mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 09:39:25 +00:00
3a99779313
Isolate the native hook relay build graph while preserving readonly state lookup, explicit policy decisions, and the lazy authenticated Gateway fallback. Cancel disconnected request waits through the existing approval authority. Keep duplicate callers independently cancellable, retain unbound durable approval deduplication, and detach exact relay-owned entries before callbacks so old cleanup cannot remove a successor. Observe already-started promises when synchronous cancellation wins. Update managed Codex to the official 0.154.0 release and align its version fixtures and current documentation. This improves lifecycle ownership and reduces the relay import closure; it does not cap hook concurrency, prove faster bursts, or establish resolution of the historical constrained-host timeout. Related: https://github.com/openclaw/openclaw/issues/91009 Thanks to @nvtoroy for the constrained-host captures and guarded opt-out evidence in https://github.com/openclaw/openclaw/pull/121668 and https://github.com/openclaw/openclaw/pull/111205. The opt-out proposal remains distinct and unimplemented by this change.
114 lines
3.5 KiB
YAML
114 lines
3.5 KiB
YAML
packages:
|
|
- .
|
|
- ui
|
|
- packages/*
|
|
- extensions/*
|
|
- examples/*
|
|
|
|
minimumReleaseAge: 10080
|
|
minimumReleaseAgeStrict: true
|
|
|
|
# Trusted Codex runtimes are outside the dependency cooldown.
|
|
minimumReleaseAgeExclude:
|
|
# Reviewed Opus WASM stack repair; remove after 2026-09-21.
|
|
- "libopus-wasm@0.4.0"
|
|
# Reviewed proxy DNS/TLS controls; remove after 2026-09-15 10:08 UTC.
|
|
- "@openclaw/proxyline@0.3.12"
|
|
- "@openai/codex"
|
|
- "@openai/codex-*"
|
|
# Reviewed fs-safe copy and archive upgrade; remove after 2026-09-21.
|
|
- "@openclaw/fs-safe@0.10.0"
|
|
- "@openclaw/fs-safe-darwin-arm64@0.10.0"
|
|
- "@openclaw/fs-safe-darwin-x64@0.10.0"
|
|
- "@openclaw/fs-safe-linux-arm64-gnu@0.10.0"
|
|
- "@openclaw/fs-safe-linux-arm64-musl@0.10.0"
|
|
- "@openclaw/fs-safe-linux-x64-gnu@0.10.0"
|
|
- "@openclaw/fs-safe-linux-x64-musl@0.10.0"
|
|
- "@openclaw/fs-safe-win32-x64-msvc@0.10.0"
|
|
# fs-safe archive dependency; remove after 2026-09-16.
|
|
- "jszip@3.10.2"
|
|
# GHSA-prgh-xp8r-p3m5 / GHSA-v53p-9fqp-m79j security fixes; remove after 2026-09-18.
|
|
- "nodemailer@10.0.8"
|
|
|
|
# Isolated installs let pnpm reuse whole-package APFS clones instead of relinking every file.
|
|
nodeLinker: isolated
|
|
# GWTs share node_modules; script commands must not reconcile that shared install.
|
|
verifyDepsBeforeRun: false
|
|
blockExoticSubdeps: true
|
|
|
|
overrides:
|
|
# Memory LanceDB supplies vectors; WhatsApp prepares thumbnails with Rastermill.
|
|
"@lancedb/lancedb>@huggingface/transformers": "-"
|
|
"baileys>sharp": "-"
|
|
"@agentclientprotocol/codex-acp@1.10.0>@openai/codex": 0.154.0
|
|
"@codemirror/commands@6.11.0>@codemirror/view": 6.43.11
|
|
"@anthropic-ai/sdk": 0.124.0
|
|
"@anthropic-ai/vertex-sdk@0.19.7>google-auth-library": 11.0.2
|
|
"@opentelemetry/core": 2.11.0
|
|
"@opentelemetry/propagator-jaeger": 2.11.0
|
|
"@aws-sdk/core": 3.977.9
|
|
"@aws-sdk/credential-provider-node": 3.972.82
|
|
"@aws-sdk/xml-builder": 3.972.40
|
|
"@hono/node-server": 2.1.1
|
|
axios: 1.20.0
|
|
fast-uri: 4.1.4
|
|
follow-redirects: 1.16.0
|
|
defu: 6.1.7
|
|
fast-xml-parser: 5.11.1
|
|
request: "npm:@cypress/request@4.0.1"
|
|
request-promise: "npm:@cypress/request-promise@5.0.0"
|
|
basic-ftp: 6.2.1
|
|
brace-expansion: 5.0.9
|
|
file-type: 22.0.2
|
|
form-data: 4.0.6
|
|
"werift-ice@0.2.2>ip": "npm:neoip@3.1.0"
|
|
ip-address: 10.7.0
|
|
"mailauth@5.0.3>nodemailer": 10.0.8
|
|
# Mailauth pins vulnerable Undici; remove when its direct dependency is fixed.
|
|
"mailauth@5.0.3>undici": 8.10.2
|
|
"mailparser@3.9.20>nodemailer": 10.0.8
|
|
minimatch: 10.2.6
|
|
path-to-regexp: 8.4.2
|
|
qs: 6.16.0
|
|
node-domexception: "npm:@nolyfill/domexception@1.0.28"
|
|
typebox: 1.3.27
|
|
tar: 7.5.22
|
|
tough-cookie: 6.0.2
|
|
"tsdown>rolldown-plugin-dts": 0.28.5
|
|
"zca-js@2.1.2>tough-cookie": 6.0.2
|
|
yauzl: 3.4.0
|
|
protobufjs: 8.8.0
|
|
uuid: 14.0.2
|
|
|
|
allowBuilds:
|
|
"@google/genai": true
|
|
"@lydell/node-pty": true
|
|
"@matrix-org/matrix-sdk-crypto-nodejs": true
|
|
"@tloncorp/api": true
|
|
"@tloncorp/tlon-skill": true
|
|
baileys: true
|
|
authenticate-pam: true
|
|
"@discordjs/opus": false
|
|
esbuild: true
|
|
koffi: false
|
|
protobufjs: true
|
|
tree-sitter-bash: false
|
|
openclaw: true
|
|
"@openclaw/proxyline": true
|
|
clawpdf: true
|
|
"@openclaw/crabline": true
|
|
rastermill: true
|
|
node-pty: true
|
|
|
|
# The transient npm lock generator also needs the peer marked optional.
|
|
packageExtensions:
|
|
baileys:
|
|
peerDependenciesMeta:
|
|
sharp:
|
|
optional: true
|
|
|
|
patchedDependencies:
|
|
"@awesome.me/webawesome@3.12.0": patches/@awesome.me__webawesome@3.12.0.patch
|
|
"matrix-js-sdk@42.3.0": patches/matrix-js-sdk@42.3.0.patch
|
|
"@novnc/novnc@1.7.0": patches/@novnc__novnc@1.7.0.patch
|
|
vitest@5.0.0: patches/vitest@5.0.0.patch
|