Peter Steinberger
14b6eea6e3
feat(sandbox): block container namespace joins by default
2026-02-24 23:20:34 +00:00
Peter Steinberger
ccbeb332e0
fix: harden routing/session isolation for followups and heartbeat
2026-02-24 23:20:27 +00:00
Peter Steinberger
7655c0cb3a
docs(changelog): add synology-chat allowlist fail-closed note
2026-02-24 23:18:18 +00:00
Peter Steinberger
0ee30361b8
fix(synology-chat): fail closed empty allowlist
2026-02-24 23:18:17 +00:00
Peter Steinberger
270ab03e37
fix: enforce local media root checks for attachment hydration
2026-02-24 23:17:48 +00:00
Peter Steinberger
b67e600bff
fix(security): restrict default safe-bin trusted dirs
2026-02-24 23:13:37 +00:00
Peter Steinberger
2d159e5e87
docs(security): document openclaw temp-folder boundary
2026-02-24 23:11:19 +00:00
Peter Steinberger
d3da67c7a9
fix(security): lock sandbox tmp media paths to openclaw roots
2026-02-24 23:10:19 +00:00
Peter Steinberger
bf8ca07deb
fix(config): soften antigravity removal fallout ( #25538 )
...
Land #25538 by @chilu18 to keep legacy google-antigravity-auth config entries non-fatal after removal (see #25862 ).
Co-authored-by: chilu18 <chilu.machona@icloud.com >
2026-02-24 23:02:45 +00:00
Shakker
039ae0b77c
chore: refresh lockfile after plugin devDependency cleanup
2026-02-24 22:50:47 +00:00
Shakker
955cc9029f
chore: sync plugin versions to 2026.2.24
2026-02-24 22:45:46 +00:00
Peter Steinberger
f4e6f87303
refactor(ios): drop legacy talk payload and keychain fallbacks
2026-02-24 22:39:37 +00:00
Shakker
853f75592f
changelog: include #25847 in chat image safety entry ( #25847 ) (thanks @shakkernerd)
2026-02-24 22:28:58 +00:00
Shakker
30cb849b10
test(ui): reject base64 SVG data URLs
2026-02-24 22:28:58 +00:00
Shakker
e7298b844f
changelog: credit both chat-image fix contributors
2026-02-24 22:28:58 +00:00
Shakker
e9750104b2
ui: block svg data image opens and harden tests
2026-02-24 22:28:58 +00:00
Peter Steinberger
9ef0fc2ff8
fix(sandbox): block @-prefixed workspace path bypass
2026-02-24 17:23:14 +00:00
Ayaan Zaidi
f154926cc0
fix: land telegram empty-html fallback hardening ( #25096 ) (thanks @Glucksberg)
2026-02-24 22:34:21 +05:30
Ayaan Zaidi
6e31bca198
fix(telegram): fail loud on empty text fallback
2026-02-24 22:34:21 +05:30
Glucksberg
566a8e7137
chore(telegram): suppress handled empty-text retry logs
2026-02-24 22:34:21 +05:30
Glucksberg
51b3e23680
fix(telegram): fallback to plain text when threaded markdown renders empty
...
Minimal fix path for Telegram empty-text failures in threaded replies.
- fallback to plain text when formatted htmlText is empty
- retry plain text on parse/empty-text API errors
- add focused regression test for threaded mode case
Related: #25091
Supersedes alternative fix path in #17629 if maintainers prefer minimal scope.
2026-02-24 22:34:21 +05:30
Ayaan Zaidi
00de3ca833
fix: widen external link rel token set type
2026-02-24 22:15:42 +05:30
Ayaan Zaidi
8892a1cd45
refactor(android-ui): unify gateway config resolution paths
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
7a74cf34ba
fix(android-security): remove token-derived logging from prefs
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
8b24830e07
fix(android-gateway): avoid token clear on transient connect failure
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
e11e329238
refactor(android-chat): move thread selector above composer
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
75f145ebcc
docs(android): document alpha rebuild status and feature checklist
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
baf98a87f6
refactor(android-settings): remove gateway controls duplicated in connect
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
bb27884474
feat(android-tabs): add coming-soon voice and screen tabs
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
94f426b29e
fix(android-nav): hide tab bar while keyboard is open
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
577c554150
style(android-chat): redesign composer controls and actions
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
81ff074a51
style(android-chat): align bubbles and markdown with RN
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
b658000bf7
style(android-chat): refine thread shell and empty states
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
02e3fbef77
style(android): align settings screen with RN visual system
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
cf031d6ad4
chore(android): remove unused legacy ui components
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
439d8e609e
fix(android): use native client id for operator session
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
14f5217e22
fix(android): retry with shared token after device-token failure
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
4b188dcf97
fix(android): persist gateway auth state across onboarding
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
f853622eca
feat(android): switch post-onboarding app to five-tab shell
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
c015382a77
feat(android): add connect tab screen with setup and manual modes
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
757a4dc9fa
docs(android): generalize style guide from onboarding baseline
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
5d88e77420
docs(android): add native UI style guide
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
d6bbe93d4c
feat(android): add settings action to rerun onboarding
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
b9cc2599f1
feat(android): add native four-step onboarding flow
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
3e2e010952
feat(android): add onboarding and gateway auth state plumbing
2026-02-24 22:13:49 +05:30
Ayaan Zaidi
36c352453f
build(android): bump AGP and update gradle defaults
2026-02-24 22:13:49 +05:30
Peter Steinberger
e806b34779
chore: remove changelog add helper script
2026-02-24 15:33:09 +00:00
Peter Steinberger
0f0a680d3d
fix(exec): block shell-wrapper positional argv approval smuggling
2026-02-24 15:17:03 +00:00
Peter Steinberger
80daaeba38
fix(ios): split watch notify normalization helpers
...
Co-authored-by: Mariano Belinky <mbelinky@gmail.com >
2026-02-24 15:16:11 +00:00
Mariano Belinky
4ec0af00fe
Agents: fix embedded auth-profile failure helper typing
2026-02-24 15:16:11 +00:00
