Commit Graph

3538 Commits

Author SHA1 Message Date
Kayvan Sylvan
d45500a040 Merge pull request #1990 from davejpeters/davejpeters-patterns-1
add pattern `explain_terms_and_conditions`
2026-02-09 12:51:32 -08:00
Kayvan Sylvan
7c4042cb2f Merge pull request #1984 from petterreinholdtsen/typo-create_coding_feature
Corrected typo in the create_coding_feature system prompt.
2026-02-09 12:51:00 -08:00
Kayvan Sylvan
49de68e95e chore: incoming 1990 changelog entry 2026-02-09 12:46:38 -08:00
Kayvan Sylvan
82cc0b74ed feat: add explain_terms_and_conditions and suggest_openclaw_pattern fabric patterns
## CHANGES

- Add `explain_terms_and_conditions` pattern for legal agreement analysis
- Rename `suggest_moltbot_command` to `suggest_openclaw_pattern` with updated branding
- Register both new patterns in pattern descriptions and extracts JSON
- Update `suggest_pattern` category indexes with new pattern entries
- Add pattern summaries to `suggest_pattern/user.md` documentation
- Renumber all pattern explanations to accommodate new entries
- Remove deprecated `suggest_moltbot_command` pattern entirely
2026-02-09 12:44:52 -08:00
Kayvan Sylvan
7a7dc38c7b chore: incoming 1990 changelog entry 2026-02-09 11:00:16 -08:00
Dave Peters
ba6d7be570 add pattern explain_terms_and_conditions
Added a comprehensive guide for analyzing terms and conditions, focusing on legal translation and consumer protection.
2026-02-09 12:44:58 -05:00
github-actions[bot]
4aaba1cd2a chore(release): Update version to v1.4.400 v1.4.400 2026-02-05 19:08:14 +00:00
Kayvan Sylvan
e59aed5871 Merge pull request #1986 from ksylvan/kayvan/claude_opus_4_6
Support Anthropic Opus 4.6
2026-02-05 11:05:33 -08:00
Kayvan Sylvan
5c20e01a6d chore: incoming 1986 changelog entry 2026-02-05 10:56:33 -08:00
Kayvan Sylvan
3dc83584b9 chore: bump anthropic SDK to v1.21.0 and clean up unused dependencies
See https://www.anthropic.com/news/claude-opus-4-6

## CHANGES

- Upgrade anthropic-sdk-go from v1.20.0 to v1.21.0
- Add `ClaudeOpus4_6` to supported Anthropic model list
- Remove unused indirect dependencies from go.mod and go.sum
- Clean up legacy protobuf and gRPC version references
- Remove stale tensor, math, and image processing libraries
- Drop unused table writer and console dependencies
- Prune obsolete cloud.google.com version pins
2026-02-05 10:54:22 -08:00
Petter Reinholdtsen
dd6b3e1008 Corrected typo in the create_coding_feature system prompt.
'contains the for the' -> 'contains the'.
2026-02-05 08:59:56 +01:00
github-actions[bot]
0e003a8247 chore(release): Update version to v1.4.399 v1.4.399 2026-02-03 23:00:20 +00:00
Kayvan Sylvan
9c31ca3c35 Merge pull request #1983 from danielmiessler/dependabot/npm_and_yarn/web/npm_and_yarn-86c0509402
chore(deps): bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in /web in the npm_and_yarn group across 1 directory
2026-02-03 14:57:49 -08:00
Kayvan Sylvan
af1048135a chore: incoming 1983 changelog entry 2026-02-03 14:54:01 -08:00
github-actions[bot]
0788ef2f21 chore(release): Update version to v1.4.398 v1.4.398 2026-02-03 22:35:21 +00:00
Kayvan Sylvan
e8725be39e Merge pull request #1981 from infinitelyloopy-bt/feature/azure-openai-latest-models
fix(azure): support GPT-5 and o-series reasoning models
2026-02-03 14:32:59 -08:00
Kayvan Sylvan
1b43d5b6c8 chore: incoming 1981 changelog entry 2026-02-03 13:56:59 -08:00
dependabot[bot]
f87e0e0d16 chore(deps): bump @isaacs/brace-expansion
Bumps the npm_and_yarn group with 1 update in the /web directory: @isaacs/brace-expansion.


Updates `@isaacs/brace-expansion` from 5.0.0 to 5.0.1

---
updated-dependencies:
- dependency-name: "@isaacs/brace-expansion"
  dependency-version: 5.0.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-03 20:24:37 +00:00
Baker Tamory
ed6d004790 style: remove trailing blank line in azure.go to fix gofmt check 2026-02-02 14:43:47 +11:00
Baker Tamory
ef1ee793e1 fix(azure): support GPT-5 and o-series reasoning models
- Update default API version from 2024-05-01-preview to 2025-04-01-preview
  (required for o-series and GPT-5 models)
- Remove NeedsRawMode override that always returned false, inheriting parent
  logic that correctly skips temperature/top_p for reasoning models
- Add /responses route to deployment middleware for future v1 API support

Tested against Azure OpenAI gpt-5.2-chat deployment.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-02 13:09:16 +11:00
github-actions[bot]
9ab45a25c0 chore(release): Update version to v1.4.397 v1.4.397 2026-01-31 21:24:41 +00:00
Kayvan Sylvan
c3f1e2f719 Merge pull request #1979 from ksylvan/kayvan/update-anthropic-sdk
Update Anthropic SDK to v1.20.0 and reorganize model definitions
2026-01-31 13:22:01 -08:00
Kayvan Sylvan
4e5b4a3072 chore: incoming 1979 changelog entry 2026-01-31 13:12:21 -08:00
Kayvan Sylvan
0285e52c7b feat: update Anthropic SDK to v1.20.0 and reorganize model definitions**
## CHANGES

- Bump `anthropic-sdk-go` dependency from v1.19.0 to v1.20.0
- Add deprecation notice for pre-February 2026 legacy models
- Add new Claude Sonnet 4.0 and Opus 4.0 model aliases
- Extend 1M context beta support to all Sonnet 4 variants
- Reorganize model list to separate deprecated from current models
- Add `neturl` to VS Code spell-check dictionary
2026-01-31 12:58:44 -08:00
github-actions[bot]
bfafc291c9 chore(release): Update version to v1.4.396 v1.4.396 2026-01-30 06:10:15 +00:00
Kayvan Sylvan
6ad895ba12 Merge pull request #1978 from ksylvan/kayvan/no-anthropic-oauth
chore: remove OAuth support from Anthropic client
2026-01-29 22:07:53 -08:00
Kayvan Sylvan
55c6092899 chore: incoming 1978 changelog entry 2026-01-29 20:00:17 -08:00
Kayvan Sylvan
9f752f45af chore: remove OAuth support from Anthropic client
- Remove OAuth support from Anthropic client
- Delete `oauth.go` and related test files
- Simplify `IsConfigured` to check only API key
- Update configuration handling to remove OAuth references
- Clean up imports and unused variables in `anthropic.go`
- Adjust `GetConfig` and `UpdateConfig` methods in server configuration
- Remove OAuth-related environment variables from configuration
2026-01-29 19:49:50 -08:00
Kayvan Sylvan
25738f0de4 docs: fix ChangeLog snippet for PR 1975 2026-01-27 23:31:59 -08:00
Kayvan Sylvan
5330d9c173 Merge pull request #1975 from koriyoshi2041/add-suggest-clawdbot-command-pattern
feat: add suggest_moltbot_command pattern for Moltbot (formerly Clawdbot) CLI
2026-01-27 23:23:03 -08:00
Kayvan Sylvan
99b426a2af chore: incoming 1975 changelog entry 2026-01-27 23:14:10 -08:00
Kayvan Sylvan
7a5bf27bd2 refactor: rename clawdbot pattern to moltbot across the codebase
## CHANGES

- Rename `suggest_clawdbot_command` pattern to `suggest_moltbot_command`
- Replace all `clawdbot` CLI references with `moltbot` in pattern docs
- Update command examples to use new `moltbot` binary name
- Add new dictionary words for VSCode spellcheck (Moltbot, schtasks, etc.)
- Fix markdown formatting with proper table alignment
2026-01-27 23:13:33 -08:00
kigland
c0d92ff1d7 fix: resolve multi-command output format inconsistency
Address Copilot review: clarify that multiple commands should be
combined on a single line with && to preserve head -1 behavior,
with follow-up steps described in the explanation section.
2026-01-28 02:24:06 +08:00
kigland
906c648d9f chore: incoming 1975 changelog entry 2026-01-28 02:16:43 +08:00
kigland
be7af5191e feat: add suggest_clawdbot_command pattern
Add a new pattern for suggesting Clawdbot CLI commands based on
natural language intent. Clawdbot is an open-source AI agent framework
(github.com/clawdbot/clawdbot) that connects LLMs to messaging
platforms, devices, and developer tools.

This follows the same structure as suggest_gt_command: command
reference tables, intent mapping, and a pipe-friendly output format
where the first line is the executable command.

All commands verified against clawdbot help and subcommand --help
output (v2026.1.23).
2026-01-28 01:48:35 +08:00
github-actions[bot]
92818294cf chore(release): Update version to v1.4.395 v1.4.395 2026-01-25 23:18:34 +00:00
Kayvan Sylvan
1af12c5d98 Merge pull request #1972 from ksylvan/kayvan/more-dependabot-fixes
More node package updates: remove cn, fix string and request vulnerabilities
2026-01-25 15:16:14 -08:00
Kayvan Sylvan
f80663c771 chore: incoming 1972 changelog entry 2026-01-25 15:12:45 -08:00
Kayvan Sylvan
5d93f126d4 security: remove cn package to fix string and request vulnerabilities
Removes the cn (Chuck Norris jokes) package which was pulling in
vulnerable versions of string and request packages with no patches
available. This resolves 5 Dependabot alerts:
- Alert #52: string package (HIGH) - ReDoS
- Alert #35: string package (HIGH) - ReDoS
- Alert #61: request package (MEDIUM) - SSRF
- Alert #44: request package (MEDIUM) - SSRF
- Alert #38: request package (MEDIUM) - Remote Memory Exposure

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 15:07:41 -08:00
github-actions[bot]
4d60f24517 chore(release): Update version to v1.4.394 v1.4.394 2026-01-25 22:49:06 +00:00
Kayvan Sylvan
c902e34f0f Merge pull request #1971 from ksylvan/kayvan/dependabot-security-fixes
Security fix high medium low priority dependabot alerts for npm dependencies
2026-01-25 14:46:46 -08:00
Kayvan Sylvan
b41bd17caf chore: incoming 1971 changelog entry 2026-01-25 14:44:08 -08:00
Kayvan Sylvan
876f2ab82e Merge branch 'main' into kayvan/dependabot-security-fixes 2026-01-25 14:38:47 -08:00
Kayvan Sylvan
5220f89706 security: fix low severity @eslint/plugin-kit ReDoS vulnerability
Fix Dependabot alert #94 (LOW):
- @eslint/plugin-kit vulnerability: Regular Expression Denial of Service
  through ConfigCommentParser
- Updated from 0.2.8 (vulnerable) to 0.5.1 via pnpm/npm overrides

Build verified successful. All tests pass.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 14:36:47 -08:00
Kayvan Sylvan
f151646838 security: fix medium severity esbuild vulnerability
Fix Dependabot alert #76 (MEDIUM):
- esbuild vulnerability: allows any website to send requests to
  development server and read responses
- Updated from 0.21.5 (vulnerable) to 0.27.2 via pnpm/npm overrides

Build verified successful. All tests pass.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 14:26:27 -08:00
github-actions[bot]
f87f6b5d95 chore(release): Update version to v1.4.393 v1.4.393 2026-01-25 22:04:02 +00:00
Kayvan Sylvan
7e2656bfa5 Merge pull request #1969 from ksylvan/kayvan/dependabot-security-fixes
Critical and High Impact NPM dependabot issues fixed
2026-01-25 14:01:35 -08:00
Kayvan Sylvan
e7367ded17 chore: incoming 1969 changelog entry 2026-01-25 13:56:10 -08:00
Kayvan Sylvan
03a496912f security: add npm support with package-lock.json for dual package manager compatibility
Changes:
- Added npm "overrides" section to package.json alongside existing pnpm overrides
- Generated and tracked package-lock.json with security fixes applied
- Removed web/package-lock.json from .gitignore to support npm users
- Both npm and pnpm now enforce secure dependency versions

This enables developers to use either pnpm or npm while maintaining
consistent security posture across both package managers.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 13:53:00 -08:00
Kayvan Sylvan
b59f381aac security: fix critical ollama authentication vulnerability
Fix Dependabot alert #107 (CRITICAL):
- github.com/ollama/ollama vulnerability: missing authentication enabling
  unauthorized model management operations
- Updated from v0.13.5 (vulnerable) to v0.15.1 (latest stable)

All Go tests pass. Build verified successful.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-25 13:30:28 -08:00