mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 09:39:25 +00:00
Upgrade existing Undici dependency families to 8.10.2 and 7.29.1 for GHSA-vp8m-p9jh-q5pm and GHSA-w293-vg96-wgc3. Keep NO_PROXY eligibility aligned with the new dispatcher behavior so bypassed hosts retain local DNS pinning. Refresh exact release-tool lock digests and preserve historical risk acceptance. Approved targeted Mailauth/ClawHub overrides and version-specific cooldown exceptions retain dependency ownership. Verified with 386 focused tests, actual installed HTTP/TLS proof, materializers, full build, changed gates, and independent review. |
||
|---|---|---|
| .. | ||
| package-lock.json | ||
| package.json | ||