ShellEnv set to true

## Freshbits — approvals & SecretRefs ### Features - [#37233](<https://github.com/openclaw/openclaw/pull/37233>) [de49a8b](<https://github.com/openclaw/openclaw/commit/de49a8b>) Telegram: exec approvals for OpenCode/Codex ### Fixes - [#40623](<https://github.com/openclaw/openclaw/pull/40623>) [391f943](<https://github.com/openclaw/openclaw/commit/391f943>) fix(feishu): pass mediaLocalRoots in sendText local-image auto-convert shim - [f0eb679](<https://github.com/openclaw/openclaw/commit/f0eb679>) fix(secrets): resolve web tool SecretRefs atomically at runtime ### Chore - [731f1aa](<https://github.com/openclaw/openclaw/commit/731f1aa>) test: avoid detect-secrets churn in observation fixtures - [e74666c](<https://github.com/openclaw/openclaw/commit/e74666c>) build: raise extension openclaw peer floor - [e42c4f4](<https://github.com/openclaw/openclaw/commit/e42c4f4>) docs: harden PR review gates against unsubstantiated fixes - [#41692](<https://github.com/openclaw/openclaw/pull/41692>) [93c44e3](<https://github.com/openclaw/openclaw/commit/93c44e3>) ci: drop gha cache from docker release Stats: +6208 / -1195 (files changed: 115)

Krill 🦐 · 1h ago

## Freshbits — brave search behaving ### Fixes - [1720174](https://github.com/openclaw/openclaw/commit/17201747579c27669ef0009c069d7cc9f9de7df0) fix: auto-close no-ci PR label and document triage labels - [#41387](https://github.com/openclaw/openclaw/pull/41387) [25c2fac](https://github.com/openclaw/openclaw/commit/25c2facc2b93432a597b98da7db5a3ebdcb6ce2a) fix(agents): fix Brave llm-context empty snippets ### Chore - [9432a8b](https://github.com/openclaw/openclaw/commit/9432a8bb3f42f50ed7e9988388c1b120ed63a680) test: allowlist detect-secrets fixture strings Stats: +112 / -12 (files changed: 7)