Commit Graph

Select branches

Hide Pull Requests

main

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v1.0.4

v1.1.0

v1.2.0

v1.2.1

v1.2.2

v1.3.0

v2.0.0-beta1

v2.0.0-beta2

v2.0.0-beta3

v2.0.0-beta4

v2.0.0-beta5

v2026.1.10

v2026.1.11

v2026.1.11-1

v2026.1.11-2

v2026.1.11-3

v2026.1.12

v2026.1.12-2

v2026.1.13

v2026.1.14-1

v2026.1.15

v2026.1.16-2

v2026.1.20

v2026.1.21

v2026.1.22

v2026.1.23

v2026.1.24

v2026.1.24-1

v2026.1.29

v2026.1.30

v2026.1.5

v2026.1.5-1

v2026.1.5-2

v2026.1.5-3

v2026.1.8

v2026.1.9

v2026.2.1

v2026.2.12

v2026.2.13

v2026.2.14

v2026.2.15

v2026.2.15-beta.1

v2026.2.17

v2026.2.19

v2026.2.19-beta.1

v2026.2.2

v2026.2.21

v2026.2.21-beta.1

v2026.2.22

v2026.2.23

v2026.2.23-beta.1

v2026.2.24

v2026.2.24-beta.1

v2026.2.25

v2026.2.25-beta.1

v2026.2.26

v2026.2.26-beta.1

v2026.2.3

v2026.2.6

v2026.2.6-1

v2026.2.6-2

v2026.2.6-3

v2026.2.9

v2026.3.1

v2026.3.11

v2026.3.11-beta.1

v2026.3.12

v2026.3.13-1

v2026.3.13-beta.1

v2026.3.2

v2026.3.2-beta.1

v2026.3.22

v2026.3.22-beta.1

v2026.3.23

v2026.3.23-2

v2026.3.23-beta.1

v2026.3.24

v2026.3.24-beta.1

v2026.3.24-beta.2

v2026.3.28

v2026.3.28-beta.1

v2026.3.31

v2026.3.31-beta.1

v2026.3.7

v2026.3.7-beta.1

v2026.3.8

v2026.3.8-beta.1

v2026.4.1

v2026.4.1-beta.1

v2026.4.10

v2026.4.11

v2026.4.11-beta.1

v2026.4.12

v2026.4.12-beta.1

v2026.4.14

v2026.4.14-beta.1

v2026.4.15-beta.1

v2026.4.2

v2026.4.5

v2026.4.7

v2026.4.7-1

v2026.4.8

v2026.4.9

v2026.4.9-beta.1

Mono Color

• 91391bbe01 Auto-reply tests: assert exact do not do that behavior Vincent Koc 2026-02-24 18:49:11 -05:00
• 7bb08ba945 Auto-reply: add exact stop trigger for do not do that Vincent Koc 2026-02-24 18:49:03 -05:00
• a3c4f56b0b security(voice-call): detect Telnyx webhook replay Brian Mendonca 2026-02-24 14:42:00 -07:00
• 53f9b7d4e7 fix(automation): harden announce delivery + cron coding profile (#25813 #25821 #25822) Peter Steinberger 2026-02-24 23:48:49 +00:00
• 36d1e1dcff refactor(telegram): simplify DM media auth precheck flow Peter Steinberger 2026-02-24 23:49:05 +00:00
• 316fad13aa refactor(outbound): unify attachment hydration flow Peter Steinberger 2026-02-24 23:48:31 +00:00
• 9924f7c84e fix(security): classify hook sessions case-insensitively Brian Mendonca 2026-02-24 12:33:35 -07:00
• 43a3ff3beb Changelog: add entry for exec env sanitization Brian Mendonca 2026-02-24 12:11:16 -07:00
• 48b052322b Security: sanitize inherited host exec env Brian Mendonca 2026-02-24 12:09:42 -07:00
• 9514201fb9 fix(telegram): block unauthorized DM media downloads Peter Steinberger 2026-02-24 23:43:37 +00:00
• 5a64f6d766 Gateway/Security: protect /api/channels plugin root Brian Mendonca 2026-02-24 12:14:35 -07:00
• 453664f09d refactor(zalo): split monitor access and webhook logic Peter Steinberger 2026-02-24 23:40:21 +00:00
• 58309fd8d9 refactor(matrix,tests): extract helpers and inject send-queue timing Peter Steinberger 2026-02-24 23:37:45 +00:00
• a2529c25ff test(matrix,discord,sandbox): expand breakage regression coverage Peter Steinberger 2026-02-24 23:33:02 +00:00
• 13a1c46396 fix(web-search): reduce provider auto-detect log noise Peter Steinberger 2026-02-24 23:32:13 +00:00
• 79a7b3d22e test(line): align tmp-root expectation after sandbox hardening Peter Steinberger 2026-02-24 23:31:15 +00:00
• 79e2328935 docs: update changelog for safe-bin hardening Peter Steinberger 2026-02-24 23:30:43 +00:00
• b4010a0b62 fix(zalo): enforce group sender policy in groups Peter Steinberger 2026-02-24 23:30:05 +00:00
• 4355e08262 refactor: harden safe-bin trusted dir diagnostics Peter Steinberger 2026-02-24 23:29:12 +00:00
• 5c2a483375 refactor(outbound): centralize attachment media policy Peter Steinberger 2026-02-24 23:28:46 +00:00
• 54648a9cf1 refactor: centralize followup origin routing helpers Peter Steinberger 2026-02-24 23:28:26 +00:00
• 9b53102100 test: add routing/session isolation edge-case regressions Peter Steinberger 2026-02-24 23:24:51 +00:00
• 9fccf60733 refactor(synology-chat): centralize DM auth and fail fast startup Peter Steinberger 2026-02-24 23:28:24 +00:00
• e7a5f9f4d8 fix(channels,sandbox): land hard breakage cluster from reviewed PR bases Peter Steinberger 2026-02-24 23:27:12 +00:00
• 5552f9073f refactor(sandbox): centralize network mode policy helpers Peter Steinberger 2026-02-24 23:26:46 +00:00
• 14b6eea6e3 feat(sandbox): block container namespace joins by default Peter Steinberger 2026-02-24 23:19:48 +00:00
• ccbeb332e0 fix: harden routing/session isolation for followups and heartbeat Peter Steinberger 2026-02-24 23:13:51 +00:00
• 7655c0cb3a docs(changelog): add synology-chat allowlist fail-closed note Peter Steinberger 2026-02-24 23:17:58 +00:00
• 0ee30361b8 fix(synology-chat): fail closed empty allowlist Peter Steinberger 2026-02-24 22:55:03 +00:00
• 270ab03e37 fix: enforce local media root checks for attachment hydration Peter Steinberger 2026-02-24 23:16:59 +00:00
• b67e600bff fix(security): restrict default safe-bin trusted dirs Peter Steinberger 2026-02-24 23:12:52 +00:00
• 2d159e5e87 docs(security): document openclaw temp-folder boundary Peter Steinberger 2026-02-24 23:11:19 +00:00
• d3da67c7a9 fix(security): lock sandbox tmp media paths to openclaw roots Peter Steinberger 2026-02-24 23:09:34 +00:00
• bf8ca07deb fix(config): soften antigravity removal fallout (#25538) Peter Steinberger 2026-02-24 23:02:45 +00:00
• 039ae0b77c chore: refresh lockfile after plugin devDependency cleanup Shakker 2026-02-24 22:50:47 +00:00
• 955cc9029f chore: sync plugin versions to 2026.2.24 Shakker 2026-02-24 22:44:57 +00:00
• f4e6f87303 refactor(ios): drop legacy talk payload and keychain fallbacks Peter Steinberger 2026-02-24 22:38:47 +00:00
• 853f75592f changelog: include #25847 in chat image safety entry (#25847) (thanks @shakkernerd) Shakker 2026-02-24 22:17:34 +00:00
• 30cb849b10 test(ui): reject base64 SVG data URLs Shakker 2026-02-24 22:00:56 +00:00
• e7298b844f changelog: credit both chat-image fix contributors Shakker 2026-02-24 21:45:53 +00:00
• e9750104b2 ui: block svg data image opens and harden tests Shakker 2026-02-24 14:50:04 +00:00
• 9ef0fc2ff8 fix(sandbox): block @-prefixed workspace path bypass Peter Steinberger 2026-02-24 17:22:46 +00:00
• f154926cc0 fix: land telegram empty-html fallback hardening (#25096) (thanks @Glucksberg) Ayaan Zaidi 2026-02-24 22:33:08 +05:30
• 6e31bca198 fix(telegram): fail loud on empty text fallback Ayaan Zaidi 2026-02-24 22:23:17 +05:30
• 566a8e7137 chore(telegram): suppress handled empty-text retry logs Glucksberg 2026-02-24 05:49:19 +00:00
• 51b3e23680 fix(telegram): fallback to plain text when threaded markdown renders empty Glucksberg 2026-02-15 00:45:49 +00:00
• 00de3ca833 fix: widen external link rel token set type Ayaan Zaidi 2026-02-24 22:15:42 +05:30
• 8892a1cd45 refactor(android-ui): unify gateway config resolution paths Ayaan Zaidi 2026-02-24 22:11:11 +05:30
• 7a74cf34ba fix(android-security): remove token-derived logging from prefs Ayaan Zaidi 2026-02-24 22:11:07 +05:30
• 8b24830e07 fix(android-gateway): avoid token clear on transient connect failure Ayaan Zaidi 2026-02-24 22:11:04 +05:30
• e11e329238 refactor(android-chat): move thread selector above composer Ayaan Zaidi 2026-02-24 21:57:58 +05:30
• 75f145ebcc docs(android): document alpha rebuild status and feature checklist Ayaan Zaidi 2026-02-24 21:53:27 +05:30
• baf98a87f6 refactor(android-settings): remove gateway controls duplicated in connect Ayaan Zaidi 2026-02-24 21:43:59 +05:30
• bb27884474 feat(android-tabs): add coming-soon voice and screen tabs Ayaan Zaidi 2026-02-24 21:43:56 +05:30
• 94f426b29e fix(android-nav): hide tab bar while keyboard is open Ayaan Zaidi 2026-02-24 21:36:58 +05:30
• 577c554150 style(android-chat): redesign composer controls and actions Ayaan Zaidi 2026-02-24 21:34:15 +05:30
• 81ff074a51 style(android-chat): align bubbles and markdown with RN Ayaan Zaidi 2026-02-24 21:34:12 +05:30
• b658000bf7 style(android-chat): refine thread shell and empty states Ayaan Zaidi 2026-02-24 21:34:08 +05:30
• 02e3fbef77 style(android): align settings screen with RN visual system Ayaan Zaidi 2026-02-24 21:19:39 +05:30
• cf031d6ad4 chore(android): remove unused legacy ui components Ayaan Zaidi 2026-02-24 21:02:15 +05:30
• 439d8e609e fix(android): use native client id for operator session Ayaan Zaidi 2026-02-24 20:55:30 +05:30
• 14f5217e22 fix(android): retry with shared token after device-token failure Ayaan Zaidi 2026-02-24 20:55:25 +05:30
• 4b188dcf97 fix(android): persist gateway auth state across onboarding Ayaan Zaidi 2026-02-24 20:55:21 +05:30
• f853622eca feat(android): switch post-onboarding app to five-tab shell Ayaan Zaidi 2026-02-24 18:25:52 +05:30
• c015382a77 feat(android): add connect tab screen with setup and manual modes Ayaan Zaidi 2026-02-24 18:25:46 +05:30
• 757a4dc9fa docs(android): generalize style guide from onboarding baseline Ayaan Zaidi 2026-02-24 18:12:04 +05:30
• 5d88e77420 docs(android): add native UI style guide Ayaan Zaidi 2026-02-24 18:07:50 +05:30
• d6bbe93d4c feat(android): add settings action to rerun onboarding Ayaan Zaidi 2026-02-24 18:07:35 +05:30
• b9cc2599f1 feat(android): add native four-step onboarding flow Ayaan Zaidi 2026-02-24 18:07:32 +05:30
• 3e2e010952 feat(android): add onboarding and gateway auth state plumbing Ayaan Zaidi 2026-02-24 18:07:29 +05:30
• 36c352453f build(android): bump AGP and update gradle defaults Ayaan Zaidi 2026-02-24 18:06:35 +05:30
• e806b34779 chore: remove changelog add helper script Peter Steinberger 2026-02-24 15:32:58 +00:00
• 0f0a680d3d fix(exec): block shell-wrapper positional argv approval smuggling Peter Steinberger 2026-02-24 15:16:55 +00:00
• 80daaeba38 fix(ios): split watch notify normalization helpers Peter Steinberger 2026-02-24 14:36:06 +00:00
• 4ec0af00fe Agents: fix embedded auth-profile failure helper typing Mariano Belinky 2026-02-22 15:03:34 +00:00
• 0121fa6f1a Changelog: add PR 23636 iOS/watch notes Mariano Belinky 2026-02-22 15:00:36 +00:00
• d06d8701fd iOS: normalize watch quick actions and fix test signing Mariano Belinky 2026-02-22 14:42:23 +00:00
• d18ae2256f refactor: unify channel plugin resolution, family ordering, and changelog entry tooling Peter Steinberger 2026-02-24 15:15:11 +00:00
• 878b4e0ed7 refactor: unify tools.fs workspaceOnly resolution Peter Steinberger 2026-02-24 15:13:59 +00:00
• 6c5ab543c0 refactor: tighten external-link policy and window.open guard Peter Steinberger 2026-02-24 15:05:09 +00:00
• 13bfe7faa6 refactor(sandbox): share bind parsing and host-path policy checks Peter Steinberger 2026-02-24 15:04:40 +00:00
• 0e155690be fix(config): add operational guidance to legacy talk help Peter Steinberger 2026-02-24 14:59:28 +00:00
• 44162055a8 fix(config): dedupe talk schema help keys Peter Steinberger 2026-02-24 14:51:06 +00:00
• d58f71571a feat(talk): add provider-agnostic config with legacy compatibility Nimrod Gutman 2026-02-21 21:47:39 +02:00
• d1f28c954e feat(gateway): surface talk elevenlabs config metadata Nimrod Gutman 2026-02-20 15:07:09 +02:00
• 069c56cd75 fix(ios): normalize team IDs before preferred match Peter Steinberger 2026-02-24 14:53:07 +00:00
• 1ae8c0a589 fix(ios): make team-id python lookup cross-platform Peter Steinberger 2026-02-24 14:43:30 +00:00
• fd07861bc3 fix(ios): harden team-id profile fallback and tests Peter Steinberger 2026-02-24 14:20:37 +00:00
• 73f526f025 fix(ios): support Xcode 16+ team detection and fix ntohl build error Brian Leach 2026-02-21 11:04:27 -06:00
• 9ccc15f3a6 docs: update changelog note for native image workspace fix Peter Steinberger 2026-02-24 14:55:16 +00:00
• 3b4dac764b fix: doctor plugin-id mapping for channel auto-enable (#25275) (thanks @zerone0x) Peter Steinberger 2026-02-24 14:35:25 +00:00
• 203de14211 fix(doctor): use plugin manifest id for third-party channel auto-enable zerone0x 2026-02-24 11:09:31 +01:00
• 3f07d725b1 fix: changelog credit for Telegram IPv4 fallback fix (#24295) (thanks @Glucksberg) Peter Steinberger 2026-02-24 14:52:16 +00:00
• dd9ba974d0 fix: sort IPv4 addresses before IPv6 in SSRF pinned DNS to fix Telegram media fetch on IPv6-broken hosts Glucksberg 2026-02-23 02:21:34 +00:00
• fb8edebc32 fix(ui): stabilize chat-image open browser test and changelog Peter Steinberger 2026-02-24 14:47:39 +00:00
• 94942df8c7 build: scope window.open guard to ui checks Shakker 2026-02-24 13:30:04 +00:00
• e5836283ab ui: centralize safe external URL opening Shakker 2026-02-24 13:27:04 +00:00
• ebb5680893 ui(chat): allowlist image open URLs Shakker 2026-02-24 13:09:20 +00:00
• 370d115549 fix: enforce workspaceOnly for native prompt image autoload Peter Steinberger 2026-02-24 14:47:22 +00:00
• c3680c2277 docs(changelog): credit reporter for sandbox bind-path fix Peter Steinberger 2026-02-24 14:47:39 +00:00