Agustin Rivera dbfcef3196 fix(dotenv): block workspace runtime env vars (#62660) ...

* fix(dotenv): block workspace runtime env vars

Co-authored-by: zsx <git@zsxsoft.com>

* docs(changelog): add workspace dotenv runtime-control entry

* fix(dotenv): block workspace gateway port override

---------

Co-authored-by: zsx <git@zsxsoft.com>
Co-authored-by: Devin Robison <drobison@nvidia.com>

2026-04-08 13:04:00 -06:00

..

acp

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

agents

test: harden provider mock isolation

2026-04-08 19:59:36 +01:00

auto-reply

test: reuse followup runner imports

2026-04-08 19:54:37 +01:00

bindings

…

bootstrap

…

canvas-host

refactor: dedupe gateway memory trimmed readers

2026-04-08 01:36:39 +01:00

channels

test: keep shared dm policy contract off channel facades

2026-04-08 14:35:53 +01:00

chat

refactor: dedupe misc lowercase helpers

2026-04-07 22:24:32 +01:00

cli

Reply: surface OAuth reauth failures (#63217)

2026-04-08 18:03:03 +02:00

commands

fix(plugins): prevent untrusted workspace plugins from hijacking bundled provider auth choices [AI] (#62368)

2026-04-08 23:08:14 +05:30

compat

…

config

fix: pass system prompt to codex cli

2026-04-08 18:15:10 +01:00

context-engine

…

cron

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

daemon

fix(daemon): skip machine-scope fallback on permission-denied bus errors (#62337)

2026-04-08 01:22:31 +01:00

docs

…

flows

fix(doctor): warn when stale Codex overrides shadow OAuth (#40143)

2026-04-08 03:07:33 +01:00

gateway

Align remote node exec event system messages with untrusted handling (#62659)

2026-04-08 12:47:24 -06:00

hooks

refactor: dedupe normalization lowercase helpers

2026-04-07 22:57:52 +01:00

i18n

…

image-generation

test: keep media runtime tests on same-directory provider mocks

2026-04-08 17:15:56 +01:00

infra

fix(dotenv): block workspace runtime env vars (#62660)

2026-04-08 13:04:00 -06:00

interactive

…

link-understanding

…

logging

fix(test): keep warn log capture under openclaw temp dir

2026-04-08 12:00:51 +01:00

markdown

…

mcp

refactor: dedupe core lowercase helpers

2026-04-07 20:58:01 +01:00

media

refactor: dedupe gateway memory trimmed readers

2026-04-08 01:36:39 +01:00

media-generation

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

media-understanding

refactor: dedupe internal helper glue

2026-04-08 15:58:45 +01:00

memory-host-sdk

refactor: dedupe embedding provider test fixtures

2026-04-08 15:58:47 +01:00

music-generation

test: keep media runtime tests on same-directory provider mocks

2026-04-08 17:15:56 +01:00

node-host

refactor: dedupe core trimmed readers

2026-04-08 01:36:39 +01:00

pairing

refactor: dedupe core trimmed readers

2026-04-08 01:36:39 +01:00

plugin-sdk

fix(plugin-sdk): export channel plugin base

2026-04-08 16:39:18 +01:00

plugins

feat(plugins): support provider auth aliases

2026-04-08 19:03:04 +01:00

process

test: speed up cli and process tests

2026-04-08 00:30:22 +01:00

realtime-transcription

…

realtime-voice

…

routing

refactor: dedupe misc lowercase helpers

2026-04-07 22:24:32 +01:00

scripts

fix(test): stabilize windows tooling assertions

2026-04-08 09:12:08 +01:00

secrets

feat(plugins): support provider auth aliases

2026-04-08 19:03:04 +01:00

security

refactor: dedupe core trimmed readers

2026-04-08 01:36:39 +01:00

sessions

fix(gateway): clear auto-fallback model override on session reset (#63155)

2026-04-09 00:31:05 +08:00

shared

revert: undo background alive review findings fix

2026-04-08 14:02:49 +03:00

tasks

fix: keep runtime task test harness behind task seams

2026-04-08 16:53:46 +01:00

terminal

…

test-helpers

…

test-utils

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

tts

refactor: dedupe misc lowercase helpers

2026-04-07 22:24:32 +01:00

tui

refactor: dedupe core lowercase helpers

2026-04-07 20:58:01 +01:00

types

…

utils

…

video-generation

test: keep media runtime tests on same-directory provider mocks

2026-04-08 17:15:56 +01:00

web

…

web-fetch

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

web-search

refactor: dedupe repeated test helpers

2026-04-08 09:58:22 +01:00

wizard

refactor: dedupe misc lowercase helpers

2026-04-07 22:24:32 +01:00

browser-lifecycle-cleanup.test.ts

…

browser-lifecycle-cleanup.ts

…

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

…

library.ts

…

logger.test.ts

…

logger.ts

…

logging.ts

…

param-key.ts

refactor: dedupe remaining lowercase helpers

2026-04-07 22:57:52 +01:00

plugin-activation-boundary.test.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

ui-app-settings.agents-files-refresh.test.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

fix: stabilize live qa scenario suite

2026-04-08 08:17:59 +01:00

version.ts

fix: stabilize live qa scenario suite

2026-04-08 08:17:59 +01:00