Vincent Koc e704323ff3 fix(media): drop auth headers on cross-origin redirects (#58224) ...

* fix(media): drop auth headers on cross-origin redirects

* chore(changelog): sync unreleased context

* fix(media): keep fetch-guard redirect helper working

2026-03-31 19:57:42 +09:00

..

acp

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

agents

fix(agents): reject escaping symlinks in ssh sandbox uploads (#58220)

2026-03-31 19:56:45 +09:00

auto-reply

fix: restore Telegram forum-topic routing (#56060) (thanks @one27001)

2026-03-31 10:18:09 +05:30

bindings

…

bootstrap

…

canvas-host

Canvas Host: build default status with DOM nodes (#58266)

2026-03-31 10:29:28 +01:00

channels

fix(ci): reduce slow channel test skew

2026-03-31 19:49:40 +09:00

chat

…

cli

fix(tests): stabilize cron and blocked-flow assertions

2026-03-31 17:58:41 +09:00

commands

fix(doctor): align qmd probe cwd with runtime

2026-03-31 19:49:40 +09:00

compat

…

config

fix(config): redact Nostr privateKey in config views (#58177)

2026-03-31 19:55:03 +09:00

context-engine

…

cron

fix: complete cron isolated model-switch retry (#57972) (thanks @issaba1)

2026-03-31 10:03:37 +05:30

daemon

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

docs

[codex] harden clawhub plugin publishing and install (#56870)

2026-03-29 11:59:19 -07:00

flows

feat(xai): add plugin-owned x_search onboarding

2026-03-29 00:12:37 +00:00

gateway

fix(gateway): enforce trusted-proxy HTTP origin checks (#58229)

2026-03-31 19:49:26 +09:00

generated

refactor(plugin-sdk): remove channel-specific sdk shims

2026-03-30 01:03:24 +01:00

hooks

fix: support multi-kind plugins for dual slot ownership (#57507) (thanks @fuller-stack-dev)

2026-03-31 10:06:48 +05:30

i18n

…

image-generation

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

infra

fix(media): drop auth headers on cross-origin redirects (#58224)

2026-03-31 19:57:42 +09:00

interactive

…

link-understanding

…

logging

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

markdown

fix(slack): restore table block mode seam (#57591)

2026-03-30 19:25:01 +09:00

mcp

test: remove gateway flake from channel mcp notifications

2026-03-31 01:40:55 +01:00

media

fix(media): drop auth headers on cross-origin redirects (#58224)

2026-03-31 19:57:42 +09:00

media-understanding

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

node-host

Exec approvals: detect command carriers in strict inline eval (#57842)

2026-03-31 10:58:17 +01:00

pairing

fix(pairing): scope pending request caps per account (#58239)

2026-03-31 19:45:45 +09:00

plugin-sdk

test: avoid extra plugin-sdk guardrail analysis

2026-03-30 22:51:18 -07:00

plugins

fix(ci): default local low-memory checks

2026-03-31 15:05:04 +09:00

process

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

routing

test: dedupe routing and text suites

2026-03-28 07:31:40 +00:00

scripts

docs: fix English link audits (#57039)

2026-03-30 01:21:00 +02:00

secrets

Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)

2026-03-31 02:37:31 -05:00

security

Exec approvals: detect command carriers in strict inline eval (#57842)

2026-03-31 10:58:17 +01:00

sessions

…

shared

fix(subagents): correct duration display showing 5-6x inflated runtime (#57739)

2026-03-30 23:44:36 +08:00

tasks

fix(tests): stabilize cron and blocked-flow assertions

2026-03-31 17:58:41 +09:00

terminal

…

test-helpers

fix(ci): harden Windows test cleanup

2026-03-30 18:56:29 +09:00

test-utils

test: stabilize gateway and session cleanup flows

2026-03-31 01:40:55 +01:00

tts

feat(tts): add structured provider diagnostics and fallback attempt analytics (#57954)

2026-03-30 22:55:28 -05:00

tui

fix(tui): stop hijacking j/k in model search

2026-03-28 19:48:00 -07:00

types

plugins: add before_install hook for install scanners

2026-03-29 12:35:01 -07:00

utils

fix: address second-round review — Latin backward compat and emoji consistency

2026-03-29 10:22:43 +09:00

web-search

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

wizard

Skills: prefer active OpenClaw paths

2026-03-30 16:10:13 +01:00

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

Docker setup: force BuildKit for local builds

2026-03-28 20:46:35 -07:00

dockerfile.test.ts

refactor(plugins): decouple bundled plugin runtime loading

2026-03-29 09:10:38 +01:00

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.ts

CLI: keep root help plugin descriptors non-activating (#57294)

2026-03-29 18:49:57 -04:00

entry.version-fast-path.test.ts

test: speed up core runtime suites

2026-03-31 02:25:02 +01:00

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

Agents UI: fix effective model and file hydration

2026-03-28 21:10:39 -07:00

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…