02-07 15:40:35 -05:00

style.css

fix(ios): force tls for non-loopback manual gateway hosts (#21969)

2026-02-20 16:28:47 +00:00

tts.md

Docs: clarify OpenAI-compatible TTS endpoints

2026-03-05 16:57:51 -05:00

vps.md

Docs: remove MDX-breaking secret markers

2026-03-07 10:09:00 -08:00

whatsapp-openclaw-ai-zh.jpg

Docs: add zh-CN landing notice + AI image

2026-02-02 18:35:01 +01:00

whatsapp-openclaw.jpg

refactor: rename to openclaw

2026-01-30 03:16:21 +01:00