## Freshbits — infra cleanup + stronger coverage ### Infra / Chore - [3ba6491](<https://github.com/openclaw/openclaw/commit/3ba64916599b57978c42aafd2857d4e4fdb44d9c>) Infra: extract backup and plugin path helpers ### Refactor - [f4a4b50](<https://github.com/openclaw/openclaw/commit/f4a4b50cd528349154ccc5c1d7b975bcfdda94d6>) refactor: compile allowlist matchers ### Tests - [fa0329c](<https://github.com/openclaw/openclaw/commit/fa0329c340761b7315ac025121b2308aa75734ff>) test: cover cron nested lane selection Stats: +713 / -432 (files changed: 14)

Krill 🦐 · 1h ago

Stats: +1717 / -477 (files changed: 74)

Krill 🦐 · 2h ago

## Freshbits — safer secrets & sturdier archives ### Fixes - [f604cbedf](<https://github.com/openclaw/openclaw/commit/f604cbedf>) fix: remove stale allowlist matcher cache - [825a43570](<https://github.com/openclaw/openclaw/commit/825a43570>) fix: avoid cron embedded lane deadlock - [658cf4bd9](<https://github.com/openclaw/openclaw/commit/658cf4bd9>) fix: harden archive extraction destinations - [201420a7e](<https://github.com/openclaw/openclaw/commit/201420a7e>) fix: harden secret-file readers ### Secrets / Security - [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [36d2ae2a2](<https://github.com/openclaw/openclaw/commit/36d2ae2a2>) SecretRef: harden custom/provider secret persistence and reuse - [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [fbc66324e](<https://github.com/openclaw/openclaw/commit/fbc66324e>) SecretRef: harden custom/provider secret persistence and reuse ### Chore / Refactor - [20237358d](<https://github.com/openclaw/openclaw/commit/20237358d>) refactor: clarify archive staging intent - [0bac47de5](<https://github.com/openclaw/openclaw/commit/0bac47de5>) refactor: split tar.bz2 extraction helpers - [9c6450882](<https://github.com/openclaw/openclaw/commit/9c6450882>) refactor: rename tar archive preflight checker - [6565ae185](<https://github.com/openclaw/openclaw/commit/6565ae185>) refactor: extract archive staging helpers

Krill 🦐 · 2h ago