Peter Steinberger
1bc45af1db
ci: tolerate dependency awareness read-only tokens
2026-05-13 11:45:33 +01:00
Josh Avant
bd4db5ee62
Add dependency release safety evidence and PR awareness ( #81325 )
...
* test: cover dependency pin guard
* build: add dependency vulnerability gate
* build: add dependency risk report
* build: add dependency drift reports
* build: include dependency ownership surface evidence
* build: rename dependency report commands
* build: respect release age exclusions in risk report
* build: clarify transitive risk accounting
* build: remove transitive risk exception registry
* build: clarify transitive risk signal wording
* ci: attach dependency evidence to release preflight
* ci: extract dependency release evidence generator
* build: rename ownership surface dependency report
* ci: clarify release evidence naming
* build: clarify recently published risk report
* build: reorder transitive risk report sections
* build: fix ownership surface pluralization
* ci: surface dependency changes on PRs
* ci: harden dependency change awareness
* ci: use dependency changed PR label
* build: fix dependency report lint
* docs: add dependency safety changelog
2026-05-13 03:05:09 -05:00
clawsweeper[bot]
81cd5028a5
ci: add missing extension and channel labels to labeler.yml ( #81095 )
...
Summary:
- This PR adds `.github/labeler.yml` changed-file rules for 22 bundled plugin directories that currently have no dedicated labeler entry.
- Reproducibility: not applicable. as a CI metadata PR rather than a product bug. The gap is source-verifiable ... with current-main `.github/labeler.yml`, which shows the added plugin paths exist and are unlabeled today.
Automerge notes:
- No ClawSweeper repair was needed after automerge opt-in.
Validation:
- ClawSweeper review passed for head eef42948d3eef42948d3https://github.com/openclaw/openclaw/pull/81095#issuecomment-4432997258
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: bing <33149547+bing0901@users.noreply.github.com >
2026-05-12 17:23:35 +00:00
Peter Steinberger
0fbbba0c6f
ci: keep main push checks running
2026-05-12 08:35:36 +01:00
Peter Steinberger
a4acd33097
ci: speed up beta release verification
...
(cherry picked from commit 7ca9b58a27
2026-05-12 06:21:09 +01:00
Ayaan Zaidi
16cfc83643
ci(mantis): fix telegram run wait before checkout
2026-05-12 10:39:27 +05:30
Ayaan Zaidi
9c16388177
ci(mantis): serialize telegram account proofs
2026-05-11 20:42:00 +05:30
Ayaan Zaidi
663206aac4
ci(mantis): derive telegram proof refs from pr
2026-05-11 17:50:23 +05:30
Ayaan Zaidi
d4c7519989
ci(mantis): allow fork telegram proof
2026-05-11 17:33:29 +05:30
Peter Steinberger
913c621adb
ci: add plugin inspector prerelease advisory
2026-05-11 12:46:33 +01:00
Peter Steinberger
1327f6742f
ci: keep ClawSweeper comment dispatch best effort
2026-05-11 11:02:00 +01:00
Ayaan Zaidi
becb6e8bbb
fix(mantis): route telegram proof through trusted harness
2026-05-11 15:02:36 +05:30
Altay
7d35f28b6c
chore(pnpm): align follow-up pnpm 11 surfaces
2026-05-11 10:13:49 +01:00
Ayaan Zaidi
96d4dd68da
fix(mantis): validate telegram driver before lease
2026-05-11 14:19:36 +05:30
Ayaan Zaidi
799bd8a23b
ci(mantis): fetch ffmpeg proof tools directly
2026-05-11 13:18:34 +05:30
Ayaan Zaidi
1caf3ae674
ci(mantis): install static proof media tools
2026-05-11 13:11:16 +05:30
Ayaan Zaidi
64cfb2be70
ci(mantis): avoid host apt in telegram proof
2026-05-11 13:02:04 +05:30
Ayaan Zaidi
6729044966
ci(mantis): prepare telegram proof tooling
2026-05-11 12:47:46 +05:30
Ayaan Zaidi
273e6503bb
ci(mantis): expose crabbox to proof agent
2026-05-11 11:39:44 +05:30
Ayaan Zaidi
4a6349c68b
ci(mantis): preserve proof env for codex user
2026-05-11 11:26:49 +05:30
Ayaan Zaidi
d246b3e2de
ci(mantis): preserve codex action home through sudo
2026-05-11 11:20:38 +05:30
Ayaan Zaidi
ae90e36e7e
ci(mantis): grant codex workspace traversal
2026-05-11 11:14:17 +05:30
Ayaan Zaidi
3dba0c683a
ci(mantis): use shared codex action home
2026-05-11 11:06:38 +05:30
Ayaan Zaidi
c929376c4e
ci(mantis): let codex action create home
2026-05-11 11:03:16 +05:30
Ayaan Zaidi
eb73486a94
ci(mantis): share codex action home
2026-05-11 10:57:29 +05:30
Ayaan Zaidi
042e09612e
ci(mantis): run codex as unprivileged user
2026-05-11 10:50:56 +05:30
Ayaan Zaidi
1debcecc91
ci(mantis): run telegram proof on blacksmith
2026-05-11 10:35:53 +05:30
Ayaan Zaidi
e7fc13ecf0
fix(ci): resolve merged Mantis proof PR refs
2026-05-11 08:56:03 +05:30
Ayaan Zaidi
e14b485533
ci(mantis): add agentic telegram desktop proof
2026-05-11 08:15:34 +05:30
Peter Steinberger
cbc804bad7
ci: bound live cache release retries
2026-05-11 02:36:17 +01:00
Peter Steinberger
5d2ee19e5a
ci: speed up ClawSweeper comment acknowledgements
2026-05-11 02:08:45 +01:00
Altay
8b95270cc9
ci(pnpm): use pnpm 11 in workflows
2026-05-11 00:48:14 +01:00
Altay
d22424f7d2
fix(ci): keep Docker patch smoke on pnpm workspace config
2026-05-11 00:48:14 +01:00
Peter Steinberger
18997be120
ci: speed up release validation reruns
2026-05-11 00:22:19 +01:00
Peter Steinberger
c14b01eea8
ci: cap advisory live release sweep timeouts
2026-05-10 21:07:56 +01:00
Peter Steinberger
1538df5a66
ci: mark full release live sweeps advisory
2026-05-10 20:52:29 +01:00
Peter Steinberger
522f3296a7
ci: forward-port release validation fixes
2026-05-10 20:38:36 +01:00
Peter Steinberger
b52773870f
ci: speed up release validation profiles
2026-05-10 15:55:24 +01:00
Peter Steinberger
ac15c919c4
ci: tighten release publish timeouts
2026-05-10 15:55:24 +01:00
Peter Steinberger
4e80aa8f7b
ci: give OpenAI package lane cleanup margin
2026-05-10 15:55:23 +01:00
Peter Steinberger
2ac2f0fce5
ci: speed up build artifact lane
2026-05-10 11:13:10 +01:00
Peter Steinberger
f9a106fb28
ci: cap OpenAI package update lane timeout
2026-05-10 07:41:07 +01:00
Peter Steinberger
863fe90249
chore(installer): remove legacy cmd installer
2026-05-10 06:59:33 +01:00
Peter Steinberger
378da8b9d3
feat: add telegram mantis evidence builder
2026-05-10 06:39:54 +01:00
Peter Steinberger
66a8ff178c
ci(installer): add macOS install proof
2026-05-10 01:28:24 -04:00
Peter Steinberger
2fcfc647b3
ci: rebase website installer sync before push ( #80092 )
2026-05-10 00:11:12 -04:00
Peter Steinberger
d6a5690ea5
ci: use Node 24 for website installer sync ( #80090 )
2026-05-09 23:59:15 -04:00
Peter Steinberger
e60928d13c
ci: verify and sync website installers ( #80067 )
...
* ci: verify and sync website installers
* test: fix pi runner boundary test type cast
* fix(installer): scope Windows legacy cleanup to git checkout
* ci: install curl for minimal install-cli smoke
* fix(installer): promote supported Linux node after install
* test(cli): align command hint expectations
* fix(installer): avoid shellcheck warning in node promotion
* fix(installer): sync Linux path hardening
* ci: raise build artifact testbox heap
* test(installer): align PowerShell installer tests
2026-05-09 23:48:49 -04:00
Peter Steinberger
c8d82e4535
ci(release): raise build heap for validation gates
2026-05-10 03:03:55 +01:00
Peter Steinberger
f8fee34aef
ci(release): stabilize full validation gates
2026-05-10 02:54:37 +01:00
