Vincent Koc 48cbfdfac0 Hardening: require LINE webhook signatures (#44090) ...

* LINE: require webhook signatures in express handler

* LINE: require webhook signatures in node handler

* LINE: update express signature tests

* LINE: update node signature tests

* Changelog: note LINE webhook hardening

* LINE: validate signatures before parsing webhook bodies

* LINE: reject missing signatures before body reads

2026-03-12 10:50:36 -04:00

..

acp

fix(acp): rehydrate restarted main ACP sessions (#43285)

2026-03-12 11:05:09 +08:00

agents

Agents: adapt pi-ai oauth and payload hooks

2026-03-12 10:19:14 -04:00

auto-reply

fix(telegram): allow fallback models in /model validation (#40105)

2026-03-12 13:55:51 +01:00

browser

fix(browser): restore proxy attachment media size cap (#43684)

2026-03-12 01:04:31 -04:00

canvas-host

…

channels

Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871)

2026-03-12 05:04:31 -04:00

cli

Merge remote-tracking branch 'origin/vincentkoc-code/fix-terminal-table-width'

2026-03-12 04:56:21 -04:00

commands

build: align Node 22 guidance with 22.16 minimum

2026-03-12 20:07:44 +05:30

compat

…

config

Gateway: keep spawned workspace overrides internal (#43801)

2026-03-12 04:20:00 -04:00

context-engine

fix: carry observed overflow token counts into compaction (#40357)

2026-03-12 06:58:42 -07:00

cron

fix(cron): prevent duplicate proactive delivery on transient retry (#40646)

2026-03-12 03:01:19 -04:00

daemon

build: align Node 22 guidance with 22.16 minimum

2026-03-12 20:07:44 +05:30

discord

fix(discord): enforce users/roles allowlist in reaction ingress

2026-03-12 03:13:46 +01:00

docs

…

gateway

fix: stop main-session UI replies inheriting channel routes

2026-03-12 15:39:34 +05:30

hooks

…

i18n

…

imessage

fix(imessage): dedupe reflected self-chat duplicates (#38440)

2026-03-12 02:27:35 -04:00

infra

build: raise Node 22 compatibility floor to 22.16

2026-03-12 20:07:44 +05:30

line

Hardening: require LINE webhook signatures (#44090)

2026-03-12 10:50:36 -04:00

link-understanding

…

logging

Logging: harden probe suppression for observations (#41338)

2026-03-10 01:40:15 +03:00

markdown

…

media

Memory: add multimodal image and audio indexing (#43460)

2026-03-11 22:28:34 +00:00

media-understanding

…

memory

build: raise Node 22 compatibility floor to 22.16

2026-03-12 20:07:44 +05:30

node-host

fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval

2026-03-12 01:34:35 +01:00

pairing

…

plugin-sdk

fix(mattermost): pass mediaLocalRoots through reply delivery (#44021)

2026-03-12 20:13:51 +05:30

plugins

fix: isolate plugin discovery env from global state

2026-03-12 02:46:29 +00:00

process

refactor: share windows command shim resolution

2026-03-10 22:18:04 +00:00

providers

build: update app deps except carbon

2026-03-09 06:09:33 +00:00

routing

…

scripts

…

secrets

Providers: add Opencode Go support (#42313)

2026-03-11 01:31:06 -04:00

security

fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants (#35983)

2026-03-10 13:54:23 +08:00

sessions

ACP: add optional ingress provenance receipts (#40473)

2026-03-09 04:19:03 +01:00

shared

…

signal

…

slack

refactor: compile allowlist matchers

2026-03-11 00:07:47 +00:00

telegram

fix(telegram): allow fallback models in /model validation (#40105)

2026-03-12 13:55:51 +01:00

terminal

fix(terminal): sanitize skills JSON and fallback on legacy Windows (#43520)

2026-03-11 19:53:07 -04:00

test-helpers

…

test-utils

refactor(security): simplify system.run approval model

2026-03-11 01:43:06 +00:00

tts

test: align pi-ai oauth mocks

2026-03-11 20:11:51 +00:00

tui

fix: prevent duplicate assistant messages in TUI (fixes #35278) (#35364)

2026-03-12 02:59:42 -04:00

types

…

utils

…

web

fix(whatsapp): trim leading whitespace in direct outbound sends (#43539)

2026-03-12 11:32:04 +11:00

whatsapp

…

wizard

fix(cli): handle scheduled gateway restarts consistently

2026-03-12 01:38:39 +00:00

channel-web.ts

…

docker-build-cache.test.ts

Docker: improve build cache reuse (#40351)

2026-03-08 17:57:46 -07:00

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

Docker: trim runtime image payload (#40307)

2026-03-08 16:07:04 -07:00

dockerfile.test.ts

build: default to Node 24 and keep Node 22 compat

2026-03-12 20:07:44 +05:30

entry.ts

Exec: mark child command env with OPENCLAW_CLI (#41411)

2026-03-09 19:14:08 -04:00

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

globals.ts

…

index.ts

…

install-sh-version.test.ts

chore: bump version to 2026.3.10

2026-03-11 23:29:53 +00:00

logger.test.ts

…

logger.ts

…

logging.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871)

2026-03-12 05:04:31 -04:00

utils.ts

Refactor: trim duplicate gateway/onboarding helpers and dead utils (#43871)

2026-03-12 05:04:31 -04:00

version.test.ts

…

version.ts

…