openclaw/src
Vincent Koc 48cbfdfac0
Hardening: require LINE webhook signatures (#44090)
* LINE: require webhook signatures in express handler

* LINE: require webhook signatures in node handler

* LINE: update express signature tests

* LINE: update node signature tests

* Changelog: note LINE webhook hardening

* LINE: validate signatures before parsing webhook bodies

* LINE: reject missing signatures before body reads
2026-03-12 10:50:36 -04:00
..
acp fix(acp): rehydrate restarted main ACP sessions (#43285) 2026-03-12 11:05:09 +08:00
agents Agents: adapt pi-ai oauth and payload hooks 2026-03-12 10:19:14 -04:00
auto-reply fix(telegram): allow fallback models in /model validation (#40105) 2026-03-12 13:55:51 +01:00
browser fix(browser): restore proxy attachment media size cap (#43684) 2026-03-12 01:04:31 -04:00
canvas-host
channels Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871) 2026-03-12 05:04:31 -04:00
cli Merge remote-tracking branch 'origin/vincentkoc-code/fix-terminal-table-width' 2026-03-12 04:56:21 -04:00
commands build: align Node 22 guidance with 22.16 minimum 2026-03-12 20:07:44 +05:30
compat
config Gateway: keep spawned workspace overrides internal (#43801) 2026-03-12 04:20:00 -04:00
context-engine fix: carry observed overflow token counts into compaction (#40357) 2026-03-12 06:58:42 -07:00
cron fix(cron): prevent duplicate proactive delivery on transient retry (#40646) 2026-03-12 03:01:19 -04:00
daemon build: align Node 22 guidance with 22.16 minimum 2026-03-12 20:07:44 +05:30
discord fix(discord): enforce users/roles allowlist in reaction ingress 2026-03-12 03:13:46 +01:00
docs
gateway fix: stop main-session UI replies inheriting channel routes 2026-03-12 15:39:34 +05:30
hooks fix(hooks): use resolveAgentIdFromSessionKey in runBeforeReset (#39875) 2026-03-08 19:07:28 +03:00
i18n
imessage fix(imessage): dedupe reflected self-chat duplicates (#38440) 2026-03-12 02:27:35 -04:00
infra build: raise Node 22 compatibility floor to 22.16 2026-03-12 20:07:44 +05:30
line Hardening: require LINE webhook signatures (#44090) 2026-03-12 10:50:36 -04:00
link-understanding
logging Logging: harden probe suppression for observations (#41338) 2026-03-10 01:40:15 +03:00
markdown
media Memory: add multimodal image and audio indexing (#43460) 2026-03-11 22:28:34 +00:00
media-understanding fix: add gemini 3.1 flash-lite support 2026-03-08 05:12:48 +00:00
memory build: raise Node 22 compatibility floor to 22.16 2026-03-12 20:07:44 +05:30
node-host fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval 2026-03-12 01:34:35 +01:00
pairing refactor(pairing): share allowFrom path resolution 2026-03-08 02:16:03 +00:00
plugin-sdk fix(mattermost): pass mediaLocalRoots through reply delivery (#44021) 2026-03-12 20:13:51 +05:30
plugins fix: isolate plugin discovery env from global state 2026-03-12 02:46:29 +00:00
process refactor: share windows command shim resolution 2026-03-10 22:18:04 +00:00
providers build: update app deps except carbon 2026-03-09 06:09:33 +00:00
routing refactor(routing): centralize inbound last-route policy 2026-03-08 02:16:03 +00:00
scripts
secrets Providers: add Opencode Go support (#42313) 2026-03-11 01:31:06 -04:00
security fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983) 2026-03-10 13:54:23 +08:00
sessions ACP: add optional ingress provenance receipts (#40473) 2026-03-09 04:19:03 +01:00
shared refactor: share sampled entry summary formatting 2026-03-08 00:05:24 +00:00
signal fix(signal): forward all inbound attachments from #39212 (thanks @joeykrug) 2026-03-07 23:35:55 +00:00
slack refactor: compile allowlist matchers 2026-03-11 00:07:47 +00:00
telegram fix(telegram): allow fallback models in /model validation (#40105) 2026-03-12 13:55:51 +01:00
terminal fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520) 2026-03-11 19:53:07 -04:00
test-helpers
test-utils refactor(security): simplify system.run approval model 2026-03-11 01:43:06 +00:00
tts test: align pi-ai oauth mocks 2026-03-11 20:11:51 +00:00
tui fix: prevent duplicate assistant messages in TUI (fixes #35278) (#35364) 2026-03-12 02:59:42 -04:00
types
utils fix(exec): honor shell comments in allow-always analysis 2026-03-07 23:31:25 +00:00
web fix(whatsapp): trim leading whitespace in direct outbound sends (#43539) 2026-03-12 11:32:04 +11:00
whatsapp
wizard fix(cli): handle scheduled gateway restarts consistently 2026-03-12 01:38:39 +00:00
channel-web.ts
docker-build-cache.test.ts Docker: improve build cache reuse (#40351) 2026-03-08 17:57:46 -07:00
docker-image-digests.test.ts fix(ci): pin multi-arch docker base digests 2026-03-08 02:55:15 +00:00
docker-setup.e2e.test.ts Docker: trim runtime image payload (#40307) 2026-03-08 16:07:04 -07:00
dockerfile.test.ts build: default to Node 24 and keep Node 22 compat 2026-03-12 20:07:44 +05:30
entry.ts Exec: mark child command env with OPENCLAW_CLI (#41411) 2026-03-09 19:14:08 -04:00
entry.version-fast-path.test.ts CLI: include commit hash in --version output (#39712) 2026-03-08 19:10:48 +03:00
extensionAPI.ts
globals.ts
index.ts
install-sh-version.test.ts chore: bump version to 2026.3.10 2026-03-11 23:29:53 +00:00
logger.test.ts
logger.ts
logging.ts
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.ts
utils.test.ts Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871) 2026-03-12 05:04:31 -04:00
utils.ts Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871) 2026-03-12 05:04:31 -04:00
version.test.ts
version.ts