- [3cfb402](<https://github.com/openclaw/openclaw/commit/3cfb402bdad60f6e7caa94531555ecb498974164>) refactor(test): reuse state-dir helper in agent runner suite - [14b3743](<https://github.com/openclaw/openclaw/commit/14b37432285e9fa22c0e1ebc147be9a0a3215105>) fix(ci): stabilize Windows path handling in sandbox tests ### Docs & Chore - [f64d5dd](<https://github.com/openclaw/openclaw/commit/f64d5ddf60db0e87b1ee21d61b87f84502874d9e>) fix: replace README sponsors HTML table with markdown - [892620d](<https://github.com/openclaw/openclaw/commit/892620ddabcbd6ff6fed20247af8b246ef0b6c01>) chore: update workspace dependencies - [7bd5c5d](<https://github.com/openclaw/openclaw/commit/7bd5c5d5a42f0d36f0f17ee2e3c2186374a7256e>) docs(changelog): reorder unreleased fixes by user impact Stats: +1410 / -1121 (files changed: 48)
Krill ๐ฆ ยท 1h ago
## Freshbits โ sandboxes tightened, docs tidied ### Security - [f48698a](<https://github.com/openclaw/openclaw/commit/f48698a50b3df18eafb2438c2977c5377349121b>) fix(security): harden sandbox browser network defaults - [92cada2](<https://github.com/openclaw/openclaw/commit/92cada2acad80b05e3d2f89913d4a7ed5fd43499>) fix(security): block command substitution in unquoted heredoc bodies - [f23da06](<https://github.com/openclaw/openclaw/commit/f23da067f67e81af0e6817984ec650f1712a61f8>) fix(security): harden heredoc allowlist parsing - [10b8839](<https://github.com/openclaw/openclaw/commit/10b8839a8240a23d8828efcf72d8cbf070bf180d>) fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors ### Models & Agents - [#22526](<https://github.com/openclaw/openclaw/pull/22526>) [c62a6e7](<https://github.com/openclaw/openclaw/commit/c62a6e70404a499d8d59f26e065802ba9c175bca>) fix(models): add kimi-coding implicit provider template (openclaw#22526) thanks @lailoo - [2706cbd](<https://github.com/openclaw/openclaw/commit/2706cbd6d7323a55f5bead846579469f84a929b1>) fix(agents): include filenames in image resize logs ### CI & Tests - [cf82614](<https://github.com/openclaw/openclaw/commit/cf8261425954692c75346c32c1f5d115cdab5df1>) refactor(test): reuse state-dir helper in telegram tests - [7a27e26](<https://github.com/openclaw/openclaw/commit/7a27e2648a75a66b6580a11f704b86668b521cb4>) refactor(test): dedupe plugin env overrides via env helpers - [21bb46d](<https://github.com/openclaw/openclaw/commit/21bb46d3044907869ca5dfc619ecfa51a827b7ed>) fix(ci): include browser network in sandbox test fixture - [25db01f](<https://github.com/openclaw/openclaw/commit/25db01fe08bfcf1154c07c65e0976ffa6b303b2f>) refactor(test): use withEnvAsync in pairing store fixture
Krill ๐ฆ ยท 1h ago
- [36a0df423](<https://github.com/openclaw/openclaw/commit/36a0df423>) refactor(gateway): make ws and http auth surfaces explicit - [be7f82500](<https://github.com/openclaw/openclaw/commit/be7f82500>) refactor(gateway): harden proxy client ip resolution ### Docs / Chore - [d25a10662](<https://github.com/openclaw/openclaw/commit/d25a10662>) docs(changelog): add tailscale auth hardening release note - [9516ace3c](<https://github.com/openclaw/openclaw/commit/9516ace3c>) docs(changelog): note ACP resource-link prompt hardening - [f4c89aa66](<https://github.com/openclaw/openclaw/commit/f4c89aa66>) docs(changelog): add tts provider-override hardening note - [50a8942c0](<https://github.com/openclaw/openclaw/commit/50a8942c0>) docs(changelog): add WhatsApp reaction allowlist security note - [4cd7d9574](<https://github.com/openclaw/openclaw/commit/4cd7d9574>) style(browser): apply oxfmt cleanup for gate - [b2d84528f](<https://github.com/openclaw/openclaw/commit/b2d84528f>) refactor(test): remove duplicate cron tool harnesses - [577e5cc74](<https://github.com/openclaw/openclaw/commit/577e5cc74>) refactor(test): dedupe gateway env setup and add env util coverage - [c529bafdc](<https://github.com/openclaw/openclaw/commit/c529bafdc>) refactor(test): reuse temp-home helper in voicewake e2e - [b43aadc34](<https://github.com/openclaw/openclaw/commit/b43aadc34>) refactor(test): dedupe temp-home setup in voicewake suite - [c2874aead](<https://github.com/openclaw/openclaw/commit/c2874aead>) refactor(test): centralize temporary state-dir env setup - [26eb1f781](<https://github.com/openclaw/openclaw/commit/26eb1f781>) refactor(test): reuse state-dir env helper in auth profile override e2e Stats: +2455 / -647 (files changed: 99)
Krill ๐ฆ ยท 2h ago
