From 576f7072a7bc8fcf9bd873cf22893cfcc9a2cde5 Mon Sep 17 00:00:00 2001 From: Peter Steinberger Date: Sat, 14 Feb 2026 22:42:13 +0100 Subject: [PATCH] docs(changelog): credit @simecek for gateway connect auth fix --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 5fd42829b..6d7f78699 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -524,7 +524,7 @@ Docs: https://docs.openclaw.ai - Telegram: recover from grammY long-poll timed out errors. (#7466) Thanks @macmimi23. - Media understanding: skip binary media from file text extraction. (#7475) Thanks @AlexZhangji. - Security: enforce access-group gating for Slack slash commands when channel type lookup fails. -- Security: require validated shared-secret auth before skipping device identity on gateway connect. +- Security: require validated shared-secret auth before skipping device identity on gateway connect. Thanks @simecek. - Security: guard skill installer downloads with SSRF checks (block private/localhost URLs). - Security/Gateway: require `operator.approvals` for in-chat `/approve` when invoked from gateway clients. Thanks @yueyueL. - Security: harden Windows exec allowlist; block cmd.exe bypass via single &. Thanks @simecek.