Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• 356d61aacf fix(gateway): scope tailscale tokenless auth to websocket Peter Steinberger 2026-02-21 13:03:08 +01:00
• 6aa11f3092 fix(acp): harden resource link metadata formatting Peter Steinberger 2026-02-21 12:59:54 +01:00
• 073651fb57 docs: add sponsors section to README Peter Steinberger 2026-02-21 12:59:51 +01:00
• b577228d6b test(security): add overflow compaction truncation-budget regression Peter Steinberger 2026-02-21 12:58:44 +01:00
• 084f621025 fix(security): OC-65 prevent compaction counter reset to enforce context exhaustion limit — Aether AI Agent Aether AI Agent 2026-02-18 15:27:57 +11:00
• 2b76901f35 docs(changelog): credit reporter for control-ui auth hardening Peter Steinberger 2026-02-21 12:57:09 +01:00
• 99048dbec2 fix(gateway): align insecure-auth toggle messaging Peter Steinberger 2026-02-21 12:55:18 +01:00
• 810218756d docs(security): clarify trusted-host deployment assumptions Peter Steinberger 2026-02-21 12:53:07 +01:00
• ede496fa1a docs: clarify trusted-host assumption for tokenless tailscale Peter Steinberger 2026-02-21 12:52:45 +01:00
• fbb79d4013 fix(security): harden runtime command override gating Peter Steinberger 2026-02-21 12:49:45 +01:00
• cb84c537f4 fix: normalize status auth cost handling and models header tests Peter Steinberger 2026-02-21 12:44:06 +01:00
• e393d7aa5b docs(changelog): clarify Security/Exec release note Peter Steinberger 2026-02-21 12:43:59 +01:00
• dff61a10e1 docs(changelog): add windows system.run approval mismatch fix note Peter Steinberger 2026-02-21 11:58:35 +01:00
• 11f6bea598 add secret safety Santiago Medina Rolong 2026-02-20 15:54:59 -08:00
• 8db5e77ffa skills: fmt Santiago Medina Rolong 2026-02-19 20:37:36 -08:00
• da844d6411 skills: update xurl description Santiago Medina Rolong 2026-02-19 20:28:28 -08:00
• ac2ef69454 Update skills/xurl/SKILL.md Santiago Medinaandgreptile-apps[bot] 2026-02-19 20:19:14 -08:00
• 635b6298e3 skills: add xurl skill Santiago Medina Rolong 2026-02-19 20:14:06 -08:00
• 283029bdea refactor(security): unify webhook auth matching paths Peter Steinberger 2026-02-21 11:52:21 +01:00
• 6007941f04 fix(security): harden and refactor system.run command resolution Peter Steinberger 2026-02-21 11:49:13 +01:00
• 5cc631cc9c fix(agents): harden model-skip and tool-policy imports Peter Steinberger 2026-02-21 11:48:02 +01:00
• 55aaeb5085 refactor(browser): centralize navigation guard enforcement Peter Steinberger 2026-02-21 11:45:23 +01:00
• 2cdbadee1f fix(security): block startup-file env injection across host execution paths Peter Steinberger 2026-02-21 11:43:53 +01:00
• 6b2f2811dc fix(security): require BlueBubbles webhook auth Peter Steinberger 2026-02-21 11:41:35 +01:00
• 220bd95eff fix(browser): block non-network navigation schemes Peter Steinberger 2026-02-21 11:31:13 +01:00
• c6ee14d60e fix(security): block grep safe-bin file-read bypass Peter Steinberger 2026-02-21 11:18:19 +01:00
• f81522af2e fix(docker): install Playwright Chromium into node cache (#22585) Ayaan Zaidi 2026-02-21 15:48:27 +05:30
• 75d4f6d51b docs: reorder and trim 2026.2.21 changelog entries Peter Steinberger 2026-02-21 11:12:58 +01:00
• eccff0b6c0 docs: relabel dependency hygiene changelog entries Peter Steinberger 2026-02-21 11:05:05 +01:00
• 9231d7d30f chore: bump version to 2026.2.21 Peter Steinberger 2026-02-21 11:02:30 +01:00
• 677384c519 refactor: simplify Telegram preview streaming to single boolean (#22012) Ayaan Zaidiandobviyus 2026-02-21 15:19:13 +05:30
• e1cb73cdeb fix: unblock Docker build by aligning commands schema default (#22558) Ayaan Zaidiandobviyus 2026-02-21 14:47:28 +05:30
• 3f19259843 Update bug_report.yml Vincent Koc 2026-02-21 04:06:07 -05:00
• d2a7293744 Docs: issue template copy cleanup (#22546) Vincent Koc 2026-02-21 03:43:35 -05:00
• dcf2c6d7f1 docs: normalize Amazon Bedrock setup section labels (#22549) Vincent Koc 2026-02-21 03:40:54 -05:00
• e36245bd37 docs: finalize onboarding option heading normalization (#22547) Vincent Koc 2026-02-21 03:38:37 -05:00
• ef42fe0094 docs: rename Tlon setup heading (#22544) Vincent Koc 2026-02-21 03:37:27 -05:00
• b5a77b9cb2 docs: finalize remaining setup heading phrasing (#22543) Vincent Koc 2026-02-21 03:36:39 -05:00
• d7891badda docs: more channel heading consistency updates (#22541) Vincent Koc 2026-02-21 03:36:03 -05:00
• 78caf9ec3d feat(ios): surface gateway talk defaults and refresh icon assets (#22530) Nimrod Gutman 2026-02-21 10:34:20 +02:00
• e93e67bc8e docs: fix thinking section heading link target (#22539) Vincent Koc 2026-02-21 03:33:06 -05:00
• 7c593cd333 docs: finish onboarding/config heading consistency (#22537) Vincent Koc 2026-02-21 03:32:37 -05:00
• 79183852f9 docs: more channel onboarding naming cleanup (#22536) Vincent Koc 2026-02-21 03:31:55 -05:00
• 4c4147fb0a docs: continue onboarding terminology cleanup (#22535) Vincent Koc 2026-02-21 03:31:22 -05:00
• 5eca08dab7 Chore: trim stale TODOs and issue-template language (#22534) Vincent Koc 2026-02-21 03:31:17 -05:00
• 12d75ff7f5 docs: continue channel onboarding/config naming cleanup (#22533) Vincent Koc 2026-02-21 03:30:35 -05:00
• 436f79839b docs: more channel onboarding heading consistency (#22532) Vincent Koc 2026-02-21 03:29:42 -05:00
• 325992b777 docs: small docs sweep consistency updates (#22531) Vincent Koc 2026-02-21 03:29:17 -05:00
• c20d519e05 feat(security): migrate sha1 hashes to sha256 for synthetic ids (#7343) (#22528) Vincent Koc 2026-02-21 03:20:14 -05:00
• 9abab6a2c9 Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520) Vincent Kocandgreptile-apps[bot] 2026-02-21 03:13:56 -05:00
• fe609c0c77 security(hooks): block prototype-chain traversal in webhook template getByPath (#22213) SleuthCo.AIandVincent Koc 2026-02-21 03:01:03 -05:00
• 0bee3f337a MSTeams: dedupe sent-message cache storage (#22514) 3 people 2026-02-21 16:57:50 +09:00
• f4a59eb5d8 Chore: harden A2UI bundle dependency resolution (#22507) 3 people 2026-02-21 02:46:31 -05:00
• 187f4ea41f deadcode: remove unused extension dev dependencies (#22495) Vincent Koc 2026-02-21 02:15:43 -05:00
• 92ac6c95cc CI: format github workflow (#22497) Vincent Koc 2026-02-21 02:12:36 -05:00
• 55eab106ac chore: remove root long and rolldown deps (#22481) Vincent Koc 2026-02-21 02:05:41 -05:00
• 40f1a6c0d2 chore: Dedupe sent-message cache storage (#22127) 3 people 2026-02-21 16:04:59 +09:00
• 35fd322114 chore: format CI workflow (#22482) Vincent Koc 2026-02-21 01:46:55 -05:00
• 7428f5a741 chore: format files for oxfmt (#22479) Vincent Koc 2026-02-21 01:43:18 -05:00
• c2f5628915 Fix formatting (#22474) Vincent Koc 2026-02-21 01:37:02 -05:00
• 3002be76e4 docs: add custom spellcheck dictionary and fix docs typos (#22457) Vincent Koc 2026-02-21 01:35:35 -05:00
• 3b8d7b2e42 deps: remove dead root dependency (#22471) Vincent Koc 2026-02-21 01:33:45 -05:00
• 569191fff1 extensions: fix MSTeams OneDrive fallback mention handling (#22472) Vincent Koc 2026-02-21 01:30:33 -05:00
• d3bb924709 chore(deadcode): add deadcode scanning and remove unused lockfile deps (#22468) Vincent Koc 2026-02-21 01:29:20 -05:00
• e7eba01efc Security: disable sandbox container --no-sandbox by default (#22451) Vincent Koc 2026-02-21 01:23:49 -05:00
• 8877bfd11e gateway: trust-proxy-aware X-Forwarded-For resolution (#22466) Vincent Koc 2026-02-21 01:23:21 -05:00
• 0fe8f07e0e Docs: add changelog entry for PR #19009 (#22464) Vincent Koc 2026-02-21 01:17:22 -05:00
• 58f7b7638a Security: add per-wrapper IDs to untrusted-content markers (#19009) C.J. WinslowandVincent Koc 2026-02-20 22:16:02 -08:00
• 45fff13b1d TUI: strip only leading inbound metadata (#22461) Vincent Koc 2026-02-21 01:13:02 -05:00
• 59167f86ca test: correct trusted proxy X-Forwarded-For expectation Vincent Koc 2026-02-21 00:48:22 -05:00
• c01e486fc0 chore: credit co-author for #21458 ShadowandPejman Pour-Moezzi 2026-02-20 23:02:55 -06:00
• 07039dc089 Gateway: harden trusted proxy X-Forwarded-For parsing (#22429) Vincent Koc 2026-02-20 23:59:20 -05:00
• 35be87b09b fix(tui): strip inbound metadata blocks from user messages (clean rewrite) (#22345) Vincent Koc 2026-02-20 23:52:43 -05:00
• 338ae269d6 test(memory): avoid stmt mock shape flake by reusing typed busy stmt vignesh07 2026-02-20 20:38:13 -08:00
• 665221a1f0 test(memory): mock sqlite stmt with all+get for busy case vignesh07 2026-02-20 20:35:07 -08:00
• e90eedb0ae test(memory): fix sqlite busy mock to match implementation vignesh07 2026-02-20 20:25:31 -08:00
• cd6bbe8cea Session: enforce startup sequence on bare reset greeting Vignesh Natarajan 2026-02-20 20:38:42 -08:00
• 7417c36268 fix(cron): honor maxConcurrentRuns in timer loop (openclaw#22413) thanks @Takhoffman Tak Hoffman 2026-02-20 22:31:58 -06:00
• 93c2f20a23 Memory: surface explicit memory_search unavailable status Vignesh Natarajan 2026-02-20 20:30:52 -08:00
• 1cc2263578 TUI: bound chat-log growth to prevent render overflows Vignesh Natarajan 2026-02-20 20:27:58 -08:00
• 2227840989 Gateway/TUI: filter heartbeat ACK noise in chat events Vignesh Natarajan 2026-02-20 20:23:17 -08:00
• 1ded4c672a test(memory): fix TS types after vitest/ts updates vignesh07 2026-02-20 20:17:45 -08:00
• d583399c92 Hooks: persist session memory on /reset Vignesh Natarajan 2026-02-20 20:19:29 -08:00
• 544c213d42 Memory/QMD: diversify mixed-source search results Vignesh Natarajan 2026-02-20 20:13:24 -08:00
• d7a7ebb75a TUI: dedupe duplicate backspace events in input Vignesh Natarajan 2026-02-20 20:10:22 -08:00
• 18b4b47708 TUI: guide pairing-required recovery in disconnect state Vignesh Natarajan 2026-02-20 20:04:19 -08:00
• c0d5fc8d1e CLI: default pairing channel for pairing commands Vignesh Natarajan 2026-02-20 19:59:54 -08:00
• be756b9a89 Memory: fix async sync close race Vignesh Natarajan 2026-02-20 19:55:03 -08:00
• 2649e9e044 fix: preselect Telegram-supported status reaction variants (#22380) Ayaan Zaidiandobviyus 2026-02-21 09:20:20 +05:30
• 6a27787209 Docker: restore pre-change ownership steps Shadow 2026-02-20 21:46:30 -06:00
• 22ffde90bb tests: align macmini suite expectations with current behavior (openclaw#22379) thanks @Takhoffman Tak Hoffman 2026-02-20 21:45:04 -06:00
• a305dfe626 Memory/QMD: harden multi-collection search and embed scheduling Vignesh Natarajan 2026-02-20 19:41:13 -08:00
• 282a545130 chore: fix formatting on CI-drift files (#22391) Vincent Koc 2026-02-20 22:40:30 -05:00
• 1410d15c5e fix: compaction safeguard extension not loading in production builds (openclaw#22349) thanks @Glucksberg GlucksbergandTak Hoffman 2026-02-20 23:21:09 -04:00
• e2dbd45418 fix: add configurable ephemeral defaults for Discord slash commands (#16563) (thanks @wei) Shadow 2026-02-20 21:18:13 -06:00
• 122bdfa4e1 feat(discord): add configurable ephemeral option for slash commands Wei He 2026-02-14 10:33:36 -05:00
• b294342d7f feat(discord): support forum tag edits via channel-edit (#12070) (thanks @xiaoyaner0201) Shadow 2026-02-20 21:14:27 -06:00
• b7644d61a2 fix: restore Discord model picker UX (#21458) (thanks @pejmanjohn) Shadow 2026-02-20 21:03:19 -06:00
• 5dae5e6ef2 fix(tools): forward senderIsOwner to embedded runner so owner-only tools work (#22296) hcoj 2026-02-21 03:03:58 +00:00
• d94d21f9b0 test: isolate local media regression fixtures to allowed roots (#22369) Vincent Koc 2026-02-20 18:50:50 -08:00