Gustavo Madeira Santana
|
96c7702526
|
Agents: add account-scoped bind and routing commands (#27195)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: ad35a458a55427614a35c9d0713a7386172464ad
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-26 02:36:56 -05:00 |
|
Ayaan Zaidi
|
c5d040bbea
|
fix: update changelog for android invoke distill (#27257) (thanks @obviyus)
|
2026-02-26 12:17:32 +05:30 |
|
Josh Avant
|
72adf2458b
|
CI: shard Windows test lane for faster CI critical path (#27234)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: f7c41089e0d5c36f59addd643d2038502bafe933
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>
Reviewed-by: @joshavant
|
2026-02-26 00:33:36 -06:00 |
|
Gustavo Madeira Santana
|
f08fe02a1b
|
Onboarding: support plugin-owned interactive channel flows (#27191)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 53872cf8e75562db012b66f888928524daff08d2
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-26 01:14:57 -05:00 |
|
Gustavo Madeira Santana
|
91a3f0a3fe
|
pairing: enforce strict account-scoped state
|
2026-02-26 00:31:24 -05:00 |
|
Peter Steinberger
|
35976da7a0
|
fix: harden Docker/GCP onboarding flow (#26253) (thanks @pandego)
|
2026-02-26 04:46:18 +00:00 |
|
Peter Steinberger
|
4b5d4a4c66
|
docs: finalize 2026.2.25 release notes and appcast
|
2026-02-26 05:15:27 +01:00 |
|
Ayaan Zaidi
|
3b0298562b
|
fix: document telegram group allowlist hardening (#25988) (thanks @bmendonca3)
|
2026-02-26 09:21:54 +05:30 |
|
Peter Steinberger
|
fdea7415cc
|
docs: reorder unreleased changelog by user impact
|
2026-02-26 04:39:01 +01:00 |
|
Theo Tarr
|
7af6849c2f
|
Discord: handle early gateway startup errors
|
2026-02-26 03:22:02 +00:00 |
|
Peter Steinberger
|
9b81a53016
|
fix: add changelog note for LINE lifecycle fix (#26528) (thanks @Sid-Qin)
|
2026-02-26 03:20:57 +00:00 |
|
Peter Steinberger
|
f789f880c9
|
fix(security): harden approval-bound node exec cwd handling
|
2026-02-26 04:14:11 +01:00 |
|
Peter Steinberger
|
8f8e2b13b4
|
fix: disable tts tool for voice provider
|
2026-02-26 04:12:39 +01:00 |
|
Peter Steinberger
|
8a97803474
|
fix(agents): normalize malformed tool results in adapter (#27007)
|
2026-02-26 04:11:44 +01:00 |
|
Peter Steinberger
|
b37dc42240
|
fix(cron): suppress fallback summary after attempted announce delivery
|
2026-02-26 03:09:14 +00:00 |
|
Peter Steinberger
|
8a006a3260
|
feat(heartbeat): add directPolicy and restore default direct delivery
|
2026-02-26 03:57:03 +01:00 |
|
Harold Hunt
|
ee594e2fdb
|
fix(telegram): webhook hang - tests and fix (openclaw#26933) thanks @huntharo
Verified:
- pnpm build
- pnpm check
- pnpm test:macmini
Co-authored-by: huntharo <5617868+huntharo@users.noreply.github.com>
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
|
2026-02-25 20:56:53 -06:00 |
|
Peter Steinberger
|
1e7ec8bfd2
|
fix(routing): preserve explicit cron account and bound message defaults
Co-authored-by: lbo728 <72309817+lbo728@users.noreply.github.com>
Co-authored-by: stakeswky <64798754+stakeswky@users.noreply.github.com>
|
2026-02-26 02:56:03 +00:00 |
|
Peter Steinberger
|
75dfb71e4e
|
fix(slack): gate pin/reaction system events by sender auth
|
2026-02-26 03:48:58 +01:00 |
|
Peter Steinberger
|
04d91d0319
|
fix(security): block workspace hardlink alias escapes
|
2026-02-26 03:42:54 +01:00 |
|
Peter Steinberger
|
53fcfdf794
|
fix(telegram): preserve finalized previews on mixed text+voice turns
|
2026-02-26 03:42:47 +01:00 |
|
Peter Steinberger
|
03e689fc89
|
fix(security): bind system.run approvals to argv identity
|
2026-02-26 03:41:31 +01:00 |
|
Peter Steinberger
|
baf656bc6f
|
fix: block IPv6 multicast SSRF bypass
|
2026-02-26 03:35:10 +01:00 |
|
Ayaan Zaidi
|
260bec5985
|
fix: add changelog for chat compose mobile layout (#11167) (thanks @junyiz)
|
2026-02-26 08:03:57 +05:30 |
|
Peter Steinberger
|
069bbf9741
|
fix(slack): land #26878 allowlist channel ID case-insensitive match (thanks @lbo728)
Land contributor PR #26878 from @lbo728; include changelog credit and regression tests.
Co-authored-by: lbo728 <extreme0728@gmail.com>
|
2026-02-26 02:21:02 +00:00 |
|
Ayaan Zaidi
|
958cafc54f
|
fix: add changelog note for android startup perf (#26659) (thanks @obviyus)
|
2026-02-26 07:50:09 +05:30 |
|
Peter Steinberger
|
b8bb8ab3ca
|
docs: clarify personal-by-default onboarding security notice
|
2026-02-26 02:59:34 +01:00 |
|
Peter Steinberger
|
347f7b9550
|
fix(msteams): bind file consent invokes to conversation
|
2026-02-26 02:49:50 +01:00 |
|
Ramez
|
acbb93be48
|
fix(agents): comprehensive quota fallback fixes - session overrides + surgical cooldown logic (#23816)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: e6f2b4742b82b9fe44a7e103170c2f96565b09c5
Co-authored-by: ramezgaberiel <844893+ramezgaberiel@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-25 20:35:40 -05:00 |
|
Peter Steinberger
|
ce8c67c314
|
fix(slack): gate interactive system events by sender auth
|
2026-02-26 02:11:50 +01:00 |
|
Peter Steinberger
|
5e1bfb2ce2
|
docs(changelog): add followup typing fix note (#26881)
|
2026-02-26 01:07:32 +00:00 |
|
Peter Steinberger
|
3cd3d489f4
|
docs(changelog): note trusted-proxy control-ui hardening
|
2026-02-26 01:54:32 +01:00 |
|
Aleksandrs Tihenko
|
c0026274d9
|
fix(auth): distinguish revoked API keys from transient auth errors (#25754)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 8f9c07a200644284e11adae76368adab40c5fa4e
Co-authored-by: rrenamed <87486610+rrenamed@users.noreply.github.com>
Co-authored-by: gumadeiras <5599352+gumadeiras@users.noreply.github.com>
Reviewed-by: @gumadeiras
|
2026-02-25 19:47:16 -05:00 |
|
Peter Steinberger
|
876018f322
|
chore(deps): update dependencies and lockfile
|
2026-02-26 01:31:36 +01:00 |
|
Peter Steinberger
|
4258a3307f
|
refactor(agents): unify subagent announce delivery pipeline
Co-authored-by: Smith Labs <SmithLabsLLC@users.noreply.github.com>
Co-authored-by: Do Cao Hieu <docaohieu2808@users.noreply.github.com>
|
2026-02-26 00:30:44 +00:00 |
|
Peter Steinberger
|
aedf62ac7e
|
fix: harden discord and slack reaction ingress authorization
|
2026-02-26 01:26:47 +01:00 |
|
Peter Steinberger
|
c736f11a16
|
fix(gateway): harden browser websocket auth chain
|
2026-02-26 01:22:49 +01:00 |
|
Peter Steinberger
|
496a76c03b
|
fix(security): harden browser trace/download temp path handling
|
2026-02-26 01:04:05 +01:00 |
|
Peter Steinberger
|
e56b0cf1a0
|
fix: enforce telegram reaction authorization
|
2026-02-26 01:03:03 +01:00 |
|
Shakker
|
f83719937a
|
Changelog: note Discord embed fallback coverage
|
2026-02-25 23:58:42 +00:00 |
|
Peter Steinberger
|
eb73e87f18
|
fix(session): prevent silent overflow on parent thread forks (#26912)
Lands #26912 from @markshields-tl with configurable session.parentForkMaxTokens and docs/tests/changelog updates.
Co-authored-by: Mark Shields <239231357+markshields-tl@users.noreply.github.com>
|
2026-02-25 23:54:02 +00:00 |
|
Peter Steinberger
|
8d1481cb4a
|
fix(gateway): require pairing for unpaired operator device auth
|
2026-02-26 00:52:50 +01:00 |
|
Peter Steinberger
|
2aa7842ade
|
fix(signal): enforce auth before reaction notification enqueue
|
2026-02-26 00:44:46 +01:00 |
|
Peter Steinberger
|
ef326f5cd0
|
fix(browser): revalidate upload paths at use time
|
2026-02-26 00:40:56 +01:00 |
|
Youyou972
|
15cfba7075
|
fix: cron model fallback to agent defaults when payload.model fails (#26717)
Merged via /review-pr -> /prepare-pr -> /merge-pr.
Prepared head SHA: 06454bd55b44ea864c10ad828649b293946cea8d
Co-authored-by: Youyou972 <50808411+Youyou972@users.noreply.github.com>
Co-authored-by: shakkernerd <165377636+shakkernerd@users.noreply.github.com>
Reviewed-by: @shakkernerd
|
2026-02-25 23:34:31 +00:00 |
|
Peter Steinberger
|
2011edc9e5
|
fix(gateway): preserve agentId through gateway send path
Landed from #23249 by @Sid-Qin.
Includes extra regression tests for agentId precedence + blank fallback.
Co-authored-by: Sid <201593046+Sid-Qin@users.noreply.github.com>
|
2026-02-25 23:31:35 +00:00 |
|
Peter Steinberger
|
125f4071bc
|
fix(gateway): block agents.files symlink escapes
|
2026-02-26 00:31:08 +01:00 |
|
Peter Steinberger
|
45d59971e6
|
docs(changelog): clarify macOS beta scope for oauth fix
|
2026-02-26 00:26:54 +01:00 |
|
Peter Steinberger
|
f60d9591ef
|
docs(changelog): add macOS auth fix note for setup-token path
|
2026-02-26 00:23:24 +01:00 |
|
Peter Steinberger
|
d512163d68
|
fix(security): harden nextcloud-talk webhook replay handling
|
2026-02-26 00:18:38 +01:00 |
|