Skip to content

Commit 4a8738a

Browse files
BSG2000BSG2000
authored
Merge branch 'main' into fix-azure-openai-prompt-cache-key
2 parents f7360ca + be815ae commit 4a8738a

1,206 files changed

Lines changed: 68519 additions & 52193 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.agents/skills/release-openclaw-maintainer/SKILL.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1057,7 +1057,9 @@ node --import tsx scripts/openclaw-npm-postpublish-verify.ts <published-version>
10571057
`latest` only when you intentionally want direct stable publish), keep it
10581058
the same as the preflight run, and pass the successful npm
10591059
`preflight_run_id` plus the successful `full_release_validation_run_id` and
1060-
its exact `full_release_validation_run_attempt`.
1060+
its exact `full_release_validation_run_attempt`. Preserve the immutable evidence pair as
1061+
`full_release_validation_run_id=<saved-run-id>` and
1062+
`full_release_validation_run_attempt=<saved-attempt>`.
10611063
For stable publish, also pass the exact non-prerelease
10621064
`openclaw/openclaw-windows-node` tag as `windows_node_tag` and its
10631065
candidate-approved installer digest map as `windows_node_installer_digests`.

‎.github/dependabot.yml‎

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,9 +65,25 @@ updates:
6565
- patch
6666
open-pull-requests-limit: 5
6767

68-
# Swift Package Manager - shared MoltbotKit
68+
# Swift Package Manager - shared OpenClawKit
6969
- package-ecosystem: swift
70-
directory: /apps/shared/MoltbotKit
70+
directory: /apps/shared/OpenClawKit
71+
schedule:
72+
interval: daily
73+
cooldown:
74+
default-days: 2
75+
groups:
76+
swift-deps:
77+
patterns:
78+
- "*"
79+
update-types:
80+
- minor
81+
- patch
82+
open-pull-requests-limit: 5
83+
84+
# Swift Package Manager - isolated MLX TTS helper
85+
- package-ecosystem: swift
86+
directory: /apps/macos-mlx-tts
7187
schedule:
7288
interval: daily
7389
cooldown:

‎.github/workflows/android-release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -350,7 +350,7 @@ jobs:
350350
fi
351351
352352
- name: Attest Android APK provenance
353-
uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
353+
uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
354354
with:
355355
subject-path: dist/OpenClaw-Android.apk
356356

‎.github/workflows/ci.yml‎

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1674,7 +1674,7 @@ jobs:
16741674

16751675
- name: Set up Blacksmith Docker layer cache
16761676
if: ${{ matrix.docker_cache == true && github.event_name != 'workflow_dispatch' && github.repository == 'openclaw/openclaw' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'openclaw/openclaw') }}
1677-
uses: useblacksmith/setup-docker-builder@ab5c1da94f53f5cd75c1038092aa276dddfccbba # v1
1677+
uses: useblacksmith/setup-docker-builder@6ff44f8e5255f9d8aa31ef22f7e57a2d926b7da0 # v1
16781678
with:
16791679
max-cache-size-mb: 800000
16801680

@@ -3130,7 +3130,7 @@ jobs:
31303130
needs: [preflight]
31313131
if: needs.preflight.outputs.run_ios_build == 'true'
31323132
runs-on: ${{ (github.event_name == 'workflow_dispatch' || github.run_attempt > 1) && 'macos-26' || (github.repository == 'openclaw/openclaw' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'openclaw/openclaw') && 'blacksmith-12vcpu-macos-26' || 'macos-26') }}
3133-
timeout-minutes: 45
3133+
timeout-minutes: 75
31343134
env:
31353135
HISTORICAL_TARGET: ${{ needs.preflight.outputs.compatibility_target }}
31363136
steps:
@@ -3227,6 +3227,21 @@ jobs:
32273227
- name: Build iOS app
32283228
run: pnpm ios:build
32293229

3230+
- name: Capture iOS release screenshots
3231+
if: ${{ github.event_name == 'workflow_dispatch' && env.HISTORICAL_TARGET != 'true' }}
3232+
run: pnpm ios:screenshots
3233+
3234+
- name: Upload iOS release screenshot evidence
3235+
if: ${{ always() && github.event_name == 'workflow_dispatch' && env.HISTORICAL_TARGET != 'true' }}
3236+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
3237+
with:
3238+
name: ios-release-screenshots-${{ needs.preflight.outputs.checkout_revision }}
3239+
path: |
3240+
apps/ios/fastlane/screenshots/en-US/*.png
3241+
apps/ios/build/SnapshotTestResults/*.xcresult
3242+
if-no-files-found: error
3243+
retention-days: 14
3244+
32303245
android:
32313246
permissions:
32323247
contents: read

‎.github/workflows/clawsweeper-dispatch.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
- name: Create ClawSweeper dispatch token
7474
id: token
7575
if: ${{ env.HAS_CLAWSWEEPER_APP_PRIVATE_KEY == 'true' }}
76-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
76+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
7777
with:
7878
client-id: ${{ env.CLAWSWEEPER_APP_CLIENT_ID }}
7979
private-key: ${{ secrets.CLAWSWEEPER_APP_PRIVATE_KEY }}
@@ -102,7 +102,7 @@ jobs:
102102
steps.comment_filter.outputs.is_command == 'true' &&
103103
env.HAS_CLAWSWEEPER_APP_PRIVATE_KEY == 'true'
104104
}}
105-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
105+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
106106
with:
107107
client-id: ${{ env.CLAWSWEEPER_APP_CLIENT_ID }}
108108
private-key: ${{ secrets.CLAWSWEEPER_APP_PRIVATE_KEY }}

‎.github/workflows/codeql-android-critical-security.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,13 +29,13 @@ jobs:
2929
submodules: false
3030

3131
- name: Setup Java
32-
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5
32+
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5
3333
with:
3434
distribution: temurin
3535
java-version: "21"
3636

3737
- name: Initialize CodeQL
38-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
38+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
3939
with:
4040
languages: java-kotlin
4141
build-mode: manual
@@ -46,6 +46,6 @@ jobs:
4646
run: ./gradlew --no-daemon :app:assemblePlayDebug
4747

4848
- name: Analyze
49-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
49+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
5050
with:
5151
category: "/codeql-critical-security/android"

‎.github/workflows/codeql-critical-quality.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -342,13 +342,13 @@ jobs:
342342
submodules: false
343343

344344
- name: Initialize CodeQL
345-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
345+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
346346
with:
347347
languages: javascript-typescript
348348
config-file: ./.github/codeql/codeql-core-auth-secrets-critical-quality.yml
349349

350350
- name: Analyze
351-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
351+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
352352
with:
353353
category: "/codeql-critical-quality/core-auth-secrets"
354354

@@ -365,13 +365,13 @@ jobs:
365365
submodules: false
366366

367367
- name: Initialize CodeQL
368-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
368+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
369369
with:
370370
languages: javascript-typescript
371371
config-file: ./.github/codeql/codeql-config-boundary-critical-quality.yml
372372

373373
- name: Analyze
374-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
374+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
375375
with:
376376
category: "/codeql-critical-quality/config-boundary"
377377

@@ -388,13 +388,13 @@ jobs:
388388
submodules: false
389389

390390
- name: Initialize CodeQL
391-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
391+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
392392
with:
393393
languages: javascript-typescript
394394
config-file: ./.github/codeql/codeql-gateway-runtime-boundary-critical-quality.yml
395395

396396
- name: Analyze
397-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
397+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
398398
with:
399399
category: "/codeql-critical-quality/gateway-runtime-boundary"
400400

@@ -411,13 +411,13 @@ jobs:
411411
submodules: false
412412

413413
- name: Initialize CodeQL
414-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
414+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
415415
with:
416416
languages: javascript-typescript
417417
config-file: ./.github/codeql/codeql-channel-runtime-boundary-critical-quality.yml
418418

419419
- name: Analyze
420-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
420+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
421421
with:
422422
category: "/codeql-critical-quality/channel-runtime-boundary"
423423

@@ -490,15 +490,15 @@ jobs:
490490
491491
- name: Initialize CodeQL
492492
if: ${{ github.event_name != 'pull_request' || steps.network-diff-scan.outputs.full_codeql == 'true' }}
493-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
493+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
494494
with:
495495
languages: javascript-typescript
496496
config-file: ./.github/codeql/codeql-network-runtime-boundary-critical-quality.yml
497497

498498
- name: Analyze
499499
id: analyze
500500
if: ${{ github.event_name != 'pull_request' || steps.network-diff-scan.outputs.full_codeql == 'true' }}
501-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
501+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
502502
with:
503503
output: sarif-results
504504
category: "/codeql-critical-quality/network-runtime-boundary"
@@ -548,13 +548,13 @@ jobs:
548548
submodules: false
549549

550550
- name: Initialize CodeQL
551-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
551+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
552552
with:
553553
languages: javascript-typescript
554554
config-file: ./.github/codeql/codeql-agent-runtime-boundary-critical-quality.yml
555555

556556
- name: Analyze
557-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
557+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
558558
with:
559559
category: "/codeql-critical-quality/agent-runtime-boundary"
560560

@@ -571,13 +571,13 @@ jobs:
571571
submodules: false
572572

573573
- name: Initialize CodeQL
574-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
574+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
575575
with:
576576
languages: javascript-typescript
577577
config-file: ./.github/codeql/codeql-mcp-process-runtime-boundary-critical-quality.yml
578578

579579
- name: Analyze
580-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
580+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
581581
with:
582582
category: "/codeql-critical-quality/mcp-process-runtime-boundary"
583583

@@ -594,13 +594,13 @@ jobs:
594594
submodules: false
595595

596596
- name: Initialize CodeQL
597-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
597+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
598598
with:
599599
languages: javascript-typescript
600600
config-file: ./.github/codeql/codeql-memory-runtime-boundary-critical-quality.yml
601601

602602
- name: Analyze
603-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
603+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
604604
with:
605605
category: "/codeql-critical-quality/memory-runtime-boundary"
606606

@@ -617,13 +617,13 @@ jobs:
617617
submodules: false
618618

619619
- name: Initialize CodeQL
620-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
620+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
621621
with:
622622
languages: javascript-typescript
623623
config-file: ./.github/codeql/codeql-session-diagnostics-boundary-critical-quality.yml
624624

625625
- name: Analyze
626-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
626+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
627627
with:
628628
category: "/codeql-critical-quality/session-diagnostics-boundary"
629629

@@ -640,13 +640,13 @@ jobs:
640640
submodules: false
641641

642642
- name: Initialize CodeQL
643-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
643+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
644644
with:
645645
languages: javascript-typescript
646646
config-file: ./.github/codeql/codeql-plugin-sdk-reply-runtime-critical-quality.yml
647647

648648
- name: Analyze
649-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
649+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
650650
with:
651651
category: "/codeql-critical-quality/plugin-sdk-reply-runtime"
652652

@@ -663,13 +663,13 @@ jobs:
663663
submodules: false
664664

665665
- name: Initialize CodeQL
666-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
666+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
667667
with:
668668
languages: javascript-typescript
669669
config-file: ./.github/codeql/codeql-provider-runtime-boundary-critical-quality.yml
670670

671671
- name: Analyze
672-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
672+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
673673
with:
674674
category: "/codeql-critical-quality/provider-runtime-boundary"
675675

@@ -685,13 +685,13 @@ jobs:
685685
submodules: false
686686

687687
- name: Initialize CodeQL
688-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
688+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
689689
with:
690690
languages: javascript-typescript
691691
config-file: ./.github/codeql/codeql-ui-control-plane-critical-quality.yml
692692

693693
- name: Analyze
694-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
694+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
695695
with:
696696
category: "/codeql-critical-quality/ui-control-plane"
697697

@@ -707,13 +707,13 @@ jobs:
707707
submodules: false
708708

709709
- name: Initialize CodeQL
710-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
710+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
711711
with:
712712
languages: javascript-typescript
713713
config-file: ./.github/codeql/codeql-web-media-runtime-boundary-critical-quality.yml
714714

715715
- name: Analyze
716-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
716+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
717717
with:
718718
category: "/codeql-critical-quality/web-media-runtime-boundary"
719719

@@ -730,13 +730,13 @@ jobs:
730730
submodules: false
731731

732732
- name: Initialize CodeQL
733-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
733+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
734734
with:
735735
languages: javascript-typescript
736736
config-file: ./.github/codeql/codeql-plugin-boundary-critical-quality.yml
737737

738738
- name: Analyze
739-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
739+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
740740
with:
741741
category: "/codeql-critical-quality/plugin-boundary"
742742

@@ -753,12 +753,12 @@ jobs:
753753
submodules: false
754754

755755
- name: Initialize CodeQL
756-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
756+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
757757
with:
758758
languages: javascript-typescript
759759
config-file: ./.github/codeql/codeql-plugin-sdk-package-contract-critical-quality.yml
760760

761761
- name: Analyze
762-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
762+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
763763
with:
764764
category: "/codeql-critical-quality/plugin-sdk-package-contract"

‎.github/workflows/codeql-macos-critical-security.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
swift --version
3636
3737
- name: Initialize CodeQL
38-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
38+
uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
3939
with:
4040
languages: swift
4141
build-mode: manual
@@ -46,7 +46,7 @@ jobs:
4646

4747
- name: Analyze
4848
id: analyze
49-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
49+
uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
5050
with:
5151
output: sarif-results
5252
upload: failure-only
@@ -83,7 +83,7 @@ jobs:
8383
done
8484
8585
- name: Upload filtered SARIF
86-
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
86+
uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4
8787
with:
8888
sarif_file: sarif-results-filtered
8989
category: "/codeql-critical-security/macos"

0 commit comments

Comments
 (0)