Vincent Koc f37815b323 Gateway: block profile mutations via browser.request (#43800) ...

* Gateway: block profile mutations via browser.request

* Changelog: note GHSA-vmhq browser request fix

* Gateway: normalize browser.request profile guard paths

2026-03-12 04:21:03 -04:00

..

acp

fix(acp): rehydrate restarted main ACP sessions (#43285)

2026-03-12 11:05:09 +08:00

agents

Gateway: keep spawned workspace overrides internal (#43801)

2026-03-12 04:20:00 -04:00

auto-reply

fix(mattermost): prevent duplicate messages when block streaming + threading are active (#41362)

2026-03-12 03:15:17 -04:00

browser

fix(browser): restore proxy attachment media size cap (#43684)

2026-03-12 01:04:31 -04:00

canvas-host

…

channels

fix(whatsapp): trim leading whitespace in direct outbound sends (#43539)

2026-03-12 11:32:04 +11:00

cli

test(cli): update daemon coverage restart contract

2026-03-12 01:43:27 +00:00

commands

feat: expose runtime version in gateway status

2026-03-12 02:55:31 +00:00

compat

…

config

Gateway: keep spawned workspace overrides internal (#43801)

2026-03-12 04:20:00 -04:00

context-engine

…

cron

fix(cron): prevent duplicate proactive delivery on transient retry (#40646)

2026-03-12 03:01:19 -04:00

daemon

fix(cli): handle scheduled gateway restarts consistently

2026-03-12 01:38:39 +00:00

discord

fix(discord): enforce users/roles allowlist in reaction ingress

2026-03-12 03:13:46 +01:00

docs

…

gateway

Gateway: block profile mutations via browser.request (#43800)

2026-03-12 04:21:03 -04:00

hooks

…

i18n

…

imessage

fix(imessage): dedupe reflected self-chat duplicates (#38440)

2026-03-12 02:27:35 -04:00

infra

Tests: extend exec allowlist glob coverage

2026-03-12 04:01:49 -04:00

line

fix: harden secret-file readers

2026-03-10 23:40:10 +00:00

link-understanding

…

logging

…

markdown

…

media

Memory: add multimodal image and audio indexing (#43460)

2026-03-11 22:28:34 +00:00

media-understanding

…

memory

Memory: revalidate multimodal files before indexing

2026-03-11 22:51:34 +00:00

node-host

fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval

2026-03-12 01:34:35 +01:00

pairing

…

plugin-sdk

fix(voice-call): add speed and instructions to OpenAI TTS config schema (#39226)

2026-03-11 23:15:48 +05:30

plugins

fix: isolate plugin discovery env from global state

2026-03-12 02:46:29 +00:00

process

refactor: share windows command shim resolution

2026-03-10 22:18:04 +00:00

providers

…

routing

…

scripts

…

secrets

Providers: add Opencode Go support (#42313)

2026-03-11 01:31:06 -04:00

security

fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983)

2026-03-10 13:54:23 +08:00

sessions

…

shared

…

signal

…

slack

refactor: compile allowlist matchers

2026-03-11 00:07:47 +00:00

telegram

fix: scope telegram polling restart to telegram errors (#43799)

2026-03-12 13:14:17 +05:30

terminal

fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520)

2026-03-11 19:53:07 -04:00

test-helpers

…

test-utils

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

tts

test: align pi-ai oauth mocks

2026-03-11 20:11:51 +00:00

tui

fix: prevent duplicate assistant messages in TUI (fixes #35278) (#35364)

2026-03-12 02:59:42 -04:00

types

…

utils

…

web

fix(whatsapp): trim leading whitespace in direct outbound sends (#43539)

2026-03-12 11:32:04 +11:00

whatsapp

…

wizard

fix(cli): handle scheduled gateway restarts consistently

2026-03-12 01:38:39 +00:00

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

chore: bump version to 2026.3.10

2026-03-11 23:29:53 +00:00

logger.test.ts

…

logger.ts

…

logging.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

…

version.test.ts

…

version.ts

…