Fix Docker store seed target packages by sallyom · Pull Request #91547 · openclaw/openclaw

sallyom · 2026-06-09T01:39:17Z

Summary

The Docker runtime-assets store seed now follows the current build target instead of adding every lockfile package. This keeps platform optional packages, such as @zed-industries/codex-acp-*, limited to the architecture Docker is actually building for.

Root Cause

pnpm install was already configured with Docker target architecture filters, but the later offline prune store seed used scripts/list-prod-store-packages.mjs to add every package from pnpm-lock.yaml. That explicitly reintroduced non-target optional packages before pnpm store add, including Darwin/Windows and the wrong Linux architecture ACP packages.

Changes

Filter pnpm list --prod and lockfile snapshot closure through os/cpu/libc selectors for the current process target.
Keep snapshot dependency closure, including target-matching optional dependencies, so the offline prune store still has the packages it needs.
Handle pnpm peer-resolved snapshot keys when walking snapshot dependencies.
Add focused tests for target platform optional dependencies and peer-resolved snapshot closures.

Verification

pnpm lint --threads=8
node scripts/run-vitest.mjs test/scripts/list-prod-store-packages.test.ts
git diff --check
.agents/skills/autoreview/scripts/autoreview --mode local
Local Docker target probe, OPENCLAW_EXTENSIONS=acpx, native linux/arm64: verified the store seed includes @zed-industries/[email protected], excludes Darwin/Windows/Linux x64 ACP packages, and pnpm store add succeeds.
Local Docker target probe, OPENCLAW_EXTENSIONS=acpx, --platform=linux/amd64: verified process.arch is x64, the store seed includes @zed-industries/[email protected], excludes Darwin/Windows/Linux arm64 ACP packages, and pnpm store add succeeds.
Testbox-through-Crabbox full Docker build: provider blacksmith-testbox, id tbx_01ktn3vp481ggkcwhh0wfnt8t6, Actions run https://github.com/openclaw/openclaw/actions/runs/27180308958, command docker build --progress=plain --target runtime-assets --build-arg OPENCLAW_EXTENSIONS=acpx -t openclaw:pr91547-runtime-assets -f Dockerfile ., HEAD ec9f55e742ee428f631c8f6e591c9eaab265ffee, exit 0. The runtime-assets stage completed pnpm list | scripts/list-prod-store-packages.mjs | pnpm store add, offline pnpm prune --prod, plugin dist prune, postinstall, and package dist import checks, then exported image sha256:dcb33fbedf7480f2c7b559468875f53c3f63243ddd3d1b44872d475e4a5d4a00.

Real behavior proof

Behavior addressed: Docker builds with ACPX no longer seed non-target optional platform packages from the pnpm lockfile into the offline production store. The runtime-assets stage now keeps the target Linux architecture package and avoids Darwin, Windows, and wrong-Linux-architecture ACP packages.

Real environment tested: Blacksmith Testbox through Crabbox on Linux amd64 Docker Engine 28.0.4, provider blacksmith-testbox, id tbx_01ktn3vp481ggkcwhh0wfnt8t6, Actions run https://github.com/openclaw/openclaw/actions/runs/27180308958, PR commit ec9f55e742ee428f631c8f6e591c9eaab265ffee.

Exact steps or command run after this patch: docker build --progress=plain --target runtime-assets --build-arg OPENCLAW_EXTENSIONS=acpx -t openclaw:pr91547-runtime-assets -f Dockerfile .

Evidence after fix: The Testbox run exited 0. Docker completed the runtime-assets stage, including pnpm list --prod --depth Infinity --json | node scripts/list-prod-store-packages.mjs | xargs -r pnpm store add, offline pnpm prune --prod, plugin dist prune, postinstall, package dist import checks, and image export.

Observed result after fix: The runtime-assets build succeeded and exported image sha256:dcb33fbedf7480f2c7b559468875f53c3f63243ddd3d1b44872d475e4a5d4a00. The store seed step completed without trying to fetch incompatible ACP platform tarballs.

What was not tested: A full final runtime image smoke was not run here; this proof targeted the failing Docker runtime-assets store/prune path from #91035. Local Docker Desktop full build was attempted before Testbox proof but hit an out-of-memory SIGKILL during pnpm build:docker, before the patched runtime-assets step.

Notes

The temporary openclaw/openclaw:codex/docker-store-seed-targets branch was used only because Blacksmith workflow dispatch requires a base-repository ref. It was deleted after the passing Testbox run; the PR head remains sallyom:codex/docker-store-seed-targets.

clawsweeper · 2026-06-09T01:41:01Z

Codex review: needs maintainer review before merge. Reviewed June 8, 2026, 10:45 PM ET / 02:45 UTC.

Summary
The PR updates scripts/list-prod-store-packages.mjs and its tests so Docker runtime-assets store seeding keeps only target-matching production packages and target optional snapshot dependencies.

PR surface: Tests +121, Other +52. Total +173 across 2 files.

Reproducibility: yes. Source inspection on current main shows Docker runtime-assets feeds pnpm store add from a script that also adds every lockfile package, while the lockfile records non-target @zed-industries/codex-acp optional packages matching the linked failure logs.

Review metrics: 1 noteworthy metric.

Proof/head delta: 1 helper-only loop rewrite after Docker proof. The real Docker proof ran before the final force-push, so maintainers should notice the small current-head delta before relying on that proof.

Merge readiness
Overall: 🦞 diamond lobster
Proof: 🦞 diamond lobster ✨ media proof bonus
Patch quality: 🦞 diamond lobster
Result: ready for maintainer review.

Overall follows the weaker of proof and patch quality, so missing proof can cap an otherwise strong patch.

Risk before merge

[P1] The store seed feeds Docker offline prune; if the target filter or snapshot closure misses a real production dependency, users would see it as a Docker runtime-assets build failure.
[P1] The strongest Docker proof ran on 90349eef56d3, while current head ec9f55e742ee only rewrites dependency iteration; maintainers may still want exact-head Docker proof or a final runtime image smoke before merge.

Maintainer options:

Accept Targeted Runtime-Assets Proof (recommended)
Maintainers can land after exact-head CI and mergeability if they accept the Testbox runtime-assets build plus the small post-proof helper-only delta as covering the reported ACPX store/prune failure.
Require Exact-Head Final Image Smoke
Ask for a fresh Docker proof on ec9f55e742ee or a full final runtime image smoke if maintainers want assurance beyond the patched runtime-assets stage.

Next step before merge

No automated repair is queued because no concrete patch defect remains; the remaining action is maintainer acceptance of targeted runtime-assets proof for a protected, availability-sensitive Docker build path.

Security
Cleared: The diff changes a local package-listing script and tests only; it does not add dependencies, workflow permissions, secrets handling, action refs, or new executable supply-chain sources.

Review details

Best possible solution:

Merge the target-aware store seed after maintainers accept the targeted Testbox runtime-assets proof and exact-head CI; run a final runtime image smoke only if broader container assurance is required.

Do we have a high-confidence way to reproduce the issue?

Yes. Source inspection on current main shows Docker runtime-assets feeds pnpm store add from a script that also adds every lockfile package, while the lockfile records non-target @zed-industries/codex-acp optional packages matching the linked failure logs.

Is this the best way to solve the issue?

Yes. Filtering the existing store-seed closure by lockfile os/cpu/libc selectors is the narrow maintainable fix and avoids ACPX-specific package hardcoding.

AGENTS.md: found and applied where relevant.

Codex review notes: model gpt-5.5, reasoning high; reviewed against 329fa44d23f4.

Label changes

Label justifications:

P2: This is a focused fix for a Docker build regression with limited blast radius to container runtime-assets package seeding.
merge-risk: 🚨 availability: The PR changes which packages are seeded before Docker offline prune, so a missed target or closure case could make container builds fail.
rating: 🦞 diamond lobster: Overall readiness is 🦞 diamond lobster; proof is 🦞 diamond lobster and patch quality is 🦞 diamond lobster.
status: 👀 ready for maintainer look: ClawSweeper has no concrete contributor-facing blocker left for this PR. Sufficient (linked_artifact): Sufficient linked-artifact proof is present: the PR body reports a Testbox-through-Crabbox Docker runtime-assets build exit 0, and the current-head change after that proof is a small dependency-iteration refactor with the same behavior.
proof: sufficient: Contributor real behavior proof is sufficient. Sufficient linked-artifact proof is present: the PR body reports a Testbox-through-Crabbox Docker runtime-assets build exit 0, and the current-head change after that proof is a small dependency-iteration refactor with the same behavior.

Evidence reviewed

PR surface:

Tests +121, Other +52. Total +173 across 2 files.

View PR surface stats

Area	Files	Added	Removed	Net
Source	0	0	0	0
Tests	1	123	2	+121
Docs	0	0	0	0
Config	0	0	0	0
Generated	0	0	0	0
Other	1	77	25	+52
Total	2	200	27	+173

What I checked:

Repository policy read: Root AGENTS.md plus scoped scripts/test/extension policy were read; the review applied the deep PR review, dependency-contract, protected-label, and script-wrapper guidance. (AGENTS.md:9, 329fa44d23f4)
Current Docker entry point: Current main pipes pnpm list --prod --depth Infinity --json through scripts/list-prod-store-packages.mjs into pnpm store add before offline pnpm prune --prod with Linux target selectors. (Dockerfile:132, 329fa44d23f4)
Current main failure surface: Current main's list script still adds every package key from pnpm-lock.yaml, so non-target optional platform packages can be fed to pnpm store add. (scripts/list-prod-store-packages.mjs:55, 329fa44d23f4)
Shipped behavior check: The latest release tag v2026.6.1 contains the same runtime-assets store-seed path and old add-all-lockfile-package script shape, so the PR is not obsolete on the latest release. (scripts/list-prod-store-packages.mjs:55, 2e08f0f4221f)
ACP optional package shape: The workspace lockfile records @zed-industries/codex-acp plus Darwin, Linux, and Windows optional platform packages, and the snapshot closure lists them as optional dependencies. (pnpm-lock.yaml:4274, 329fa44d23f4)
PR implementation: The PR reads target os/cpu/libc, filters package specs through lockfile selectors, resolves peer-decorated snapshot keys, and includes both normal and optional snapshot dependency closure. (scripts/list-prod-store-packages.mjs:9, ec9f55e742ee)

Likely related people:

@vincentkoc: Blame shows 4b55a0e04d41 introduced the current scripts/list-prod-store-packages.mjs and Docker runtime-assets seed path; recent history also ties Vincent Koc to release and runtime packaging work. (role: introduced current script path and recent release/runtime contributor; confidence: high; commits: 4b55a0e04d41, 2e08f0f4221f, 6d5e142b9312; files: scripts/list-prod-store-packages.mjs, Dockerfile, pnpm-lock.yaml)
@steipete: Recent history shows Docker live-lane, bundled plugin dependency, and runtime image work near the same runtime-assets and plugin dependency surfaces. (role: recent Docker and bundled plugin dependency contributor; confidence: medium; commits: ae3b10c15c64, 8e0ab35b0ed0, 17085ec1a4b5; files: Dockerfile, scripts/docker/setup.sh, extensions/acpx/package.json)
@sallyom: Sally O'Malley has prior merged Docker work around image size and OPENCLAW_EXTENSIONS, so this PR is not only a drive-by proposal even though she is also the PR author. (role: prior Docker feature contributor and current patch author with adjacent history; confidence: medium; commits: 57f19f0d5c10, 499c1ee6e32d, ec9f55e742ee; files: Dockerfile, scripts/docker/setup.sh, scripts/list-prod-store-packages.mjs)

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

(cherry picked from commit c8a8152)

…26.6.6) (#1040) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.6.5` → `2026.6.6` | --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.6.6`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#202666) [Compare Source](openclaw/openclaw@v2026.6.5...v2026.6.6) ##### Highlights - Security boundaries are substantially tighter across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, and Teams group actions; exec approvals now fail closed on timeout. ([#91529](openclaw/openclaw#91529), [#91618](openclaw/openclaw#91618), [#91615](openclaw/openclaw#91615), [#91619](openclaw/openclaw#91619), [#91741](openclaw/openclaw#91741), [#91745](openclaw/openclaw#91745), [#91746](openclaw/openclaw#91746), [#91748](openclaw/openclaw#91748), [#91749](openclaw/openclaw#91749), [#91750](openclaw/openclaw#91750), [#91751](openclaw/openclaw#91751), [#91752](openclaw/openclaw#91752), [#91763](openclaw/openclaw#91763), [#89938](openclaw/openclaw#89938)) Thanks [@joshavant](https://github.com/joshavant), [@pgondhi987](https://github.com/pgondhi987), [@mmaps](https://github.com/mmaps), [@eleqtrizit](https://github.com/eleqtrizit), [@shakkernerd](https://github.com/shakkernerd), and [@drobison00](https://github.com/drobison00). - Telegram delivery is safer and more coherent: account-scoped topics route to the right agent, streamed text survives tool calls, `/compact` works on generic ingress, callback handling uses concrete APIs, draft chunking is shared, durable dispatch dedupe moved into the SDK, and unauthorized DM text stays out of cache and prompt context. ([#91189](openclaw/openclaw#91189), [#88682](openclaw/openclaw#88682), [#89588](openclaw/openclaw#89588), [#90212](openclaw/openclaw#90212), [#91876](openclaw/openclaw#91876), [#91874](openclaw/openclaw#91874), [#91904](openclaw/openclaw#91904), [#91478](openclaw/openclaw#91478), [#91915](openclaw/openclaw#91915)) Thanks [@codysai001](https://github.com/codysai001), [@alexzhu0](https://github.com/alexzhu0), [@joelnishanth](https://github.com/joelnishanth), [@snowzlm](https://github.com/snowzlm), [@obviyus](https://github.com/obviyus), and [@sallyom](https://github.com/sallyom). - iMessage recovery and delivery now cover always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, and actionable inbound startup diagnostics. ([#91335](openclaw/openclaw#91335), [#91449](openclaw/openclaw#91449), [#88969](openclaw/openclaw#88969), [#88530](openclaw/openclaw#88530), [#91783](openclaw/openclaw#91783), [#91785](openclaw/openclaw#91785)) Thanks [@omarshahine](https://github.com/omarshahine), [@jmissig](https://github.com/jmissig), and [@colmbrogan](https://github.com/colmbrogan). - Browser and MCP connectivity gained existing-session CDP support, discovered WebSocket validation, default-profile `cdpUrl` handling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE authorization handling, and broader schema compatibility. ([#91422](openclaw/openclaw#91422), [#89851](openclaw/openclaw#89851), [#91736](openclaw/openclaw#91736), [#91747](openclaw/openclaw#91747), [#91451](openclaw/openclaw#91451), [#80143](openclaw/openclaw#80143)) Thanks [@pgondhi987](https://github.com/pgondhi987), [@anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia), [@lifuyue](https://github.com/lifuyue), [@eleqtrizit](https://github.com/eleqtrizit), [@LiuwqGit](https://github.com/LiuwqGit), and [@HemantSudarshan](https://github.com/HemantSudarshan). - Control UI startup and first-reply latency are lower through cached model metadata, removal of the startup catalog wait, lazy slash-command loading, and first-event tracing with slow-reply diagnostics. ([#91531](openclaw/openclaw#91531), [#91538](openclaw/openclaw#91538), [#91568](openclaw/openclaw#91568), [#91583](openclaw/openclaw#91583), [#91598](openclaw/openclaw#91598)) - Provider support expands with OpenRouter OAuth onboarding and Claude Fable 5 adaptive thinking, while Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, and Gemma 4 reasoning replay is preserved. ([#91830](openclaw/openclaw#91830), [#91882](openclaw/openclaw#91882), [#91590](openclaw/openclaw#91590), [#88630](openclaw/openclaw#88630), [#88768](openclaw/openclaw#88768), [#91696](openclaw/openclaw#91696)) Thanks [@Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@joshavant](https://github.com/joshavant), [@bdjben](https://github.com/bdjben), and [@Coder-Wangyankun](https://github.com/Coder-Wangyankun). ##### Changes - CLI progress: emit Claude CLI commentary progress events and bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding. ([#89834](openclaw/openclaw#89834), [#90883](openclaw/openclaw#90883)) Thanks [@anagnorisis2peripeteia](https://github.com/anagnorisis2peripeteia). - Observability: allow trusted diagnostics channels to capture tool input/output content, add first-assistant-event traces, and warn on slow initial replies. ([#91256](openclaw/openclaw#91256), [#91568](openclaw/openclaw#91568), [#91583](openclaw/openclaw#91583)) Thanks [@amknight](https://github.com/amknight). - Plugins/ClawHub: dogfood reusable package publishing, let dry runs skip publish approval, allow declared installed trusted hooks, report managed plugin version drift, and warn instead of failing on retired Skill Workshop configuration. ([#91574](openclaw/openclaw#91574), [#91591](openclaw/openclaw#91591), [#90004](openclaw/openclaw#90004), [#90927](openclaw/openclaw#90927), [#90838](openclaw/openclaw#90838)) Thanks [@Patrick-Erichsen](https://github.com/Patrick-Erichsen), [@brokemac79](https://github.com/brokemac79), and [@lonexreb](https://github.com/lonexreb). - Memory/providers: move the local llama.cpp runtime into its provider plugin, batch embeddings across files, persist the agent model catalog cache, and keep QMD JSON search one-shot while filtering stale REM recall previews. ([#91324](openclaw/openclaw#91324), [#89138](openclaw/openclaw#89138), [#90457](openclaw/openclaw#90457), [#91837](openclaw/openclaw#91837), [#91851](openclaw/openclaw#91851)) Thanks [@osolmaz](https://github.com/osolmaz), [@mushuiyu886](https://github.com/mushuiyu886), [@ai-hpc](https://github.com/ai-hpc), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Channels/mobile: add the QQBot group mention toggle, improve iPad and iPhone control surfaces, and expose the active connection host in the TUI footer. ([#91423](openclaw/openclaw#91423), [#91557](openclaw/openclaw#91557), [#89909](openclaw/openclaw#89909)) Thanks [@cxyhhhhh](https://github.com/cxyhhhhh), [@Solvely-Colin](https://github.com/Solvely-Colin), and [@baskduf](https://github.com/baskduf). - Performance: prewarm TUI runtime plugins, deduplicate plugin auto-enable fanout, trim dense text-delta snapshots, and reuse prepared startup model metadata. ([#90782](openclaw/openclaw#90782), [#89978](openclaw/openclaw#89978), [#91580](openclaw/openclaw#91580), [#91531](openclaw/openclaw#91531)) Thanks [@RomneyDa](https://github.com/RomneyDa) and [@ai-hpc](https://github.com/ai-hpc). ##### Fixes - Agent/session recovery: drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main and visible replies, preserve Codex context-engine compaction ownership, lower the default compaction timeout to 180 seconds while respecting explicit configuration, and keep provider-failure terminal lifecycle state correct. ([#85679](openclaw/openclaw#85679), [#91450](openclaw/openclaw#91450), [#91566](openclaw/openclaw#91566), [#91840](openclaw/openclaw#91840), [#91590](openclaw/openclaw#91590), [#91361](openclaw/openclaw#91361), [#91895](openclaw/openclaw#91895)) Thanks [@openperf](https://github.com/openperf), [@yetval](https://github.com/yetval), [@joshavant](https://github.com/joshavant), [@wangmiao0668000666](https://github.com/wangmiao0668000666), and [@TurboTheTurtle](https://github.com/TurboTheTurtle). - User-visible content boundaries: suppress Codex/Harmony protocol artifacts, neutralize browser and LanceDB memory media directives, redact transcript images, and preserve native `/compact` replies through source suppression. ([#89151](openclaw/openclaw#89151), [#91422](openclaw/openclaw#91422), [#91425](openclaw/openclaw#91425), [#91529](openclaw/openclaw#91529), [#90212](openclaw/openclaw#90212)) Thanks [@joelnishanth](https://github.com/joelnishanth), [@pgondhi987](https://github.com/pgondhi987), [@joshavant](https://github.com/joshavant), and [@snowzlm](https://github.com/snowzlm). - Channel delivery: keep WhatsApp captured replies attached to the successor controller after restart, retry Feishu rate limits, preserve Mattermost thread replies, canonicalize LINE webhook paths, restore Discord reply hydration and runtime timeout exports, and show OpenAI Realtime WebRTC assistant transcripts. ([#85823](openclaw/openclaw#85823), [#89659](openclaw/openclaw#89659), [#91684](openclaw/openclaw#91684), [#91649](openclaw/openclaw#91649), [#90263](openclaw/openclaw#90263), [#91686](openclaw/openclaw#91686), [#90426](openclaw/openclaw#90426)) Thanks [@itsuzef](https://github.com/itsuzef), [@ladygege](https://github.com/ladygege), [@jacobtomlinson](https://github.com/jacobtomlinson), [@fuller-stack-dev](https://github.com/fuller-stack-dev), and [@shushushv](https://github.com/shushushv). - Cron: cancel active task runs cleanly, preserve terminal timeout/cancel state, and recover no-deliver tool warnings instead of silently losing the outcome. ([#90666](openclaw/openclaw#90666), [#90678](openclaw/openclaw#90678)) Thanks [@ai-hpc](https://github.com/ai-hpc). - Gateway/config/auth: share the approval runtime socket token, replace arrays explicitly in `config.patch`, skip the deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, and arm QMD startup maintenance. ([#87105](openclaw/openclaw#87105), [#91551](openclaw/openclaw#91551), [#91219](openclaw/openclaw#91219), [#91614](openclaw/openclaw#91614), [#91740](openclaw/openclaw#91740), [#91978](openclaw/openclaw#91978)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev) and [@scotthuang](https://github.com/scotthuang). - Providers/Codex: clarify quota errors, restore the Codex synthetic usage line, canonicalize Codex protocol assets, require API-key auth for realtime voice, normalize ACP model refs, preserve Gemma 4 `reasoning_content`, and avoid guardian review for local models. ([#91390](openclaw/openclaw#91390), [#91709](openclaw/openclaw#91709), [#91507](openclaw/openclaw#91507), [#91567](openclaw/openclaw#91567), [#88630](openclaw/openclaw#88630), [#91696](openclaw/openclaw#91696)) Thanks [@hxy91819](https://github.com/hxy91819), [@brokemac79](https://github.com/brokemac79), [@RomneyDa](https://github.com/RomneyDa), [@joshavant](https://github.com/joshavant), and [@Coder-Wangyankun](https://github.com/Coder-Wangyankun). - Updates/builds: recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm environments, seed the correct Docker store packages, and keep ClawHub dry-run and publish paths reusable. ([#91581](openclaw/openclaw#91581), [#91599](openclaw/openclaw#91599), [#91547](openclaw/openclaw#91547), [#91591](openclaw/openclaw#91591)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev), [@sallyom](https://github.com/sallyom), and [@Patrick-Erichsen](https://github.com/Patrick-Erichsen). - UI: require explicit user intent before opening chat sessions and drain restored chat queues after session switches. ([#91480](openclaw/openclaw#91480)) Thanks [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Android: avoid the `dataSync` foreground-service type for persistent nodes. ([#80082](openclaw/openclaw#80082)) Thanks [@davelutztx](https://github.com/davelutztx). - Native hooks: bound relay lifetimes so abandoned native hook connections cannot linger indefinitely. ([#91550](openclaw/openclaw#91550)) Thanks [@joshavant](https://github.com/joshavant). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/1040

openclaw-barnacle Bot added scripts Repository scripts size: M maintainer Maintainer-authored PR labels Jun 9, 2026

sallyom marked this pull request as ready for review June 9, 2026 02:02

clawsweeper Bot added rating: 🦞 diamond lobster Very strong PR readiness with only minor maintainer review expected. and removed rating: 🐚 platinum hermit Good normal PR readiness with ordinary maintainer review expected. labels Jun 9, 2026

fix docker store seed target packages

ec9f55e

sallyom force-pushed the codex/docker-store-seed-targets branch from 90349ee to ec9f55e Compare June 9, 2026 02:36

sallyom merged commit c8a8152 into openclaw:main Jun 9, 2026
148 of 149 checks passed

vincentkoc pushed a commit that referenced this pull request Jun 9, 2026

fix docker store seed target packages (#91547)

0717cd5

(cherry picked from commit c8a8152)

github-actions Bot pushed a commit to Desicool/openclaw that referenced this pull request Jun 9, 2026

fix docker store seed target packages (openclaw#91547)

638fbad

github-actions Bot mentioned this pull request Jun 9, 2026

📡 Upstream Digest — 2026-06-09 07:39 UTC curtismercier/openclaw-mods#1043

Open

This was referenced Jun 13, 2026

fix(docker): seed importer prod deps before offline prune #92748

Closed

fix(docker): scope prod-store seed to the build platform #90958

Closed

badgerbees pushed a commit to badgerbees/openclaw that referenced this pull request Jul 8, 2026

fix docker store seed target packages (openclaw#91547)

44107fb

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Fix Docker store seed target packages#91547

Fix Docker store seed target packages#91547
sallyom merged 1 commit into
openclaw:mainfrom
sallyom:codex/docker-store-seed-targets

sallyom commented Jun 9, 2026 •

edited

Loading

Uh oh!

clawsweeper Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

sallyom commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Root Cause

Changes

Verification

Real behavior proof

Notes

Uh oh!

clawsweeper Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

sallyom commented Jun 9, 2026 •

edited

Loading

clawsweeper Bot commented Jun 9, 2026 •

edited

Loading