Peter Steinberger
5850045df6
fix(cron): land #31145 explicit delivery none in editor (@byungsker)
...
Landed from contributor PR #31145 by @byungsker.
Co-authored-by: byungsker <byungsker@users.noreply.github.com >
2026-03-02 02:29:42 +00:00
Peter Steinberger
1da7906a5d
fix(line): land #31151 M4A voice MIME detection (@scoootscooob)
...
Landed from contributor PR #31151 by @scoootscooob.
Co-authored-by: scoootscooob <scoootscooob@users.noreply.github.com >
2026-03-02 02:26:41 +00:00
Peter Steinberger
a1a8ec6870
fix(windows): land #31147 plugin install spawn EINVAL (@codertony)
...
Landed from contributor PR #31147 by @codertony.
Co-authored-by: codertony <codertony@users.noreply.github.com >
2026-03-02 02:23:53 +00:00
Peter Steinberger
00d2df46c7
docs(changelog): note security audit and slack download scope hardening
2026-03-02 02:23:43 +00:00
Peter Steinberger
4f8c49e85b
docs: backfill telegram changelog credits for merged PRs
2026-03-02 02:14:14 +00:00
Jose E Velez
0c8fa63b93
feat: lightweight bootstrap context mode for heartbeat/cron runs (openclaw#26064) thanks @jose-velez
...
Verified:
- pnpm build
- pnpm check (fails on pre-existing unrelated repo issues in extensions/diffs and src/agents/tools/nodes-tool.test.ts)
- pnpm vitest run src/agents/bootstrap-files.test.ts src/infra/heartbeat-runner.model-override.test.ts src/cli/cron-cli.test.ts
- pnpm test:macmini (fails on pre-existing extensions/diffs import errors; touched suites pass)
Co-authored-by: jose-velez <10926182+jose-velez@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 20:13:24 -06:00
Peter Steinberger
0a182bb4d1
docs(changelog): add entries for recent landed Discord PRs
2026-03-02 02:11:21 +00:00
liuxiaopai-ai
042d06a19b
Telegram: stop bot on polling teardown
2026-03-02 02:09:52 +00:00
Peter Steinberger
b3990ad58a
fix: add changelog for #8805 (thanks @Arthur742Ramos)
2026-03-02 02:09:40 +00:00
Peter Steinberger
e54ddf6161
fix: add changelog for #19077 (thanks @ayanesakura)
2026-03-02 02:08:27 +00:00
zerone0x
a5f0a9240f
fix(cron): retry rename on EBUSY and fall back to copyFile on Windows
...
Landed from contributor PR #16932 with additional changelog alignment and verification.
2026-03-01 20:02:24 -06:00
FlamesCN
aaa7de45fa
fix(cron): prevent armTimer tight loop when job has stuck runningAtMs (openclaw#29853) thanks @FlamesCN
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: FlamesCN <12966659+FlamesCN@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:58:58 -06:00
Peter Steinberger
ffe1937b92
fix(cli): set cron run exit code from run outcome (land #31121 by @Sid-Qin)
...
Landed-from: #31121
Contributor: @Sid-Qin
Co-authored-by: Sid <sidqin0410@gmail.com >
2026-03-02 01:58:39 +00:00
Mark L
9670ccfc41
Control UI/Cron: persist delivery mode none on edit (openclaw#31114) thanks @liuxiaopai-ai
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com >
Co-authored-by: Takhoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:58:13 -06:00
C. Liao
313a655d13
fix(cron): reject sessionTarget "main" for non-default agents at creation time (openclaw#30217) thanks @liaosvcaf
...
Verified:
- pnpm install --frozen-lockfile
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: liaosvcaf <51533973+liaosvcaf@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:54:53 -06:00
Peter Steinberger
e70fc5eb62
fix(nodes): cap screen_record duration to 5 minutes (land #31106 by @BlueBirdBack)
...
Landed-from: #31106
Contributor: @BlueBirdBack
Co-authored-by: BlueBirdBack <126304167+BlueBirdBack@users.noreply.github.com >
2026-03-02 01:53:20 +00:00
charo
757e09fe43
fix(cron): recover flat patch params for update action and fix schema (openclaw#23221) thanks @charojo
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: charojo <4084797+charojo@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:50:51 -06:00
Peter Steinberger
a779c2ca6a
fix(telegram): skip nullish final text sends (land #30969 by @haosenwang1018)
...
Landed-from: #30969
Contributor: @haosenwang1018
Co-authored-by: Sense_wang <167664334+haosenwang1018@users.noreply.github.com >
2026-03-02 01:50:25 +00:00
Peter Steinberger
70ee256ae0
fix(routing): treat group/channel peer.kind as equivalent (land #31135 by @Sid-Qin)
...
Landed-from: #31135
Contributor: @Sid-Qin
Co-authored-by: Sid <sidqin0410@gmail.com >
2026-03-02 01:47:02 +00:00
Mark L
e076665e5e
test(cron): add Asia/Shanghai year-regression coverage [AI-assisted] (openclaw#30565) thanks @liuxiaopai-ai
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:46:06 -06:00
Peter Steinberger
65e13c7b6e
fix(fs): honor unset tools.fs.workspaceOnly default (land #31128 by @SaucePackets)
...
Landed-from: #31128
Contributor: @SaucePackets
Co-authored-by: SaucePackets <33006469+SaucePackets@users.noreply.github.com >
2026-03-02 01:43:50 +00:00
Mark L
f1354869bd
Node install: persist gateway token in service env ( #31122 )
...
* Node daemon: persist gateway token env
* changelog: add credits for node gateway token fix
* changelog: credit byungsker for node token service fix
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-03-01 17:35:24 -08:00
StingNing
ca770622b3
Cron: fix 1/3 timeout on fresh isolated CLI runs (openclaw#30140) thanks @ningding97
...
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: ningding97 <17723822+ningding97@users.noreply.github.com >
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-03-01 19:34:18 -06:00
Peter Steinberger
68a8a98ab7
fix(acpx): default strict windows wrapper policy on windows
2026-03-02 01:31:32 +00:00
Peter Steinberger
f53ea0b74b
docs(changelog): add entries for PRs #31090 #31105 #31093 #31088
2026-03-02 01:28:58 +00:00
Beer van der Drift
feefedfb83
fix: allow docker cli container to connect to gateway ( #12504 )
...
* Docker: route CLI through gateway network namespace
* Tests: assert Docker Compose CLI namespace wiring
* Changelog: add Docker Compose CLI connectivity fix
* Docker: pin docker setup gateway mode and bind
* Tests: cover docker setup mode and bind sync
* Docs: clarify Docker LAN vs loopback gateway targeting
* Changelog: expand Docker #12504 targeting note
* Docker: default optional CLAUDE compose vars to empty
* Docs(Docker): document non-interactive compose runs
* Changelog: note docker compose env-noise reduction
* Docker: restore onboarding Tailscale guidance
* Docker: simplify onboarding output and clarify Tailscale
* Docker: harden shared-namespace CLI container
* Docs(Docker): document shared-namespace trust boundary
* Changelog: note docker shared-namespace hardening
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-03-01 17:28:35 -08:00
Peter Steinberger
710004e011
fix(security): harden root-scoped writes against symlink races
2026-03-02 01:27:46 +00:00
Peter Steinberger
a6a742f3d0
fix(auto-reply): land #31080 from @scoootscooob
...
Co-authored-by: scoootscooob <zhentongfan@gmail.com >
2026-03-02 01:17:42 +00:00
Peter Steinberger
155118751f
refactor!: remove versioned system-run approval contract
2026-03-02 01:12:53 +00:00
Peter Steinberger
b9aa2d436b
fix(security): enforce sandbox inheritance for sessions_spawn
2026-03-02 01:11:13 +00:00
Peter Steinberger
81ca309ee6
fix(agents): land #31002 from @yfge
...
Co-authored-by: yfge <geyunfei@gmail.com >
2026-03-02 01:08:58 +00:00
Peter Steinberger
250f9e15f5
fix(agents): land #31007 from @HOYALIM
...
Co-authored-by: Ho Lim <subhoya@gmail.com >
2026-03-02 01:06:00 +00:00
Peter Steinberger
085c23ce5a
fix(security): block private-network web_search citation redirects
2026-03-02 01:05:20 +00:00
Peter Steinberger
e1a9ba8400
docs(changelog): credit GHSA-6f6j reporter
2026-03-02 01:04:27 +00:00
Peter Steinberger
c823a85302
fix: harden sandbox media reads against TOCTOU escapes
2026-03-02 01:04:01 +00:00
Peter Steinberger
4320cde91d
fix(slack): land #31028 from @taw0002
...
Co-authored-by: taw0002 <webmaster@sodsolutions.com >
2026-03-02 01:03:39 +00:00
Peter Steinberger
da80e22d89
fix(tools): land #31015 from @haosenwang1018
...
Co-authored-by: haosenwang1018 <1293965075@qq.com >
2026-03-02 01:01:02 +00:00
Benedikt Johannes
b81e1b902d
Fixes minor security vulnerability ( #30948 ) ( #30951 )
...
Merged via squash.
Prepared head SHA: cfbe5fe8301370d751b3c62d908533f00d583933
Co-authored-by: benediktjohannes <253604130+benediktjohannes@users.noreply.github.com >
Co-authored-by: shakkernerd <165377636+shakkernerd@users.noreply.github.com >
Reviewed-by: @shakkernerd
2026-03-02 00:38:01 +00:00
Vincent Koc
f696b64b51
Doctor: warn when Linux state dir is on SD/eMMC mounts ( #31033 )
...
* Doctor state: warn on Linux SD or eMMC state mounts
* Doctor tests: cover Linux SD or eMMC state mount detection
* Docs doctor: document Linux SD or eMMC state warning
* Changelog: add Linux SD or eMMC doctor warning
* Update CHANGELOG.md
* Doctor: escape mountinfo control chars in SD warning
* Doctor tests: cover escaped mountinfo control chars
2026-03-01 16:36:01 -08:00
Peter Steinberger
412eabc42b
fix(session): retire stale dm main route after dmScope migration ( #31010 )
2026-03-02 00:33:54 +00:00
Peter Steinberger
0c0f556927
fix(discord): unify reconnect watchdog and land #31025/#30530
...
Landed follow-up intent from contributor PR #31025 (@theotarr) and PR #30530 (@liuxiaopai-ai).
Co-authored-by: theotarr <theotarr@users.noreply.github.com >
Co-authored-by: liuxiaopai-ai <liuxiaopai-ai@users.noreply.github.com >
2026-03-02 00:24:15 +00:00
Peter Steinberger
0eac494db7
fix(gateway): harden node metadata policy classification
2026-03-02 00:15:34 +00:00
Peter Steinberger
84d0a794ec
fix: harden matrix startup errors + add regressions ( #31023 ) (thanks @efe-arv)
2026-03-02 00:15:10 +00:00
Peter Steinberger
43cad8268d
fix(security): harden webhook memory guards across channels
2026-03-02 00:12:05 +00:00
Peter Steinberger
53d10f8688
fix(gateway): land access/auth/config migration cluster
...
Land #28960 by @Glucksberg (Tailscale origin auto-allowlist).
Land #29394 by @synchronic1 (allowedOrigins upgrade migration).
Land #29198 by @Mariana-Codebase (plugin HTTP auth guard + route precedence).
Land #30910 by @liuxiaopai-ai (tailscale bind/config.patch guard).
Co-authored-by: Glucksberg <markuscontasul@gmail.com >
Co-authored-by: synchronic1 <synchronic1@users.noreply.github.com >
Co-authored-by: Mariana Sinisterra <mariana.data@outlook.com >
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com >
2026-03-02 00:10:51 +00:00
Peter Steinberger
8e6b3ade3e
docs(changelog): record session lifecycle and diagnostics fixes
2026-03-02 00:07:47 +00:00
Vincent Koc
ee96e1751e
docs(changelog): add missing contributor credits for 2026.3.1 ( #31079 )
...
* changelog: credit @BUGKillerKing for #29315
* changelog: credit @liuweifly for #14674
* changelog: credit @Sid-Qin for #29709
* changelog: credit @lailoo for #21808
* changelog: credit @openperf for #26259
* changelog: credit @icesword0760 for #28959
* changelog: credit @cowboy129 for #28529
* changelog: credit @yfge for #17798
* changelog: credit @kcinzgg for #27325
* changelog: credit @guoqunabc for #28494
* changelog: credit @WilsonLiu95 for #12755
* changelog: credit @qiangu for #18529
* changelog: credit @lailoo for unreleased #27616
* changelog: credit @tumf for unreleased #18642
* changelog: normalize unreleased #24789 credit handle
* changelog: fill unreleased #24435 credit
* changelog: fill unreleased #25090 credit
* changelog: fill unreleased #29098 credit (entry 1)
* changelog: fill unreleased #29098 credit (entry 2)
* changelog: credit @liuxiaopai-ai for unreleased #30567
* changelog: credit @graysurf for unreleased #23169
* changelog: credit @pablohrcarvalho for unreleased #10686
* changelog: credit @Glucksberg for unreleased #21715
* changelog: credit @liuxiaopai-ai for unreleased #30586
* changelog: add missing credits for 2026.2.26
* changelog: add missing credits for 2026.2.25
* changelog: add missing credits for 2026.2.24
* changelog: add missing credits for 2026.2.23
* changelog: add missing credits for 2026.2.22
2026-03-01 16:04:55 -08:00
Peter Steinberger
12c1257023
fix(acpx): share windows wrapper resolver and add strict hardening mode
2026-03-01 23:57:06 +00:00
Peter Steinberger
ee03ade0d6
fix(agents): harden tool-name normalization and transcript repair
...
Landed from contributor PRs #30620 and #30735 by @Sid-Qin, plus #30881 by @liuxiaopai-ai.
Co-authored-by: SidQin-cyber <sidqin0410@gmail.com >
Co-authored-by: liuxiaopai-ai <73659136+liuxiaopai-ai@users.noreply.github.com >
2026-03-01 23:51:54 +00:00
Peter Steinberger
50e2674dfc
fix(discord): unify dm command auth gating
2026-03-01 23:50:24 +00:00