openclaw/.github
Jesse Merhi d5b0083300
fix: proxy direct APNs HTTP2 sessions (#74905)
Summary:
- This PR routes direct APNs HTTP/2 sends through an APNs allowlisted managed-proxy CONNECT wrapper, adds APNs proxy validation/docs/guardrails, and expands regression and live-test coverage.
- Reproducibility: yes. source-reproducible: current main `sendApnsRequest()` still uses raw `http2.connect(au ... nly covers HTTP/global-agent/Undici hooks. I did not run a live APNs reproduction in this read-only review.

Automerge notes:
- PR branch already contained follow-up commit before automerge: test: guard raw HTTP2 APNs connections
- PR branch already contained follow-up commit before automerge: test: guard raw HTTP2 with OpenGrep
- PR branch already contained follow-up commit before automerge: lint: ban raw HTTP2 imports
- PR branch already contained follow-up commit before automerge: fix: use managed proxy state for APNs
- PR branch already contained follow-up commit before automerge: test: exercise APNs active proxy state
- PR branch already contained follow-up commit before automerge: fix: reject conflicting managed proxy activation

Validation:
- ClawSweeper review passed for head dab7c86a75.
- Required merge gates passed before the squash merge.

Prepared head SHA: dab7c86a75
Review: https://github.com/openclaw/openclaw/pull/74905#issuecomment-4350181159

Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-05-04 11:04:17 +00:00
..
actions ci: fix release-path docker rerun commands 2026-05-02 13:27:03 +01:00
codeql refactor: simplify plugin dependency handling 2026-05-01 21:32:22 +01:00
codex/prompts ci: throttle docs agent workflow 2026-04-24 00:27:01 +01:00
images/live-media-runner ci: preinstall ffmpeg for live media checks 2026-04-29 03:48:33 +01:00
instructions perf: speed local checks and warm builds 2026-04-20 15:08:41 +01:00
ISSUE_TEMPLATE docs: add beta blocker contributor guidance (#55199) 2026-03-26 09:31:59 -05:00
workflows fix: proxy direct APNs HTTP2 sessions (#74905) 2026-05-04 11:04:17 +00:00
actionlint.yaml ci: right-size codeql quality runners 2026-04-28 19:26:45 -07:00
CODEOWNERS chore: update security codeowners team 2026-04-29 15:57:17 -07:00
dependabot.yml chore: move swabble into apps 2026-05-03 13:10:25 +01:00
labeler.yml chore: reduce root cleanup files 2026-05-03 14:38:13 +01:00
pull_request_template.md docs: trim PR template root-cause boilerplate 2026-04-03 18:08:55 -05:00
zizmor.yml chore: reduce root cleanup files 2026-05-03 14:38:13 +01:00