234df15a6d
chore: refresh dependencies after seven-day cooldown ( #128414 )
...
* build(deps): refresh dependencies after cooldown
Apply dependency, toolchain, action, image, and exact tool updates released by the inclusive 2026-08-16 seven-day cutoff. Adapt owner boundaries for the resulting CUA, logging, Teams, Markdown, native, and test-harness contract changes while retaining versions blocked by upstream compatibility constraints.
* fix(ui): align markdown renderer env typing
* fix(deps): align postcss and mistral peer contracts
* fix(deps): repair refreshed dependency contracts
* fix(deps): retain tslog startup budget
* fix(ci): verify Android tools with SHA-256
* fix(ci): fence Android SDK cache version
2026-08-24 03:01:54 -07:00
a917c99e92
fix(runtime): classify Node releases consistently across install and launch ( #124812 )
...
* fix(runtime): align Node release version guards
Amp-Thread-ID: https://ampcode.com/threads/T-01a00ae0-190d-718b-8a76-b75f3e8d1fae
* test(runtime): include Node version helper in source fixture
* fix(install): align Node release checks across boundaries
Amp-Thread-ID: https://ampcode.com/threads/T-01a00ae0-190d-718b-8a76-b75f3e8d1fae
* fix: keep node version guard legacy-compatible
Amp-Thread-ID: https://ampcode.com/threads/T-01a00ae0-190d-718b-8a76-b75f3e8d1fae
* test(runtime): exercise legacy launcher preflight
* fix(installer): validate installed Node release versions
Amp-Thread-ID: https://ampcode.com/threads/T-01a00ae0-190d-718b-8a76-b75f3e8d1fae
* fix(installer): compare Node version parts numerically
Amp-Thread-ID: https://ampcode.com/threads/T-01a00ae0-190d-718b-8a76-b75f3e8d1fae
* test(installer): cover 17-digit Node major
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-17 00:42:23 -07:00
c70aee247e
refactor(scripts): migrate JavaScript tools to TypeScript ( #121005 )
...
* refactor(scripts): migrate JavaScript tools to TypeScript
* fix(ci): keep changed-scope preflight zero-install
* fix(ci): preserve zero-install script owners
* fix(ci): complete script migration follow-through
* fix(release): keep stable closeout zero-install
* fix(scripts): preserve standalone execution boundaries
* fix(scripts): repair standalone loader boundaries
* fix(scripts): normalize gateway observation ids
* fix(scripts): keep Docker packager standalone
* test(scripts): preserve rebase cleanup helpers
* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
d5a3740707
fix(package): prevent installs from deleting required runtime modules ( #113821 )
...
* fix(package): preserve imported runtime chunks after install
* fix(package): isolate public build from private QA
* test(package): prove installed postinstall dependency graph
2026-07-25 14:05:41 -07:00
acd92f6a3d
chore(deps): refresh repository dependencies ( #112453 )
...
* build(deps): update QA broker dependency
* build(deps): refresh repository dependencies
* build(deps): reconcile rebased shrinkwraps
* test(plugins): remove stale loader test state
* test(deps): stabilize updated dependency coverage
* fix(swift): use caller-isolated TaskLocal overload
* build(deps): regenerate rebased shrinkwraps
* test(msteams): preserve DNS validation in fetch helper
* fix(deps): avoid vulnerable optional image stack
* test(deps): validate generated LRU override
* refactor(ui): extract chat resizable divider
* test(ui): update divider ownership path
* fix(matrix): retain restart-compatible SDK
* style(cron): format update test
2026-07-23 16:17:13 +00:00
d88767e819
fix(docker): refresh Node base image digests ( #84988 )
...
Refresh pinned node:24-bookworm and node:24-bookworm-slim manifest-list digests across the root, smoke, and e2e Dockerfiles. Update digest pin assertions to cover the plugin-binding e2e Dockerfile.
Verified with live Docker digest inspection, targeted Dockerfile tests, root base-runtime build, install-sh smoke build, and plugin-binding e2e build.
Thanks @LibraHo.
2026-05-31 18:55:33 +01:00
dbc08f64c1
fix(test): copy cleanup smoke prepare hook
2026-05-24 16:57:26 +02:00
ed8f50f240
refactor: simplify plugin dependency handling
...
Simplify plugin installation and runtime loading around package-manager-owned dependencies, with Jiti reserved for local/TS fallback paths.
Also scans npm plugin install roots so hoisted transitive dependencies are covered by dependency denylist and node_modules symlink checks.
2026-05-01 21:32:22 +01:00
9c19335276
fix: package bundled runtime deps helper
2026-04-29 21:11:59 +01:00
51119f2ef1
fix(release): ship dist import helper
2026-04-29 02:22:56 +01:00
018f2e78ba
build: skip docker apt upgrades
2026-04-26 22:40:44 +01:00
c727388f93
fix(plugins): localize bundled runtime deps to extensions ( #67099 )
...
* fix(plugins): localize bundled runtime deps to extensions
* fix(plugins): move staged runtime deps out of root
* fix(packaging): harden prepack and runtime dep staging
* fix(packaging): preserve optional runtime dep staging
* Update CHANGELOG.md
* fix(packaging): harden runtime staging filesystem writes
* fix(docker): ship preinstall warning in bootstrap layers
* fix(packaging): exclude staged plugin node_modules from npm pack
2026-04-15 12:04:31 +01:00
b76681f28d
test(docker): reduce e2e log noise
2026-04-08 23:27:43 +01:00
7a2abb1c50
fix: stabilize qa lab docker builds
2026-04-07 06:06:29 +01:00
c7cc89904e
fix: unblock claude docker live lanes
2026-04-06 17:31:11 +01:00
0204b8dd28
fix: stabilize live and docker test lanes
2026-04-03 21:43:36 +01:00
5a95d65f1e
fix: restore bundled runtime dependency provisioning ( #58782 ) (thanks @obviyus)
...
* fix: restore bundled runtime dependency provisioning
* fix: ship npm runner in packed installs
* fix: address bundled runtime staging review feedback
* fix: include npm runner in docker build contexts
* fix: restore bundled runtime dependency provisioning (#58782 ) (thanks @obviyus)
* fix: allow caret specs through windows npm cmd (#58782 ) (thanks @obviyus)
2026-04-01 13:03:36 +05:30
d90b627e1b
build: copy bundled plugin postinstall script into cleanup smoke image
2026-03-31 15:17:13 +01:00
cf8891a824
fix: stabilize docker live test lanes
2026-03-22 20:07:27 +00:00
1ffe8fde84
fix: stabilize docker test suite
2026-03-17 03:02:03 +00:00
63802c1112
docker: add apt-get upgrade to all Dockerfiles ( #45384 )
...
* docker: add apt-get upgrade to patch base-image vulnerabilities
Closes #45159
* docker: add DEBIAN_FRONTEND and --no-install-recommends to apt-get upgrade
Prevents debconf hangs during Docker builds and avoids pulling in
recommended packages that silently grow the image.
Co-Authored-By: Claude <noreply@anthropic.com >
* Revert "docker: add DEBIAN_FRONTEND and --no-install-recommends to apt-get upgrade"
This reverts commit 6fc3839cb5noreply@anthropic.com >
---------
Co-authored-by: Claude <noreply@anthropic.com >
2026-03-13 16:23:02 -07:00
deada7edd3
build: default to Node 24 and keep Node 22 compat
2026-03-12 20:07:44 +05:30
6d5e142b93
Docker: improve build cache reuse ( #40351 )
...
* Docker: improve build cache reuse
* Tests: cover Docker build cache layout
* Docker: fix sandbox cache mount continuations
* Docker: document qr-import manifest scope
* Docker: narrow e2e install inputs
* CI: cache Docker builds in workflows
* CI: route sandbox smoke through setup script
* CI: keep sandbox smoke on script path
2026-03-08 17:57:46 -07:00
3f3f66a5f7
Docker: trim runtime image payload ( #40307 )
...
* Docker: shrink runtime image payload
* Docker: add runtime pnpm opt-in
* Docker: collapse helper entrypoint chmod layers
* Docker: restore bundled pnpm runtime
* Update CHANGELOG.md
2026-03-08 16:07:04 -07:00
8ae2d5110f
fix(docker): pin base images to SHA256 digests ( #7734 )
...
* fix(docker): pin base images to SHA256 digests for supply chain security
Pin all 9 Dockerfiles to immutable SHA256 digests to prevent supply chain
attacks where a compromised upstream image could be silently pulled into
production builds.
Also add Docker ecosystem to Dependabot configuration for automated
digest updates.
Images pinned:
- node:22-bookworm@sha256:cd7bcd2e7a1e6f72052feb023c7f6b722205d3fcab7bbcbd2d1bfdab10b1e935
- node:22-bookworm-slim@sha256:3cfe526ec8dd62013b8843e8e5d4877e297b886e5aace4a59fec25dc20736e45
- debian:bookworm-slim@sha256:98f4b71de414932439ac6ac690d7060df1f27161073c5036a7553723881bffbe
- ubuntu:24.04@sha256:cd1dba651b3080c3686ecf4e3c4220f026b521fb76978881737d24f200828b2b
Fixes #7731
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
* test(docker): add digest pinning regression coverage
---------
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-19 12:42:07 -08:00
6b83d82e82
chore: clean up git hooks and actually install them again.
2026-02-03 22:08:24 +09:00
6fb2d3d7d7
feat: remove slop.
2026-02-03 22:04:17 +09:00
f9fae2c439
fix: stabilize docker e2e flows
2026-02-02 13:11:55 +00:00
9a7160786a
refactor: rename to openclaw
2026-01-30 03:16:21 +01:00
6d16a658e5
refactor: rename clawdbot to moltbot with legacy compat
2026-01-27 12:21:02 +00:00
a4e99ecdaf
chore: remove patch references
2026-01-16 22:41:57 +00:00
7551415db9
fix: copy postinstall for cleanup docker
2026-01-11 10:28:07 +00:00
11c8db14a1
feat: add reset/uninstall commands
2026-01-11 10:23:52 +00:00
Peter Steinberger