Peter Steinberger
|
ce1f0c0a10
|
ci: move workflows to blacksmith 16vcpu runners
|
2026-02-19 17:25:15 +01:00 |
|
Peter Steinberger
|
2435499862
|
ci: move blacksmith runners to 8 vcpu
|
2026-02-19 16:50:22 +01:00 |
|
Peter Steinberger
|
b0e55283d5
|
chore: bump release metadata to 2026.2.19
|
2026-02-19 16:17:34 +01:00 |
|
Peter Steinberger
|
c45f3c5b00
|
fix(gateway): harden canvas auth with session capabilities
|
2026-02-19 15:51:22 +01:00 |
|
Peter Steinberger
|
81b19aaa1a
|
fix(security): enforce plugin and hook path containment
|
2026-02-19 15:37:29 +01:00 |
|
Peter Steinberger
|
b40821b068
|
fix: harden ACP secret handling and exec preflight boundaries
|
2026-02-19 15:34:20 +01:00 |
|
Peter Steinberger
|
3561442a9f
|
fix(plugins): harden discovery trust checks
|
2026-02-19 15:14:12 +01:00 |
|
Peter Steinberger
|
5dc50b8a3f
|
fix(security): harden npm plugin and hook install integrity flow
|
2026-02-19 15:11:25 +01:00 |
|
Peter Steinberger
|
29118995ad
|
refactor(lobster): remove lobsterPath overrides
|
2026-02-19 14:58:13 +01:00 |
|
Peter Steinberger
|
a40c10d3e2
|
fix: harden agent gateway authorization scopes
|
2026-02-19 14:37:56 +01:00 |
|
Peter Steinberger
|
ff74d89e86
|
fix: harden gateway control-plane restart protections
|
2026-02-19 14:30:15 +01:00 |
|
Peter Steinberger
|
e3e0ffd801
|
feat(security): audit gateway HTTP no-auth exposure
|
2026-02-19 14:25:56 +01:00 |
|
Peter Steinberger
|
bafdbb6f11
|
fix(security): eliminate safeBins file-existence oracle
|
2026-02-19 14:18:11 +01:00 |
|
Peter Steinberger
|
1316e57403
|
fix: enforce inbound attachment root policy across pipelines
|
2026-02-19 14:15:51 +01:00 |
|
Peter Steinberger
|
cfe8457a0f
|
fix(security): harden safeBins stdin-only enforcement
|
2026-02-19 14:10:45 +01:00 |
|
Peter Steinberger
|
3c419b7bd3
|
docs(security): document webhook hardening and changelog
|
2026-02-19 13:31:44 +01:00 |
|
Peter Steinberger
|
49d0def6d1
|
fix(security): harden imessage remote scp/ssh handling
|
2026-02-19 11:08:23 +01:00 |
|
Peter Steinberger
|
7255c20ddc
|
fix(docker): harden docker-setup mount validation
|
2026-02-19 10:44:46 +01:00 |
|
Peter Steinberger
|
b4dbe03298
|
refactor: unify restart gating and update availability sync
|
2026-02-19 10:00:41 +01:00 |
|
Peter Steinberger
|
9c2640a810
|
docs: clarify WhatsApp group allowlist and reply mention behavior
|
2026-02-19 09:19:34 +01:00 |
|
Peter Steinberger
|
7e54b6c96f
|
fix(browser): unify extension relay auth on gateway token
|
2026-02-19 08:40:40 +01:00 |
|
Gustavo Madeira Santana
|
c5698caca3
|
Security: default gateway auth bootstrap and explicit mode none (#20686)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: be1b73182c
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-19 02:35:50 -05:00 |
|
Peter Steinberger
|
87d8331150
|
docs: warn against third-party 1-click marketplace images
|
2026-02-19 08:30:29 +01:00 |
|
vikpos
|
f855d0be4f
|
fix: skip heartbeat when HEARTBEAT.md does not exist (#20461)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: f6e5f8172a
Co-authored-by: vikpos <24960005+vikpos@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-19 01:09:33 -05:00 |
|
Pejman Pour-Moezzi
|
a0d904dc23
|
docs(discord): replace quick setup and add recommended guild setup (#20088)
Co-authored-by: Shadow <shadow@openclaw.ai>
|
2026-02-18 09:39:09 -06:00 |
|
Taras Lukavyi
|
d833dcd731
|
fix(telegram): cron and heartbeat messages land in wrong chat instead of target topic (#19367)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: bf02bbf9ce
Co-authored-by: Lukavyi <1013690+Lukavyi@users.noreply.github.com>
Co-authored-by: obviyus <22031114+obviyus@users.noreply.github.com>
Reviewed-by: @obviyus
|
2026-02-18 15:31:01 +05:30 |
|
Peter Steinberger
|
ac0db68235
|
refactor(security): extract safeBins trust resolver
|
2026-02-18 05:01:31 +01:00 |
|
Peter Steinberger
|
28bac46c92
|
fix(security): harden safeBins path trust
|
2026-02-18 04:55:31 +01:00 |
|
Peter Steinberger
|
4bf3338834
|
chore: bump version to 2026.2.18 unreleased
|
2026-02-18 04:40:06 +01:00 |
|
Peter Steinberger
|
c90b09cb02
|
feat(agents): support Anthropic 1M context beta header
|
2026-02-18 03:29:48 +01:00 |
|
Peter Steinberger
|
d1c00dbb7c
|
fix: harden include confinement edge cases (#18652) (thanks @aether-ai-agent)
|
2026-02-18 03:27:16 +01:00 |
|
Peter Steinberger
|
edf7d6af61
|
fix: harden subagent completion announce retries
|
2026-02-18 03:19:50 +01:00 |
|
Gustavo Madeira Santana
|
985ec71c55
|
CLI: resolve parent/subcommand option collisions (#18725)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: b7e51cf909
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-17 20:57:09 -05:00 |
|
Peter Steinberger
|
fa4f66255c
|
fix(subagents): return completion message for manual session spawns
|
2026-02-18 02:52:35 +01:00 |
|
Peter Steinberger
|
01672a8f25
|
Revert "Add mesh auto-planning with chat command UX and hardened auth/session behavior"
This reverts commit 16e59b26a6.
# Conflicts:
# src/auto-reply/reply/commands-mesh.ts
# src/gateway/server-methods/mesh.ts
# src/gateway/server-methods/server-methods.test.ts
|
2026-02-18 02:18:02 +01:00 |
|
Peter Steinberger
|
2e91552f09
|
feat(agents): add generic provider api key rotation (#19587)
|
2026-02-18 01:31:11 +01:00 |
|
Peter Steinberger
|
4c569ce246
|
docs(tokens): document image dimension token tradeoffs
|
2026-02-18 00:56:57 +01:00 |
|
Peter Steinberger
|
b05e89e5e6
|
fix(agents): make image sanitization dimension configurable
|
2026-02-18 00:54:20 +01:00 |
|
Peter Steinberger
|
bb9a539d1d
|
Merge remote-tracking branch 'prhead/feat/slack-text-streaming'
# Conflicts:
# docs/channels/slack.md
# src/config/types.slack.ts
# src/slack/monitor/message-handler/dispatch.ts
|
2026-02-18 00:49:30 +01:00 |
|
Peter Steinberger
|
f07bb8e8fc
|
fix(hooks): backport internal message hook bridge with safe delivery semantics
|
2026-02-18 00:35:41 +01:00 |
|
Peter Steinberger
|
ae2c8f2cf0
|
feat(models): support anthropic sonnet 4.6
|
2026-02-18 00:00:31 +01:00 |
|
Peter Steinberger
|
a333d92013
|
docs(security): harden gateway security guidance
|
2026-02-17 23:48:49 +01:00 |
|
Peter Steinberger
|
c26cf6aa83
|
feat(cron): add default stagger controls for scheduled jobs
|
2026-02-17 23:48:14 +01:00 |
|
Peter Steinberger
|
9a2c39419e
|
chore(release): bump version to 2026.2.17
|
2026-02-17 23:08:55 +01:00 |
|
Shadow
|
2cf82c357e
|
Docs: expand multi-agent routing
|
2026-02-17 14:28:08 -06:00 |
|
Onur
|
ab94295541
|
docs(slack): add assistant:write requirement for typing status
|
2026-02-18 02:22:54 +08:00 |
|
Peter Steinberger
|
0978d63edd
|
docs: add community plugins guide
|
2026-02-17 17:42:37 +01:00 |
|
Sebastian
|
19a8f8bbf6
|
test(cron): add model fallback regression coverage
|
2026-02-17 10:40:25 -05:00 |
|
Sebastian
|
c0072be6a6
|
docs(cli): add components send example
|
2026-02-17 09:58:47 -05:00 |
|
Sebastian
|
dd0b789669
|
fix(mattermost): surface reactions support
|
2026-02-17 09:30:50 -05:00 |
|