Cherry-pick: CI/workflow improvements (46 commits) #1905
Description
Cherry-pick from upstream — CI/workflow improvements
Source: openclaw/openclaw main branch
Scan session: 2026-03-24 (rescan)
Commits: 46 (32 clean, 14 partial)
Commits
| # | Hash | Subject | Author | Files | Tier |
|---|---|---|---|---|---|
| 1 | 0a20c5c8b3 |
fix(ci): stop serializing push workflow runs | Vincent Koc | 2 | PARTIAL |
| 2 | 1ad47b8fa1 |
test: harden path resolution test helpers | Peter Steinberger | 11 | PARTIAL |
| 3 | 313e5bb58b |
Fix launcher startup regressions (openclaw#48501) | Tak Hoffman | 7 | PARTIAL |
| 4 | 432ea11248 |
Security: add secops ownership for sensitive paths (openclaw#46440) | Vincent Koc | 3 | PARTIAL |
| 5 | 46ccbacbd9 |
refactor(scripts): move container setup entrypoints | Vincent Koc | 8 | PARTIAL |
| 6 | 4bd90f24d1 |
perf(ci): gate install smoke on changed-smoke (openclaw#52458) | Vincent Koc | 6 | PARTIAL |
| 7 | 4f1e12a2b1 |
Docs: prototype generated plugin SDK reference (openclaw#51877) | Bob | 10 | PARTIAL |
| 8 | 5408a3d1a4 |
docs(contributing): clarify accepted PR scope | Vincent Koc | 2 | PARTIAL |
| 9 | 6266b842d4 |
ci(actions): restore audit lane and cache Docker builds (openclaw#51933) | Vincent Koc | 2 | PARTIAL |
| 10 | 9f08af1f06 |
fix(ci): harden docker builds and unblock config docs | Peter Steinberger | 6 | PARTIAL |
| 11 | a55f371cc5 |
fix(ci): skip docs-only preflight pnpm audit | Peter Steinberger | 5 | PARTIAL |
| 12 | cbec476b6b |
Docs: add config drift baseline statefile (openclaw#45891) | Vincent Koc | 10 | PARTIAL |
| 13 | d41c9ad4cb |
Release: add plugin npm publish workflow (openclaw#47678) | Onur Solmaz | 20 | PARTIAL |
| 14 | deada7edd3 |
build: default to Node 24 and keep Node 22 compat | Altay | 30 | PARTIAL |
| 15 | 06832112ee |
ci enforce boundary guardrails | Tak Hoffman | 2 | PICK |
| 16 | 0c2e6fe97f |
ci(android): use explicit flavor debug tasks | Ayaan Zaidi | 5 | PICK |
| 17 | 0df0c9f601 |
refactor(ci): add explicit preflight fanout hub | Vincent Koc | 1 | PICK |
| 18 | 24dc91c6ef |
ci add time-gated boundary inventory jobs | Tak Hoffman | 1 | PICK |
| 19 | 29b36f8e4a |
ci: harden pnpm sticky cache on PRs | Altay | 1 | PICK |
| 20 | 3dfd8eef7f |
ci(node22): drop duplicate config docs check from compat lane | Vincent Koc | 1 | PICK |
| 21 | 4af79f20d5 |
fix ci main cancellation behavior | Tak Hoffman | 1 | PICK |
| 22 | 527a1919ea |
fix(ci): quote changed extension matrix input | Peter Steinberger | 1 | PICK |
| 23 | 52a0aa0672 |
ci: build dist before macos tests (openclaw#52279) | Tak Hoffman | 1 | PICK |
| 24 | 5336c4e945 |
CI: add changed extension test lane | Vincent Koc | 1 | PICK |
| 25 | 5a2a4abc12 |
CI: add built plugin singleton smoke (openclaw#48710) | Tak Hoffman | 5 | PICK |
| 26 | 5c07207dd1 |
ci: trim PR critical path | Peter Steinberger | 2 | PICK |
| 27 | 5c9fae5adc |
chore: add code owners for npm release paths | Onur Solmaz | 1 | PICK |
| 28 | 7066316db8 |
ci: hydrate dist before plugin-sdk test lanes (openclaw#52267) | Tak Hoffman | 1 | PICK |
| 29 | 77fb2589b1 |
test add extension plugin sdk boundary guards | Tak Hoffman | 6 | PICK |
| 30 | 797b6fe614 |
ci: tighten cache docs and node22 gate | Altay | 3 | PICK |
| 31 | 7cd0acf8af |
CI: rename startup memory smoke (openclaw#49041) | Tak Hoffman | 1 | PICK |
| 32 | 8a59b09fc8 |
refactor(ci): collapse fast setup jobs into preflight | Vincent Koc | 1 | PICK |
| 33 | 8b2f0cbb6c |
CI: run global contract lane | Vincent Koc | 2 | PICK |
| 34 | 8ba1b6eff1 |
ci: add npm release workflow and CalVer checks (openclaw#42414) (thanks @onutc) | Onur | 6 | PICK |
| 35 | 8d27617918 |
perf(ci): fan out macos from preflight scope (openclaw#52467) | Vincent Koc | 1 | PICK |
| 36 | 8d733350de |
CI: run config docs drift check on PRs (openclaw#51618) | Harold Hunt | 1 | PICK |
| 37 | 916db21fe5 |
fix(ci): harden zizmor workflow diffing | Peter Steinberger | 1 | PICK |
| 38 | 9854466a04 |
ci(actions): optimize main CI lanes (openclaw#51912) | Vincent Koc | 2 | PICK |
| 39 | 99c84294f3 |
ci: shard bun test lane | Tak Hoffman | 1 | PICK |
| 40 | 9b5000057e |
ci: remove Android Node 20 action warnings | Peter Steinberger | 1 | PICK |
| 41 | c0e0115b31 |
CI: add CLI startup memory regression check | Vincent Koc | 3 | PICK |
| 42 | c449a0a3c1 |
Add bad-barnacle label to prevent barnacle closures. (openclaw#51945) | Tak Hoffman | 1 | PICK |
| 43 | d17490ff54 |
ci: speed up scoped workflow lanes | Peter Steinberger | 4 | PICK |
| 44 | dc06e4fd22 |
ci: collapse extra workflow guards into check-additional | Vincent Koc | 1 | PICK |
| 45 | e1d054547e |
ci: restore PR pnpm cache fallback | Altay | 1 | PICK |
| 46 | f036ed27f4 |
CI: guard gateway watch against duplicate runtime regressions (openclaw#49048) | Harold Hunt | 3 | PICK |
Execution
Pick up with: /pick-from-openclaw execute issue #N
Recommended strategy: staging branch
Note: 14 PARTIAL commits — some files may need discarding.