openclaw/src
Agustin Rivera 290e5bf219
fix(dotenv): block helper interpreter workspace overrides (#58473)
* fix(dotenv): block helper interpreter workspace overrides

* fix(dotenv): cover trusted helper interpreter envs

* fix(changelog): note dotenv helper override hardening

* fix(changelog): remove dotenv entry from pr

* changelog: note dotenv helper override hardening

---------

Co-authored-by: Jacob Tomlinson <jtomlinson@nvidia.com>
2026-04-02 06:45:13 -07:00
..
acp refactor(tasks): update plugin and acp task-flow consumers 2026-04-02 20:43:03 +09:00
agents fix(providers): unify request policy resolution (#59653) 2026-04-02 21:42:11 +09:00
auto-reply fix(plugin-sdk): narrow groups runtime discord seam (#59623) 2026-04-02 19:51:36 +09:00
bindings
bootstrap
canvas-host Canvas Host: build default status with DOM nodes (#58266) 2026-03-31 10:29:28 +01:00
channels fix(plugin-sdk): narrow discord and matrix core seam imports (#59557) 2026-04-02 17:40:06 +09:00
chat
cli !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
commands !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
compat
config !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
context-engine
cron fix(cron-tool): add typed properties to job/patch schemas (#55043) 2026-04-01 23:41:19 +03:00
daemon
docs
flows !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
gateway fix(gateway): enforce session kill HTTP scopes (#59128) 2026-04-02 05:56:17 -07:00
generated
hooks fix(hooks): reduce registration log noise 2026-03-31 14:59:22 +01:00
i18n
image-generation
infra fix(dotenv): block helper interpreter workspace overrides (#58473) 2026-04-02 06:45:13 -07:00
interactive
link-understanding
logging
markdown
mcp
media fix(whatsapp): add HTML/XML/CSS to MIME map + fallback for unknown media types (#51562) 2026-04-02 00:25:12 -03:00
media-understanding fix(providers): unify request policy resolution (#59653) 2026-04-02 21:42:11 +09:00
node-host fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
pairing fix(pairing): scope pending request caps per account (#58239) 2026-03-31 19:45:45 +09:00
plugin-sdk fix(plugins): preserve activation provenance (#59641) 2026-04-02 20:57:14 +09:00
plugins refactor(tasks): move task-flow ownership under tasks 2026-04-02 21:40:40 +09:00
process test(ci): deflake windows npm exec coverage 2026-03-31 19:28:11 +01:00
routing routing: support wildcard peer bindings (peer.id="*") for multi-agent routing (#58609) 2026-03-31 21:10:18 -04:00
scripts build: bump version to 2026.4.1 2026-03-31 22:53:17 +01:00
secrets fix(secrets): add legacy x_search secret target 2026-04-02 22:24:08 +09:00
security fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
sessions Fix: move bootstrap session grammar into plugin-owned session-key surfaces (#58400) 2026-03-31 19:41:01 -04:00
shared fix: strip antml thinking tags 2026-04-02 14:28:54 +05:30
tasks fix(tasks): reset agent events in executor tests 2026-04-02 22:25:59 +09:00
terminal
test-helpers
test-utils !feat(plugins): add web fetch provider boundary (#59465) 2026-04-02 20:25:19 +09:00
tts fix(plugins): guard runtime facade activation (#59412) 2026-04-02 14:37:12 +09:00
tui
types
utils Matrix: restore ordered progress delivery with explicit streaming modes (#59266) 2026-04-01 19:35:03 -04:00
web-fetch !feat(plugins): add web fetch provider boundary (#59465) 2026-04-02 20:25:19 +09:00
web-search !refactor(xai): move x_search config behind plugin boundary (#59674) 2026-04-02 22:08:59 +09:00
wizard CLI: suppress Codex native search summary when web search is off 2026-04-01 03:30:06 +09:00
channel-web.ts
docker-build-cache.test.ts
docker-image-digests.test.ts
docker-setup.e2e.test.ts
dockerfile.test.ts
entry.respawn.test.ts
entry.respawn.ts
entry.test.ts
entry.ts
entry.version-fast-path.test.ts
extensionAPI.ts
global-state.ts
globals.ts
index.test.ts
index.ts
install-sh-version.test.ts
library.test.ts
library.ts
logger.test.ts
logger.ts
logging.ts
param-key.ts
plugin-activation-boundary.test.ts fix(browser): keep static helper seams cold (#59471) 2026-04-02 17:12:32 +09:00
poll-params.test.ts
poll-params.ts
polls.test.ts
polls.ts
runtime.ts
ui-app-settings.agents-files-refresh.test.ts
utils.test.ts
utils.ts
version.test.ts
version.ts