736 commits

Author	SHA1	Message	Date
Peter Steinberger	bae211f72a	test: require parallels agent responses	2026-05-01 14:22:07 +01:00
Vincent Koc	49b1770b8e	test(docker): install procps for plugin watchdogs	2026-05-01 06:12:32 -07:00
Peter Steinberger	f85bd0f5a9	test: retry Windows Parallels agent turn	2026-05-01 13:19:37 +01:00
Peter Steinberger	7719dd8804	test: use built-in OpenAI provider in Windows smoke	2026-05-01 12:28:23 +01:00
Peter Steinberger	1c9b4d871c	test: stabilize Parallels update smokes	2026-05-01 12:05:24 +01:00
Peter Steinberger	39ab11425f	test: clear Windows Parallels smoke sessions	2026-05-01 11:40:32 +01:00
Vincent Koc	15adc741ff	test(package): expand upgrade survivor baselines	2026-05-01 03:18:31 -07:00
Peter Steinberger	d3bb5ce9e9	test: write Windows Parallels provider timeout directly	2026-05-01 11:17:52 +01:00
Peter Steinberger	018f77cdc2	test: cover legacy runtime deps update recovery (#75288)	2026-05-01 11:15:21 +01:00
Mark Goldenstein	1e6bdf3a55	fix runtime deps update from legacy symlinks	2026-05-01 11:15:21 +01:00
Peter Steinberger	9a051d2f9b	test: preseed dev channel in Parallels update	2026-05-01 11:03:16 +01:00
Peter Steinberger	ca620eaf35	test: extend Windows Parallels OpenAI timeout	2026-05-01 10:56:07 +01:00
Peter Steinberger	e8afaf512e	test: use release OpenAI model in Parallels	2026-05-01 10:40:03 +01:00
Peter Steinberger	8abf2977f4	test: minimize Parallels smoke agent turns	2026-05-01 10:17:54 +01:00
Peter Steinberger	f98ba66af6	test: wait for apt locks in Parallels Linux	2026-05-01 09:55:42 +01:00
Peter Steinberger	9e01d19db3	test: disable Parallels smoke idle watchdog	2026-05-01 09:51:47 +01:00
Peter Steinberger	38e03d3af3	test: extend Parallels model smoke timeout	2026-05-01 09:46:23 +01:00
Ayaan Zaidi	86a563e899	test(rtt): use black-box telegram harness	2026-05-01 14:02:54 +05:30
Peter Steinberger	e131eaecb5	fix: force package update restart handoff	2026-05-01 09:25:33 +01:00
Vincent Koc	c48c3ecbc7	fix(e2e): isolate upgrade survivor matrix artifacts	2026-05-01 01:18:12 -07:00
Vincent Koc	dffc295a74	test(e2e): add upgrade survivor scenario probes	2026-05-01 01:18:11 -07:00
Vincent Koc	2500b5d4ec	test(e2e): expand published upgrade survivor baselines	2026-05-01 01:18:11 -07:00
Peter Steinberger	7d7b610a24	fix: handle bin-only runtime deps	2026-05-01 09:07:32 +01:00
Peter Steinberger	250376f885	fix: simplify bundled runtime dependency repair (#75183) ... Summary: - Merged fix: simplify bundled runtime dependency repair after ClawSweeper review. ClawSweeper fixups: - Included follow-up commit: fix: verify cached bundled runtime roots - Included follow-up commit: refactor: simplify plugin runtime startup paths - Included follow-up commit: refactor: trim plugin startup policy helpers - Included follow-up commit: refactor: trust package manager runtime deps materialization - Included follow-up commit: fix: narrow channel runtime deps skip policy - Included follow-up commit: refactor: defer startup plugin runtime deps - Ran the ClawSweeper repair loop before final review. Validation: - ClawSweeper review passed for head 04dc566534. - Required merge gates passed before the squash merge. Prepared head SHA: 04dc566534 Review: https://github.com/openclaw/openclaw/pull/75183#issuecomment-4358383786 Co-authored-by: Peter Steinberger <steipete@gmail.com> Co-authored-by: Shakker <shakkerdroid@gmail.com> Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-05-01 07:49:02 +00:00
Peter Steinberger	d0dac324c6	test: align lint suppression inventory	2026-05-01 08:23:26 +01:00
Ayaan Zaidi	e8810c04a4	feat(rtt): add published package measurement harness	2026-05-01 11:20:11 +05:30
joshavant	8093ae6029	test: validate published upgrade survivor baseline	2026-04-30 22:17:33 -05:00
Josh Avant	ce833acbdb	test: strengthen published upgrade survivor lane (#75361) ... * test: integrate upgrade survivor baseline controls * test: gate published upgrade survivor path * test: preserve upgrade survivor fixture contract * test: keep upgrade survivor temp state off overlay	2026-04-30 21:50:36 -05:00
Peter Steinberger	6cc7432cd1	perf(test): split gateway server control-plane shard	2026-05-01 03:37:25 +01:00
Peter Steinberger	206b5f78a2	ci: tighten full release validation	2026-05-01 03:19:49 +01:00
Peter Steinberger	6bc3458222	perf(test): keep commitment runtime tests focused	2026-05-01 03:12:55 +01:00
Vignesh	b277ae3f4c	[codex] Fix commitments safety and coverage (#75302) ... * fix commitments safety and coverage * Repair commitments safety PR review blockers * fix(clawsweeper): address review for automerge-openclaw-openclaw-75302 (1) * Repair commitments safety PR review blocker --------- Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-05-01 01:14:07 +00:00
clawsweeper[bot]	e47a7448e9	fix(ci): GitHub App active-PR-limit exemption regression (#75311) ... Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>	2026-04-30 17:10:20 -07:00
Peter Steinberger	1ad50a36ac	chore(release): forward-port 2026.4.29 fixes and bump 2026.4.30	2026-05-01 01:06:13 +01:00
Peter Steinberger	c0058fda2f	test: add published upgrade survivor lane (#75221) ... * test: add published upgrade survivor lane * test: keep published upgrade exit chunk	2026-04-30 23:39:50 +00:00
Shadow	ef799fd57a	ci: exclude app PRs from active limit	2026-04-30 18:34:41 -05:00
Peter Steinberger	7beebc9afc	test: add upgrade survivor package lane	2026-04-30 19:06:33 +01:00
Vincent Koc	9cb71f7672	chore(barnacle): add false positive close label (#75014)	2026-04-30 02:55:45 -07:00
Vincent Koc	092321dc9e	fix(github): skip maintainer-owned Barnacle targets	2026-04-30 01:10:52 -07:00
clawsweeper[bot]	d55fafd130	fix(ci): disable install smoke Docker build cache ... Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>	2026-04-29 23:16:10 -07:00
clawsweeper[bot]	fa1b8a25b8	test(ci): guard install smoke docker cache removal ... Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>	2026-04-29 22:06:02 -07:00
clawsweeper[bot]	a6af23a1de	fix(test): keep kitchen-sink conformance diagnostics clean ... * fix: test-harness regression risk * fix: keep kitchen-sink conformance diagnostics clean --------- Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com> Co-authored-by: clawsweeper-repair <clawsweeper-repair@users.noreply.github.com>	2026-04-29 21:53:15 -07:00
Peter Steinberger	d363565375	fix: harden Windows Parallels update smoke	2026-04-30 05:22:04 +01:00
Peter Steinberger	5f13af6b68	fix: warn before npm prefix redirection (#73890) (thanks @Sayeem3051)	2026-04-30 04:49:03 +01:00
Peter Steinberger	6331fec05e	test(scripts): align changed sdk routing expectation	2026-04-30 02:06:47 +01:00
Fred blum	9b1bde2561	fix(voice-call): close webhook in-flight limiter fail-open on empty remote address (#74453) ... * fix(voice-call): close in-flight limiter fail-open on empty remote address The webhook in-flight limiter (createWebhookInFlightLimiter in src/plugin-sdk/webhook-request-guards.ts) returns true unconditionally when tryAcquire is called with an empty key — that is its by-contract fail-open path used to mean 'caller is opting out of the limiter'. The voice-call webhook handler reached that path silently: it computed 'req.socket.remoteAddress ?? ""' and passed the empty string straight into tryAcquire. Whenever req.socket.remoteAddress was absent (closed socket, edge proxy quirk), the limiter became a no-op and the request proceeded directly to readBody without any concurrency cap. Fix: when remoteAddress is missing, log a warning and fall back to a constant non-empty key ('__voice_call_no_remote__') so all such requests share one in-flight bucket instead of bypassing the limiter entirely. The bucket size stays maxInFlightPerKey (default 8), which is the right defense-in-depth posture against slow-body attacks arriving with stripped IP info. Scoped to voice-call only. Other consumers of the SDK helper (bluebubbles via openclaw/plugin-sdk/webhook-ingress) are not changed to avoid drive-by edits to plugins this PR does not own. The shared SDK contract (empty key = bypass) is left as-is and documented implicitly by the fix's comment block. The existing 8-concurrent test in webhook.test.ts continues to assert the limiter engages on the happy path; no new test added since the private handleRequest path is not unit-test exposed and the change is two-line auditable from the diff alone. * test(voice-call): cover missing webhook remote address limiter * test: align changed package sdk routing --------- Co-authored-by: Peter Steinberger <steipete@gmail.com>	2026-04-30 01:02:14 +00:00
Peter Steinberger	c397486648	fix(test): configure kitchen sink before enable	2026-04-30 01:35:13 +01:00
Peter Steinberger	6acd588bdd	test(ci): update changed gate expectations	2026-04-29 23:49:48 +01:00
Peter Steinberger	b552e31563	test: update install smoke workflow contract	2026-04-29 22:31:17 +01:00
clawsweeper[bot]	cdb424a642	fix: Found one regression in the runtime dependency staging cache. The (#74517) ... Co-authored-by: openclaw-clawsweeper[bot] <280122609+openclaw-clawsweeper[bot]@users.noreply.github.com>	2026-04-29 14:09:31 -07:00