Freshbits โ sandboxes tightened, docs tidied
Security
- f48698a fix(security): harden sandbox browser network defaults- 92cada2 fix(security): block command substitution in unquoted heredoc bodies
- f23da06 fix(security): harden heredoc allowlist parsing
- 10b8839 fix(security): centralize WhatsApp outbound auth and return 403 tool auth errors
Models & Agents
- #22526 c62a6e7 fix(models): add kimi-coding implicit provider template (openclaw#22526) thanks @lailoo- 2706cbd fix(agents): include filenames in image resize logs
CI & Tests
- cf82614 refactor(test): reuse state-dir helper in telegram tests- 7a27e26 refactor(test): dedupe plugin env overrides via env helpers
- 21bb46d fix(ci): include browser network in sandbox test fixture
- 25db01f refactor(test): use withEnvAsync in pairing store fixture
