Commit Graph

Select branches

Hide Pull Requests

main

v0.1.0

v0.1.1

v0.1.2

v0.1.3

v1.0.4

v1.1.0

v1.2.0

v1.2.1

v1.2.2

v1.3.0

v2.0.0-beta1

v2.0.0-beta2

v2.0.0-beta3

v2.0.0-beta4

v2.0.0-beta5

v2026.1.10

v2026.1.11

v2026.1.11-1

v2026.1.11-2

v2026.1.11-3

v2026.1.12

v2026.1.12-2

v2026.1.13

v2026.1.14-1

v2026.1.15

v2026.1.16-2

v2026.1.20

v2026.1.21

v2026.1.22

v2026.1.23

v2026.1.24

v2026.1.24-1

v2026.1.29

v2026.1.30

v2026.1.5

v2026.1.5-1

v2026.1.5-2

v2026.1.5-3

v2026.1.8

v2026.1.9

v2026.2.1

v2026.2.12

v2026.2.13

v2026.2.14

v2026.2.15

v2026.2.15-beta.1

v2026.2.17

v2026.2.19

v2026.2.19-beta.1

v2026.2.2

v2026.2.21

v2026.2.21-beta.1

v2026.2.22

v2026.2.23

v2026.2.23-beta.1

v2026.2.24

v2026.2.24-beta.1

v2026.2.25

v2026.2.25-beta.1

v2026.2.26

v2026.2.26-beta.1

v2026.2.3

v2026.2.6

v2026.2.6-1

v2026.2.6-2

v2026.2.6-3

v2026.2.9

v2026.3.1

v2026.3.11

v2026.3.11-beta.1

v2026.3.12

v2026.3.13-1

v2026.3.13-beta.1

v2026.3.2

v2026.3.2-beta.1

v2026.3.22

v2026.3.22-beta.1

v2026.3.23

v2026.3.23-2

v2026.3.23-beta.1

v2026.3.24

v2026.3.24-beta.1

v2026.3.24-beta.2

v2026.3.28

v2026.3.28-beta.1

v2026.3.31

v2026.3.31-beta.1

v2026.3.7

v2026.3.7-beta.1

v2026.3.8

v2026.3.8-beta.1

v2026.4.1

v2026.4.1-beta.1

v2026.4.10

v2026.4.11

v2026.4.11-beta.1

v2026.4.12

v2026.4.12-beta.1

v2026.4.14

v2026.4.14-beta.1

v2026.4.15-beta.1

v2026.4.2

v2026.4.5

v2026.4.7

v2026.4.7-1

v2026.4.8

v2026.4.9

v2026.4.9-beta.1

Mono Color

• b520e7ac38 fix: stabilize docker live model and doctor-switch tests Peter Steinberger 2026-02-21 15:36:14 +01:00
• b25d3652e7 fix(agents): cap embedded runner retry loop Peter Steinberger 2026-02-21 15:35:45 +01:00
• 352b5262da fix(ci): make docs spellcheck fallback deterministic Peter Steinberger 2026-02-21 15:08:24 +01:00
• 3101047234 feat(models): add Gemini 3.1 support Peter Steinberger 2026-02-21 15:07:38 +01:00
• 581868365d fix: finish volcengine/byteplus landing polish (#7967) (thanks @funmore123) Peter Steinberger 2026-02-21 15:04:28 +01:00
• 559736a5a0 feat(volcengine): integrate Volcengine & Byteplus Provider fanziqing 2026-02-03 19:57:37 +08:00
• 95c14d9b5f docs: prune low-signal changelog entries Peter Steinberger 2026-02-21 15:02:10 +01:00
• 7bd5c5d5a4 docs(changelog): reorder unreleased fixes by user impact Peter Steinberger 2026-02-21 14:37:06 +01:00
• 892620ddab chore: update workspace dependencies Peter Steinberger 2026-02-21 14:35:10 +01:00
• c62a6e7040 fix(models): add kimi-coding implicit provider template (openclaw#22526) thanks @lailoo 大猫子 2026-02-21 21:35:09 +08:00
• 14b3743228 fix(ci): stabilize Windows path handling in sandbox tests Peter Steinberger 2026-02-21 14:32:10 +01:00
• 10b8839a82 fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors Peter Steinberger 2026-02-21 14:30:53 +01:00
• f64d5ddf60 fix: replace README sponsors HTML table with markdown Peter Steinberger 2026-02-21 14:29:30 +01:00
• f23da067f6 fix(security): harden heredoc allowlist parsing Peter Steinberger 2026-02-21 14:27:13 +01:00
• 92cada2aca fix(security): block command substitution in unquoted heredoc bodies orlyjamie 2026-02-19 03:22:03 +11:00
• 2706cbd6d7 fix(agents): include filenames in image resize logs Peter Steinberger 2026-02-21 13:16:23 +00:00
• 3cfb402bda refactor(test): reuse state-dir helper in agent runner suite Peter Steinberger 2026-02-21 13:08:05 +00:00
• 25db01fe08 refactor(test): use withEnvAsync in pairing store fixture Peter Steinberger 2026-02-21 13:06:12 +00:00
• 21bb46d304 fix(ci): include browser network in sandbox test fixture Peter Steinberger 2026-02-21 13:05:51 +00:00
• 7a27e2648a refactor(test): dedupe plugin env overrides via env helpers Peter Steinberger 2026-02-21 13:03:29 +00:00
• f48698a50b fix(security): harden sandbox browser network defaults Peter Steinberger 2026-02-21 14:01:40 +01:00
• cf82614259 refactor(test): reuse state-dir helper in telegram tests Peter Steinberger 2026-02-21 13:02:12 +00:00
• 26eb1f781d refactor(test): reuse state-dir env helper in auth profile override e2e Peter Steinberger 2026-02-21 13:00:16 +00:00
• c2874aead7 refactor(test): centralize temporary state-dir env setup Peter Steinberger 2026-02-21 12:59:14 +00:00
• 50a8942c07 docs(changelog): add WhatsApp reaction allowlist security note Peter Steinberger 2026-02-21 13:57:32 +01:00
• e217f8c3f7 fix(security): OC-91 validate WhatsApp JID against allowlist in all send paths — Aether AI Agent Aether AI Agent 2026-02-18 15:25:16 +11:00
• 8c1518f0f3 fix(sandbox): use one-time noVNC observer tokens Peter Steinberger 2026-02-21 13:56:49 +01:00
• b43aadc34c refactor(test): dedupe temp-home setup in voicewake suite Peter Steinberger 2026-02-21 12:56:34 +00:00
• c529bafdc3 refactor(test): reuse temp-home helper in voicewake e2e Peter Steinberger 2026-02-21 12:54:54 +00:00
• 577e5cc74b refactor(test): dedupe gateway env setup and add env util coverage Peter Steinberger 2026-02-21 12:52:21 +00:00
• 621d8e1312 fix(sandbox): require noVNC observer password auth Peter Steinberger 2026-02-21 13:44:17 +01:00
• 6cb7e16d40 fix(oauth): harden refresh token refresh-response validation Peter Steinberger 2026-02-21 13:44:04 +01:00
• 24d18d0d72 fix: Correct data path in SKILL.md (coding-agent) (#11009) Henry Loenwind 2026-02-21 13:39:25 +01:00
• be7f825006 refactor(gateway): harden proxy client ip resolution Peter Steinberger 2026-02-21 13:32:25 +01:00
• 8b1fe0d1e2 fix(telegram): split streaming preview per assistant block (#22613) Ayaan Zaidi 2026-02-21 18:05:23 +05:30
• 36a0df423d refactor(gateway): make ws and http auth surfaces explicit Peter Steinberger 2026-02-21 13:31:58 +01:00
• 1835dec200 fix(security): force sandbox browser hash migration and audit stale labels Peter Steinberger 2026-02-21 13:25:35 +01:00
• b2d84528f8 refactor(test): remove duplicate cron tool harnesses Peter Steinberger 2026-02-21 12:25:13 +00:00
• f4c89aa66e docs(changelog): add tts provider-override hardening note Peter Steinberger 2026-02-21 13:24:19 +01:00
• 9516ace3c9 docs(changelog): note ACP resource-link prompt hardening Peter Steinberger 2026-02-21 13:23:41 +01:00
• 14b0d2b816 refactor: harden control-ui auth flow and add insecure-flag audit summary Peter Steinberger 2026-02-21 13:17:44 +01:00
• 4cd7d95746 style(browser): apply oxfmt cleanup for gate Peter Steinberger 2026-02-21 13:15:58 +01:00
• f265d45840 fix(tts): make model provider overrides opt-in Peter Steinberger 2026-02-21 13:15:53 +01:00
• d25a106628 docs(changelog): add tailscale auth hardening release note Peter Steinberger 2026-02-21 13:06:44 +01:00
• f202e73077 refactor(security): centralize host env policy and harden env ingestion Peter Steinberger 2026-02-21 13:04:34 +01:00
• 08e020881d refactor(security): unify command gating and blocked-key guards Peter Steinberger 2026-02-21 13:04:31 +01:00
• 356d61aacf fix(gateway): scope tailscale tokenless auth to websocket Peter Steinberger 2026-02-21 13:03:08 +01:00
• 6aa11f3092 fix(acp): harden resource link metadata formatting Peter Steinberger 2026-02-21 12:59:54 +01:00
• 073651fb57 docs: add sponsors section to README Peter Steinberger 2026-02-21 12:59:51 +01:00
• b577228d6b test(security): add overflow compaction truncation-budget regression Peter Steinberger 2026-02-21 12:58:44 +01:00
• 084f621025 fix(security): OC-65 prevent compaction counter reset to enforce context exhaustion limit — Aether AI Agent Aether AI Agent 2026-02-18 15:27:57 +11:00
• 2b76901f35 docs(changelog): credit reporter for control-ui auth hardening Peter Steinberger 2026-02-21 12:57:09 +01:00
• 99048dbec2 fix(gateway): align insecure-auth toggle messaging Peter Steinberger 2026-02-21 12:55:18 +01:00
• 810218756d docs(security): clarify trusted-host deployment assumptions Peter Steinberger 2026-02-21 12:53:07 +01:00
• ede496fa1a docs: clarify trusted-host assumption for tokenless tailscale Peter Steinberger 2026-02-21 12:52:45 +01:00
• fbb79d4013 fix(security): harden runtime command override gating Peter Steinberger 2026-02-21 12:49:45 +01:00
• cb84c537f4 fix: normalize status auth cost handling and models header tests Peter Steinberger 2026-02-21 12:44:06 +01:00
• e393d7aa5b docs(changelog): clarify Security/Exec release note Peter Steinberger 2026-02-21 12:43:59 +01:00
• dff61a10e1 docs(changelog): add windows system.run approval mismatch fix note Peter Steinberger 2026-02-21 11:58:35 +01:00
• 11f6bea598 add secret safety Santiago Medina Rolong 2026-02-20 15:54:59 -08:00
• 8db5e77ffa skills: fmt Santiago Medina Rolong 2026-02-19 20:37:36 -08:00
• da844d6411 skills: update xurl description Santiago Medina Rolong 2026-02-19 20:28:28 -08:00
• ac2ef69454 Update skills/xurl/SKILL.md Santiago Medina 2026-02-19 20:19:14 -08:00
• 635b6298e3 skills: add xurl skill Santiago Medina Rolong 2026-02-19 20:14:06 -08:00
• 283029bdea refactor(security): unify webhook auth matching paths Peter Steinberger 2026-02-21 11:52:21 +01:00
• 6007941f04 fix(security): harden and refactor system.run command resolution Peter Steinberger 2026-02-21 11:49:13 +01:00
• 5cc631cc9c fix(agents): harden model-skip and tool-policy imports Peter Steinberger 2026-02-21 11:48:02 +01:00
• 55aaeb5085 refactor(browser): centralize navigation guard enforcement Peter Steinberger 2026-02-21 11:45:23 +01:00
• 2cdbadee1f fix(security): block startup-file env injection across host execution paths Peter Steinberger 2026-02-21 11:43:53 +01:00
• 6b2f2811dc fix(security): require BlueBubbles webhook auth Peter Steinberger 2026-02-21 11:41:35 +01:00
• 220bd95eff fix(browser): block non-network navigation schemes Peter Steinberger 2026-02-21 11:31:13 +01:00
• c6ee14d60e fix(security): block grep safe-bin file-read bypass Peter Steinberger 2026-02-21 11:18:19 +01:00
• f81522af2e fix(docker): install Playwright Chromium into node cache (#22585) Ayaan Zaidi 2026-02-21 15:48:27 +05:30
• 75d4f6d51b docs: reorder and trim 2026.2.21 changelog entries Peter Steinberger 2026-02-21 11:12:58 +01:00
• eccff0b6c0 docs: relabel dependency hygiene changelog entries Peter Steinberger 2026-02-21 11:05:05 +01:00
• 9231d7d30f chore: bump version to 2026.2.21 Peter Steinberger 2026-02-21 11:02:30 +01:00
• 677384c519 refactor: simplify Telegram preview streaming to single boolean (#22012) Ayaan Zaidi 2026-02-21 15:19:13 +05:30
• e1cb73cdeb fix: unblock Docker build by aligning commands schema default (#22558) Ayaan Zaidi 2026-02-21 14:47:28 +05:30
• 3f19259843 Update bug_report.yml Vincent Koc 2026-02-21 04:06:07 -05:00
• d2a7293744 Docs: issue template copy cleanup (#22546) Vincent Koc 2026-02-21 03:43:35 -05:00
• dcf2c6d7f1 docs: normalize Amazon Bedrock setup section labels (#22549) Vincent Koc 2026-02-21 03:40:54 -05:00
• e36245bd37 docs: finalize onboarding option heading normalization (#22547) Vincent Koc 2026-02-21 03:38:37 -05:00
• ef42fe0094 docs: rename Tlon setup heading (#22544) Vincent Koc 2026-02-21 03:37:27 -05:00
• b5a77b9cb2 docs: finalize remaining setup heading phrasing (#22543) Vincent Koc 2026-02-21 03:36:39 -05:00
• d7891badda docs: more channel heading consistency updates (#22541) Vincent Koc 2026-02-21 03:36:03 -05:00
• 78caf9ec3d feat(ios): surface gateway talk defaults and refresh icon assets (#22530) Nimrod Gutman 2026-02-21 10:34:20 +02:00
• e93e67bc8e docs: fix thinking section heading link target (#22539) Vincent Koc 2026-02-21 03:33:06 -05:00
• 7c593cd333 docs: finish onboarding/config heading consistency (#22537) Vincent Koc 2026-02-21 03:32:37 -05:00
• 79183852f9 docs: more channel onboarding naming cleanup (#22536) Vincent Koc 2026-02-21 03:31:55 -05:00
• 4c4147fb0a docs: continue onboarding terminology cleanup (#22535) Vincent Koc 2026-02-21 03:31:22 -05:00
• 5eca08dab7 Chore: trim stale TODOs and issue-template language (#22534) Vincent Koc 2026-02-21 03:31:17 -05:00
• 12d75ff7f5 docs: continue channel onboarding/config naming cleanup (#22533) Vincent Koc 2026-02-21 03:30:35 -05:00
• 436f79839b docs: more channel onboarding heading consistency (#22532) Vincent Koc 2026-02-21 03:29:42 -05:00
• 325992b777 docs: small docs sweep consistency updates (#22531) Vincent Koc 2026-02-21 03:29:17 -05:00
• c20d519e05 feat(security): migrate sha1 hashes to sha256 for synthetic ids (#7343) (#22528) Vincent Koc 2026-02-21 03:20:14 -05:00
• 9abab6a2c9 Add explicit ownerDisplaySecret for owner ID hash obfuscation (#22520) Vincent Koc 2026-02-21 03:13:56 -05:00
• fe609c0c77 security(hooks): block prototype-chain traversal in webhook template getByPath (#22213) SleuthCo.AI 2026-02-21 03:01:03 -05:00
• 0bee3f337a MSTeams: dedupe sent-message cache storage (#22514) Takayuki Maeda 2026-02-21 16:57:50 +09:00
• f4a59eb5d8 Chore: harden A2UI bundle dependency resolution (#22507) Vincent Koc 2026-02-21 02:46:31 -05:00
• 187f4ea41f deadcode: remove unused extension dev dependencies (#22495) Vincent Koc 2026-02-21 02:15:43 -05:00