Commit Graph

Select branches

Hide Pull Requests

master

Mono Color

• 182ffdf557 test: dedupe zai env test setup and cover blank legacy key Peter Steinberger 2026-02-19 13:48:17 +00:00
• d9046f0d2a chore(deps): update dependencies to latest Peter Steinberger 2026-02-19 14:46:10 +01:00
• 177654f526 refactor: dedupe APNs push send flow and add wake default test Peter Steinberger 2026-02-19 13:45:34 +00:00
• 722a898f20 refactor: dedupe openclaw root traversal and add coverage Peter Steinberger 2026-02-19 13:43:24 +00:00
• cf6edc6d57 docs(changelog): credit allsmog for Lobster security report Peter Steinberger 2026-02-19 14:42:53 +01:00
• 758ea3c5a1 style: apply oxfmt import ordering for check Peter Steinberger 2026-02-19 14:38:49 +01:00
• 08a7967936 fix(security): fail closed on gateway bind fallback and tighten canvas IP fallback Peter Steinberger 2026-02-19 14:36:39 +01:00
• a40c10d3e2 fix: harden agent gateway authorization scopes Peter Steinberger 2026-02-19 14:37:56 +01:00
• 165c18819e refactor(security): simplify safe-bin validation structure Peter Steinberger 2026-02-19 14:29:58 +01:00
• 74c51aeb1e style: format gateway server methods Peter Steinberger 2026-02-19 13:32:52 +00:00
• 7c9130f3c5 docs: require SECURITY.md before GHSA reviews Peter Steinberger 2026-02-19 14:32:15 +01:00
• 268b0dc921 style: fix formatting drift in security allowlist checks Peter Steinberger 2026-02-19 13:30:52 +00:00
• ff74d89e86 fix: harden gateway control-plane restart protections Peter Steinberger 2026-02-19 14:29:44 +01:00
• 14b4c7fd56 refactor: dedupe provider usage auth/fetch logic and expand coverage Peter Steinberger 2026-02-19 13:27:40 +00:00
• 2d485cd47a refactor(security): extract safe-bin policy and dedupe tests Peter Steinberger 2026-02-19 14:23:19 +01:00
• 0e85380e56 style: format files and fix safe-bins e2e typing Peter Steinberger 2026-02-19 14:26:04 +01:00
• e3e0ffd801 feat(security): audit gateway HTTP no-auth exposure Peter Steinberger 2026-02-19 14:25:45 +01:00
• 808a60d3bd docs: clarify intentional network-visible canvas model in security policy Peter Steinberger 2026-02-19 14:25:34 +01:00
• fec48a5006 refactor(exec): split host flows and harden safe-bin trust Peter Steinberger 2026-02-19 14:21:07 +01:00
• b45bb6801c fix(doctor): skip embedding provider check when QMD backend is active (openclaw#17295) thanks @miloudbelarebia 3 people 2026-02-19 14:21:27 +01:00
• bafdbb6f11 fix(security): eliminate safeBins file-existence oracle Peter Steinberger 2026-02-19 14:14:46 +01:00
• 1316e57403 fix: enforce inbound attachment root policy across pipelines Peter Steinberger 2026-02-19 14:15:34 +01:00
• cfe8457a0f fix(security): harden safeBins stdin-only enforcement Peter Steinberger 2026-02-19 14:07:43 +01:00
• 3c127b6eac test: dedupe provider usage tests and expand coverage Peter Steinberger 2026-02-19 13:07:51 +00:00
• ec232a9e2d refactor(security): harden temp-path handling for inbound media Peter Steinberger 2026-02-19 14:06:11 +01:00
• 9f9cd5cbb2 refactor(browser): unify navigation guard path and error typing Peter Steinberger 2026-02-19 14:04:08 +01:00
• badafdc7b3 refactor: dedupe provider usage fetch logic and tests Peter Steinberger 2026-02-19 12:50:55 +00:00
• 6195660b1a fix(browser): unify SSRF guard path for navigation Peter Steinberger 2026-02-19 13:43:48 +01:00
• 3c419b7bd3 docs(security): document webhook hardening and changelog Peter Steinberger 2026-02-19 13:31:04 +01:00
• aa267812d3 test(security): add webhook hardening regressions Peter Steinberger 2026-02-19 13:30:59 +01:00
• a23e0d5140 fix(security): harden feishu and zalo webhook ingress Peter Steinberger 2026-02-19 13:30:51 +01:00
• e0aaf2d399 fix(security): block prototype-polluting keys in deepMerge (#20853) David Rudduck 2026-02-19 21:47:48 +10:00
• 043b2f5e7a changelog: add unreleased fixes from recent PRs (#20897) Vincent Koc 2026-02-19 03:44:15 -08:00
• 466a1e1cdb fix(clawdock): include docker-compose.extra.yml in helper commands (#17094) zerone0xandClaude 2026-02-19 19:40:47 +08:00
• 3feb7fc3a3 fix(matrix): detect mentions in formatted_body matrix.to links (#16941) 4 people 2026-02-19 19:40:21 +08:00
• 825cc70796 test: dedupe gateway auth and sessions patch coverage (#20087) habakan 2026-02-19 20:35:58 +09:00
• db73402235 Security: add explicit opt-in for deprecated plugin runtime exec (#20874) Mariano 2026-02-19 11:30:36 +00:00
• e955582c8f security: add baseline security headers to gateway HTTP responses (#10526) Abdel FaneandVincent Koc 2026-02-19 03:28:24 -08:00
• 57102cbec9 Security: use crypto.randomBytes for temp file names (#20654) 3 people 2026-02-19 03:19:29 -08:00
• fb35635c10 Security: use execFileSync instead of execSync with shell strings (#20655) 3 people 2026-02-19 03:19:09 -08:00
• ee6d0bd321 fix(security): escape backticks in exec-approval command previews (#20854) David Rudduck 2026-02-19 21:17:06 +10:00
• f1e1ad73ad fix(security): SHA-256 hash before timingSafeEqual to prevent length leak (#20856) David Rudduck 2026-02-19 21:16:35 +10:00
• baf4a799a9 fix(security): use YAML core schema to prevent type coercion (#20857) David Rudduck 2026-02-19 21:15:36 +10:00
• 9edec67a18 fix(security): block plaintext WebSocket connections to non-loopback addresses (#20803) Jay Caldwell 2026-02-19 05:13:08 -06:00
• f7a7a28c56 fix: enforce hooks token separation from gateway auth (#20813) Coy Geek 2026-02-19 02:48:08 -08:00
• 267bb3c81c changelog: backfill PR release-note entries (#20839) Vincent Koc 2026-02-19 02:43:57 -08:00
• 3904d7ca06 deps: migrate request to @cypress/request (#20836) Vincent Koc 2026-02-19 02:41:13 -08:00
• de656e3194 fix(otel): complete diagnostics-otel OpenTelemetry v2 API migration (#12897) Vincent Koc 2026-02-19 02:36:47 -08:00
• 1faa7a87a0 lobster: parse windows cmd shim paths with rooted tokens (#20833) Vincent Koc 2026-02-19 02:34:08 -08:00
• 942ed89277 deps: update overrides for minimatch and fast-xml-parser (#20832) Vincent Koc 2026-02-19 02:31:20 -08:00
• a14dcafbaa Format: fix import ordering in two files (#20829) Vincent Koc 2026-02-19 02:18:27 -08:00
• da341bfbe1 test(daemon): dedupe service path cases and bootstrap failures Peter Steinberger 2026-02-19 10:16:21 +00:00
• e8e343aeee test(ci): fix launchd and diagnostics-otel test harnesses Peter Steinberger 2026-02-19 10:08:06 +00:00
• 45db2aa0cd Security: disable plugin runtime command execution primitive (#20828) Marianoandmbelinky 2026-02-19 10:17:29 +00:00
• 771af40913 chore(ci): fix main check blockers and stabilize tests Peter Steinberger 2026-02-19 10:15:25 +00:00
• 53aecf7a8e test(bluebubbles): merge typing start stop method checks Peter Steinberger 2026-02-19 10:09:27 +00:00
• 49d0def6d1 fix(security): harden imessage remote scp/ssh handling Peter Steinberger 2026-02-19 11:07:56 +01:00
• cdb00fe242 fix(feishu): isolate temp download writes in mkdtemp dirs Peter Steinberger 2026-02-19 11:04:12 +01:00
• 1b46f7d0ba refactor(daemon): simplify gateway service backend delegates Peter Steinberger 2026-02-19 10:03:17 +00:00
• 70900feaa7 refactor(daemon): share service arg types across backends Peter Steinberger 2026-02-19 10:03:09 +00:00
• be7462af1e Gateway: clarify launchctl domain bootstrap error (#13795) Vincent Koc 2026-02-19 02:03:23 -08:00
• 88f698974a fix(otel): sanitize OTLP endpoint URL resolution (#13791) Vincent Koc 2026-02-19 02:02:57 -08:00
• a7c0aa94d9 refactor(security): share safe temp media path builder (#20810) Mariano 2026-02-19 09:59:21 +00:00
• ee1d6427b5 fix(security): enforce symlink-safe skill packaging Peter Steinberger 2026-02-19 10:54:45 +01:00
• c275932aa4 fix(security): OC-22 prevent Zip Slip and symlink following in skill packaging aether-ai-agent 2026-02-19 20:32:23 +11:00
• c06ad38a71 test(voice-call): merge provider credential source cases Peter Steinberger 2026-02-19 09:55:43 +00:00
• 981d266480 security(gateway): block webchat session mutators (#20800) Vincent Koc 2026-02-19 01:54:02 -08:00
• 32ba62dc69 test(bluebubbles): merge setGroupIcon credential checks Peter Steinberger 2026-02-19 09:51:35 +00:00
• fa726792ce refactor(agents): dedupe pi subscribe e2e stream fixtures Peter Steinberger 2026-02-19 09:49:46 +00:00
• 150a76ca9a test(agents): add shared subscribe stream emit helpers Peter Steinberger 2026-02-19 09:49:37 +00:00
• 0c1d3b866c test(bluebubbles): collapse duplicate credential and chatGuid cases Peter Steinberger 2026-02-19 09:48:47 +00:00
• 7255c20ddc fix(docker): harden docker-setup mount validation Peter Steinberger 2026-02-19 10:44:38 +01:00
• 02123e591c refactor(lobster): extract windows spawn resolver Peter Steinberger 2026-02-19 10:44:18 +01:00
• 96a3d5bce8 test: collapse duplicate unhandled rejection fatal cases Peter Steinberger 2026-02-19 09:40:30 +00:00
• 8e6d1e6368 LINE/Security: harden inbound media temp-file naming (#20792) Mariano 2026-02-19 09:37:33 +00:00
• 6b14498d2f test(lobster): use lobster.exe in windows plugin path case Peter Steinberger 2026-02-19 09:35:33 +00:00
• f38e1a8d82 chore(format): align oxfmt local/CI behavior (#12579) Vincent Koc 2026-02-19 01:31:33 -08:00
• 8b34719b3a style: apply oxfmt import ordering for ci Peter Steinberger 2026-02-19 09:26:19 +00:00
• d05c8eb912 refactor: unify SSRF hostname/ip precheck and add policy regression Peter Steinberger 2026-02-19 10:25:25 +01:00
• b4792c7362 style: format fs-safe and web media Peter Steinberger 2026-02-19 09:25:06 +00:00
• c241bf0049 test: dedupe voice-call provider config validation cases Peter Steinberger 2026-02-19 09:24:00 +00:00
• ba7be018da fix(security): remove lobster windows shell fallback Peter Steinberger 2026-02-19 10:22:28 +01:00
• 947e11c33a test(gateway): dedupe agent payload and stream fixtures Peter Steinberger 2026-02-19 09:21:41 +00:00
• b96419fab9 test(agents): share pi-tools sandbox fixture context Peter Steinberger 2026-02-19 09:21:33 +00:00
• bf3f8ec428 refactor(media): unify safe local file reads Peter Steinberger 2026-02-19 10:21:13 +01:00
• 65a7fc6de7 Changelog: note Feishu traversal hardening Mariano Belinky 2026-02-19 10:14:31 +01:00
• c821099157 Feishu: harden temp media download paths Mariano Belinky 2026-02-19 10:13:08 +01:00
• 90b05b18f1 test: collapse duplicate onboard auth assertions Peter Steinberger 2026-02-19 09:13:16 +00:00
• 317b7d363d test(agents): dedupe subscribe reasoning tag fixtures Peter Steinberger 2026-02-19 09:11:07 +00:00
• 749edf25ca test: dedupe repeated onboarding provider config cases Peter Steinberger 2026-02-19 09:08:44 +00:00
• 6f568f3b17 test(agents): dedupe media and thinking sanitize test setup Peter Steinberger 2026-02-19 09:06:28 +00:00
• 4c539f6abc test(agents): dedupe subagent registry test mocks Peter Steinberger 2026-02-19 09:03:37 +00:00
• 0900ec38a9 test(agents): dedupe copilot models-config token setup Peter Steinberger 2026-02-19 09:03:32 +00:00
• b4dbe03298 refactor: unify restart gating and update availability sync Peter Steinberger 2026-02-19 10:00:27 +01:00
• 18179fc2c1 ci: move bun push-skip condition out of job-level matrix if Peter Steinberger 2026-02-19 08:58:56 +00:00
• d51929ecb5 fix: block ISATAP SSRF bypass via shared host/ip guard Peter Steinberger 2026-02-19 09:59:34 +01:00
• 4cd5fad14b style: sort media store test imports Peter Steinberger 2026-02-19 08:57:04 +00:00
• 47bfb765a1 ci: skip bun matrix steps on push runs Peter Steinberger 2026-02-19 08:57:01 +00:00
• 745068a597 test(agents): share overflow retry compaction fixture Peter Steinberger 2026-02-19 08:53:56 +00:00
• b41fd20741 test(agents): share assistant error message test fixture Peter Steinberger 2026-02-19 08:53:50 +00:00