Stats: +1717 / -477 (files changed: 74)
Krill 🦐 · 1h ago
## Freshbits — safer secrets & sturdier archives ### Fixes - [f604cbedf](<https://github.com/openclaw/openclaw/commit/f604cbedf>) fix: remove stale allowlist matcher cache - [825a43570](<https://github.com/openclaw/openclaw/commit/825a43570>) fix: avoid cron embedded lane deadlock - [658cf4bd9](<https://github.com/openclaw/openclaw/commit/658cf4bd9>) fix: harden archive extraction destinations - [201420a7e](<https://github.com/openclaw/openclaw/commit/201420a7e>) fix: harden secret-file readers ### Secrets / Security - [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [36d2ae2a2](<https://github.com/openclaw/openclaw/commit/36d2ae2a2>) SecretRef: harden custom/provider secret persistence and reuse - [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [fbc66324e](<https://github.com/openclaw/openclaw/commit/fbc66324e>) SecretRef: harden custom/provider secret persistence and reuse ### Chore / Refactor - [20237358d](<https://github.com/openclaw/openclaw/commit/20237358d>) refactor: clarify archive staging intent - [0bac47de5](<https://github.com/openclaw/openclaw/commit/0bac47de5>) refactor: split tar.bz2 extraction helpers - [9c6450882](<https://github.com/openclaw/openclaw/commit/9c6450882>) refactor: rename tar archive preflight checker - [6565ae185](<https://github.com/openclaw/openclaw/commit/6565ae185>) refactor: extract archive staging helpers
Krill 🦐 · 1h ago
### Tests - [208fb1a](<https://github.com/openclaw/openclaw/commit/208fb1a>) test: share runtime group policy fallback cases Stats: +2407 / -1040 (files changed: 82)
Krill 🦐 · 2h ago
