mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-15 23:24:03 -06:00
Peter Steinberger
b3d5265f58
* fix(docker): harden runtime image dependencies * chore(deps): update container security dependencies * docs(docker): explain image security contents * test(browser): align file-chooser and install tests with #114506 contract * test(browser): restore extension install test isolation * test(browser): add temporary CI diagnostics for pre-registration refusal * test(browser): make install fixture interpreter hermetic The suite passed process.execPath as the native-host interpreter; on GitHub-hosted runners the hostedtoolcache node binary is group/world- writable, which installChromeExtensionBootstrap correctly refuses, so every registration test failed CI-only. The fixture now provides an owned 0700 interpreter; only the launcher-exec test keeps the real node it must spawn. * fix(qa-lab): stop re-polling after a probe consumes the discovery deadline The Matrix health-probe loop re-entered when the probe timeout fired marginally before Date.now() crossed the deadline, starting a doomed extra probe. Flaked on contended CI runners as 'expected 1 fetch, got 2'. A timed-out probe now ends discovery. * test(ui): poll the callout inset invariant in device-scope E2E One-shot boundingBox reads raced the nav-collapse transition and intermittently measured a 20px stale offset on CI.