mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-03 01:29:56 +00:00
5598fec2ea
* fix(models): reuse prepared catalogs when browsing inventory
Inventory callers forced full discovery on every browse while trying to
refresh auth-stale content. Give the prepared catalog owner a distinct stale
refresh intent, preserve explicit forced refresh, and leave ordinary turn
reads on their existing facts. Apply the policy to commands, CLI, and RPC.
Correct the Ollama fixture response contract and await full catalog readiness.
Verify discovered-only models survive callbacks and RPC while discovery is
unavailable, and verify explicit refresh still reaches the provider.
Proof: before the fix, the real Gateway made 8 discovery calls after a 3-call
warmup, and the owner policy regressions failed. Prepared catalog and auth
reload owner tests now pass (43 tests).
(cherry picked from commit 1dfddb6e8fa7f57fcc60c4f01384b679e88ad77a)
(cherry picked from commit 7e9563ccff)
* test(release): align extended-stable validation fixtures
* test(sessions): isolate heartbeat wake cleanup
* fix(deps): update joi for extended stable
* test(gateway): share title-retention disk fixtures across isolated readers (#134642)
* fix(deps): update brace-expansion to 5.0.12
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com>
131 lines
3.8 KiB
YAML
131 lines
3.8 KiB
YAML
packages:
|
|
- .
|
|
- ui
|
|
- packages/*
|
|
- extensions/*
|
|
- examples/*
|
|
|
|
minimumReleaseAge: 10080
|
|
minimumReleaseAgeStrict: true
|
|
|
|
# Trusted Codex runtimes are outside the dependency cooldown.
|
|
minimumReleaseAgeExclude:
|
|
- "@openai/codex"
|
|
- "@openai/codex-*"
|
|
# GHSA-jqcg-44mw-7w3h trust-subnet fix; remove after 2026-09-22 06:13 UTC.
|
|
- "proxy-addr@2.0.8"
|
|
# Bot API 10.3 types replace OpenClaw's temporary rich-message bridge.
|
|
- "@grammyjs/types@5.0.0"
|
|
- "grammy@1.46.0"
|
|
# Exact Sharp security-fix artifacts; normal seven-day cooldown resumes for later versions.
|
|
- "@img/sharp-darwin-arm64@0.35.4"
|
|
- "@img/sharp-darwin-x64@0.35.4"
|
|
- "@img/sharp-freebsd-wasm32@0.35.4"
|
|
- "@img/sharp-libvips-darwin-arm64@1.3.3"
|
|
- "@img/sharp-libvips-darwin-x64@1.3.3"
|
|
- "@img/sharp-libvips-linux-arm64@1.3.3"
|
|
- "@img/sharp-libvips-linux-arm@1.3.3"
|
|
- "@img/sharp-libvips-linux-ppc64@1.3.3"
|
|
- "@img/sharp-libvips-linux-riscv64@1.3.3"
|
|
- "@img/sharp-libvips-linux-s390x@1.3.3"
|
|
- "@img/sharp-libvips-linux-x64@1.3.3"
|
|
- "@img/sharp-libvips-linuxmusl-arm64@1.3.3"
|
|
- "@img/sharp-libvips-linuxmusl-x64@1.3.3"
|
|
- "@img/sharp-linux-arm64@0.35.4"
|
|
- "@img/sharp-linux-arm@0.35.4"
|
|
- "@img/sharp-linux-ppc64@0.35.4"
|
|
- "@img/sharp-linux-riscv64@0.35.4"
|
|
- "@img/sharp-linux-s390x@0.35.4"
|
|
- "@img/sharp-linux-x64@0.35.4"
|
|
- "@img/sharp-linuxmusl-arm64@0.35.4"
|
|
- "@img/sharp-linuxmusl-x64@0.35.4"
|
|
- "@img/sharp-wasm32@0.35.4"
|
|
- "@img/sharp-webcontainers-wasm32@0.35.4"
|
|
- "@img/sharp-win32-arm64@0.35.4"
|
|
- "@img/sharp-win32-ia32@0.35.4"
|
|
- "@img/sharp-win32-x64@0.35.4"
|
|
- "sharp@0.35.4"
|
|
|
|
nodeLinker: hoisted
|
|
# GWTs share node_modules; script commands must not reconcile that shared install.
|
|
verifyDepsBeforeRun: false
|
|
blockExoticSubdeps: true
|
|
|
|
overrides:
|
|
"@agentclientprotocol/codex-acp@1.6.2>@openai/codex": 0.156.1
|
|
"@codemirror/commands@6.11.0>@codemirror/view": 6.43.9
|
|
"@anthropic-ai/sdk": 0.120.0
|
|
"@opentelemetry/core": 2.10.0
|
|
"@opentelemetry/propagator-jaeger": 2.10.0
|
|
"@aws-sdk/core": 3.977.9
|
|
"@aws-sdk/credential-provider-node": 3.972.81
|
|
"@aws-sdk/xml-builder": 3.972.40
|
|
"@hono/node-server": 2.1.1
|
|
axios: 1.20.0
|
|
fast-uri: 4.1.4
|
|
follow-redirects: 1.16.0
|
|
defu: 6.1.7
|
|
fast-xml-parser: 5.11.0
|
|
request: "npm:@cypress/request@4.0.1"
|
|
request-promise: "npm:@cypress/request-promise@5.0.0"
|
|
basic-ftp: 6.2.0
|
|
brace-expansion: 5.0.12
|
|
file-type: 22.0.2
|
|
form-data: 4.0.6
|
|
"werift-ice@0.2.2>ip": "npm:neoip@3.1.0"
|
|
ip-address: 10.5.0
|
|
# Keep the cooled HTML converter security fix while Mailparser is rolled back.
|
|
"mailparser@3.9.15>html-to-text": 10.0.1
|
|
"mailauth@5.0.2>nodemailer": 10.0.8
|
|
"mailauth@5.0.2>joi": 18.2.9
|
|
"mailauth@5.0.2>undici": 8.10.2
|
|
"mailparser@3.9.15>nodemailer": 10.0.8
|
|
minimatch: 10.2.6
|
|
path-to-regexp: 8.4.2
|
|
proxy-addr: 2.0.8
|
|
qs: 6.15.3
|
|
sharp: 0.35.4
|
|
"undici@7.29.0": 7.29.1
|
|
node-domexception: "npm:@nolyfill/domexception@1.0.28"
|
|
typebox: 1.3.17
|
|
tar: 7.5.22
|
|
tough-cookie: 6.0.2
|
|
"tsdown>rolldown-plugin-dts": 0.28.2
|
|
"zca-js@2.1.2>tough-cookie": 5.1.2
|
|
yauzl: 3.4.0
|
|
protobufjs: 8.7.2
|
|
uuid: 14.0.2
|
|
|
|
allowBuilds:
|
|
"@openclaw/fs-safe": true
|
|
"@google/genai": true
|
|
"@lydell/node-pty": true
|
|
"@matrix-org/matrix-sdk-crypto-nodejs": true
|
|
"@tloncorp/api": true
|
|
"@tloncorp/tlon-skill": true
|
|
baileys: true
|
|
authenticate-pam: true
|
|
"@discordjs/opus": false
|
|
esbuild: true
|
|
koffi: false
|
|
onnxruntime-node: false
|
|
protobufjs: true
|
|
sharp: true
|
|
tree-sitter-bash: false
|
|
openclaw: true
|
|
"@openclaw/proxyline": true
|
|
clawpdf: true
|
|
"@openclaw/crabline": true
|
|
rastermill: true
|
|
node-pty: true
|
|
|
|
packageExtensions:
|
|
baileys:
|
|
peerDependenciesMeta:
|
|
sharp:
|
|
optional: true
|
|
|
|
patchedDependencies:
|
|
"@vitest/runner@4.1.11": patches/@vitest__runner@4.1.11.patch
|
|
"vitest@4.1.11": patches/vitest@4.1.11.patch
|
|
"matrix-js-sdk@42.2.0": patches/matrix-js-sdk@42.2.0.patch
|