[codex] Fix macOS app copyright year by pejmanjohn · Pull Request #84385 · openclaw/openclaw

pejmanjohn · 2026-05-20T01:19:12Z

Summary

Problem: the macOS app About settings showed the copyright year as 2025.
Solution: update the displayed copyright year to 2026.
What changed: apps/macos/Sources/OpenClaw/AboutSettings.swift now renders © 2026 Peter Steinberger — MIT License.
What did NOT change (scope boundary): no licensing terms, ownership, app metadata, signing, packaging, or runtime behavior changed.

Motivation

The macOS app About screen should display the current copyright year shown in the reported UI.

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

Closes #
Related #
This PR fixes a bug or regression

Real behavior proof (required for external PRs)

Behavior addressed: macOS About settings copyright text should show 2026 instead of 2025.
Real environment tested: macOS local checkout, SwiftPM package in apps/macos.
Exact steps or command run after this patch: git diff --check && swift build --product OpenClaw.
Evidence after fix: rg -n "© 202[0-9] Peter Steinberger" apps/macos/Sources/OpenClaw/AboutSettings.swift returned 80: Text("© 2026 Peter Steinberger — MIT License."), and swift build --product OpenClaw completed successfully.
Observed result after fix: the About settings source now renders the 2026 copyright string and the macOS app target compiles.
What was not tested: I did not package/sign or launch the full macOS app UI in this PR.
Before evidence: reporter screenshot showed the About settings copyright year as 2025.

Root Cause (if applicable)

Root cause: the About settings copyright text was hardcoded to 2025.
Missing detection / guardrail: no automated check currently validates the About screen copyright year.
Contributing context (if known): N/A.

Regression Test Plan (if applicable)

Coverage level that should have caught this:
- Unit test
- Seam / integration test
- End-to-end test
- Existing coverage already sufficient
Target test or file: N/A.
Scenario the test should lock in: N/A for a one-character static UI string correction.
Why this is the smallest reliable guardrail: direct source inspection plus macOS target compilation verifies the changed UI string without adding brittle current-year test churn.
Existing test that already covers this (if any): N/A.
If no new test is added, why not: a dedicated test for a static copyright year would mostly duplicate the literal and create annual maintenance churn.

User-visible / Behavior Changes

Diagram (if applicable)

N/A.

Security Impact (required)

New permissions/capabilities? (No)
Secrets/tokens handling changed? (No)
New/changed network calls? (No)
Command/tool execution surface changed? (No)
Data access scope changed? (No)
If any Yes, explain risk + mitigation: N/A.

Repro + Verification

Environment

OS: macOS
Runtime/container: SwiftPM local build
Model/provider: N/A
Integration/channel (if any): macOS app
Relevant config (redacted): N/A

Steps

Inspect apps/macos/Sources/OpenClaw/AboutSettings.swift.
Confirm the copyright text says 2026.
Build the macOS app target.

Expected

About settings source contains © 2026 Peter Steinberger — MIT License..
swift build --product OpenClaw succeeds.

Actual

About settings source contains © 2026 Peter Steinberger — MIT License..
swift build --product OpenClaw succeeded.

Evidence

Attach at least one:

Failing test/log before + passing after
Trace/log snippets
Screenshot/recording
Perf numbers (if relevant)

Verification run:

git diff --check
swift build --product OpenClaw

Visual proof from the built macOS About settings screen:

Additional source proof:

80:            Text("© 2026 Peter Steinberger — MIT License.")

Human Verification (required)

What you personally verified (not just CI), and how:

Verified scenarios: the source literal now uses 2026; the macOS app target builds successfully; the built macOS About settings screen visually shows © 2026 Peter Steinberger — MIT License.
Edge cases checked: N/A for static About screen text.
What you did not verify: N/A.

Review Conversations

I replied to or resolved every bot review conversation I addressed in this PR.
I left unresolved only the conversations that still need reviewer or maintainer judgment.

No review conversations exist yet.

Compatibility / Migration

Backward compatible? (Yes)
Config/env changes? (No)
Migration needed? (No)
If yes, exact upgrade steps: N/A.

Risks and Mitigations

None.

AI Assistance

This PR was AI-assisted with Codex. Local codex review --base origin/main was attempted, but the Codex CLI failed with 401 Unauthorized before producing a review.

clawsweeper · 2026-05-20T01:20:19Z

Codex review: needs changes before merge.

Workflow note: Future ClawSweeper reviews update this same comment in place.

How this review workflow works

ClawSweeper keeps one durable marker-backed review comment per issue or PR.
Re-runs edit this comment so the latest verdict, findings, and automation markers stay together instead of adding duplicate bot comments.
A fresh review can be triggered by eligible @clawsweeper re-review comments, exact-item GitHub events, scheduled/background review runs, or manual workflow dispatch.
PR/issue authors and users with repository write access can comment @clawsweeper re-review or @clawsweeper re-run on an open PR or issue to request a fresh review only.
Maintainers can also comment @clawsweeper review to request a fresh review only.
Fresh-review commands do not start repair, autofix, rebase, CI repair, or automerge.
Maintainer-only repair and merge flows require explicit commands such as @clawsweeper autofix, @clawsweeper automerge, @clawsweeper fix ci, or @clawsweeper address review.
Maintainers can comment @clawsweeper explain to ask for more context, or @clawsweeper stop to stop active automation.

Summary
The PR updates the macOS About settings copyright text to 2026, adds a changelog entry, and includes repair commits touching changed-check SwiftLint behavior, OpenRouter provider routing spread syntax, and a status redaction test fixture.

Reproducibility: yes. via source inspection. Current main hardcodes 2025 in AboutSettings and SettingsRootView routes the visible About tab there; the PR proof shows the patched built UI rendering 2026.

PR rating
Overall: 🦐 gold shrimp
Proof: 🦞 diamond lobster ✨ media proof bonus
Patch quality: 🦐 gold shrimp
Summary: The visible behavior proof is strong, but the current patch is blocked by an unrelated changed-check automation regression risk.

Rank-up moves:

Restore the Testbox-only SwiftLint skip guard or split that automation policy change into its own PR.
Rerun exact-head checks after narrowing the branch.

What the crustacean ranks mean

🦀 challenger crab: rare, exceptional readiness with strong proof, clean implementation, and convincing validation.
🦞 diamond lobster: very strong readiness with only minor maintainer review expected.
🐚 platinum hermit: good normal PR, likely mergeable with ordinary maintainer review.
🦐 gold shrimp: useful signal, but proof or patch confidence is still limited.
🦪 silver shellfish: thin signal; proof, validation, or implementation needs work.
🧂 unranked krab: not merge-ready because proof is missing/unusable or there are serious correctness or safety concerns.
🌊 off-meta tidepool: rating does not apply to this item.

Shiny media proof means a screenshot, video, or linked artifact directly shows the changed behavior. Runtime, network, CSP, and security claims still need visible diagnostics.

Real behavior proof
Sufficient (screenshot): The PR body and linked artifact provide after-fix visual proof from the macOS About screen showing the 2026 copyright line.

Risk before merge

The current head changes changed-check SwiftLint skipping outside the About copy fix; normal non-macOS changed gates can now skip lint:apps whenever SwiftLint is absent instead of only inside remote Testbox.
The provided automerge timeline reports a failed exact-head GitHub check for 838679a, so merge should wait for that check to be understood or rerun green.

Maintainer options:

Narrow the branch before merge (recommended)
Remove or split the changed-check policy broadening while preserving the AboutSettings and changelog changes, then rerun exact-head validation.
Accept the automation policy change
A maintainer can intentionally merge the broader non-macOS SwiftLint skip here, but should review it as an automation policy change rather than as part of the copy fix.
Pause for failed-check logs
If the failed checks-node-core-runtime-infra-state result is not transient, pause automerge until its logs identify whether a separate repair is needed.

Copy recommended automerge instruction

@clawsweeper automerge

Special instructions:
Keep this PR scoped to the macOS About copyright-year fix: preserve apps/macos/Sources/OpenClaw/AboutSettings.swift and the CHANGELOG.md entry, restore scripts/check-changed.mjs and test/scripts/changed-lanes.test.ts to current-main behavior unless a maintainer explicitly approves the broader SwiftLint-skip policy, and leave unrelated OpenRouter/status fixture churn out unless it is still required after rebasing. Validate with git diff --check and the focused changed-lanes test if scripts remain touched.

Next step before merge
A narrow automated repair can keep the copyright fix while restoring or splitting the unrelated changed-check behavior change.

Security
Cleared: No concrete security or supply-chain issue was found; the concerning change is validation automation scope, not secrets, dependencies, permissions, networking, or code download behavior.

Review findings

[P2] Keep SwiftLint skips scoped to Testbox — scripts/check-changed.mjs:70

Review details

Best possible solution:

Keep the AboutSettings literal and changelog fix, but restore or split the unrelated changed-check automation change before merge unless a maintainer explicitly approves that broader policy in this PR.

Do we have a high-confidence way to reproduce the issue?

Yes, via source inspection. Current main hardcodes 2025 in AboutSettings and SettingsRootView routes the visible About tab there; the PR proof shows the patched built UI rendering 2026.

Is this the best way to solve the issue?

No for the current head as-is. Updating the single SwiftUI literal is the right fix, but broadening changed-check automation behavior should be restored, split, or explicitly approved before this PR merges.

Label changes:

add merge-risk: 🚨 automation: The branch changes changed-check SwiftLint skip behavior and already has a reported exact-head check failure in the automerge timeline.
add rating: 🦐 gold shrimp: Current PR rating is 🦐 gold shrimp because proof is 🦞 diamond lobster, patch quality is 🦐 gold shrimp, and The visible behavior proof is strong, but the current patch is blocked by an unrelated changed-check automation regression risk.
add status: 🚀 automerge armed: This PR is in ClawSweeper's automerge lane. Sufficient (screenshot): The PR body and linked artifact provide after-fix visual proof from the macOS About screen showing the 2026 copyright line.
remove rating: 🦞 diamond lobster: Current PR rating is rating: 🦐 gold shrimp, so this older rating label is no longer current.
remove status: 👀 ready for maintainer look: Current PR status label is status: 🚀 automerge armed.

Label justifications:

P3: This is a low-risk macOS About screen copy fix, with the remaining concern limited to PR hygiene and validation automation.
merge-risk: 🚨 automation: The branch changes changed-check SwiftLint skip behavior and already has a reported exact-head check failure in the automerge timeline.
rating: 🦐 gold shrimp: Current PR rating is 🦐 gold shrimp because proof is 🦞 diamond lobster, patch quality is 🦐 gold shrimp, and The visible behavior proof is strong, but the current patch is blocked by an unrelated changed-check automation regression risk.
status: 🚀 automerge armed: This PR is in ClawSweeper's automerge lane. Sufficient (screenshot): The PR body and linked artifact provide after-fix visual proof from the macOS About screen showing the 2026 copyright line.
proof: sufficient: Contributor real behavior proof is sufficient. The PR body and linked artifact provide after-fix visual proof from the macOS About screen showing the 2026 copyright line.
proof: 📸 screenshot: Contributor real behavior proof includes screenshot evidence. The PR body and linked artifact provide after-fix visual proof from the macOS About screen showing the 2026 copyright line.

Full review comments:

[P2] Keep SwiftLint skips scoped to Testbox — scripts/check-changed.mjs:70
This now returns true for any non-macOS environment that lacks SwiftLint, so pnpm check:changed replaces lint:apps with a skip message on normal Linux hosts too. Current main limited that escape hatch to OPENCLAW_TESTBOX_REMOTE_RUN; please restore that guard or move the broader changed-gate policy to a dedicated review.
Confidence: 0.86

Overall correctness: patch is incorrect
Overall confidence: 0.86

Acceptance criteria:

git diff --check
node scripts/run-vitest.mjs test/scripts/changed-lanes.test.ts
swift build --product OpenClaw

What I checked:

Current main stale literal: Current main still hardcodes the About settings copyright line as 2025. (apps/macos/Sources/OpenClaw/AboutSettings.swift:80, 1a7669bc63a0)
Visible About route: SettingsRootView routes the About tab to AboutSettings, so the literal is on the visible macOS settings path. (apps/macos/Sources/OpenClaw/SettingsRootView.swift:169, 1a7669bc63a0)
PR head updates the visible literal: The current PR head renders the About settings copyright string as 2026. (apps/macos/Sources/OpenClaw/AboutSettings.swift:80, 838679ac5ec6)
Visual proof inspected: The supplied SVG artifact was decoded to its embedded JPEG and inspected; it shows the macOS About tab rendering the 2026 copyright line. (838679ac5ec6)
Changed-check behavior broadened: The PR head changes shouldSkipAppLintForMissingSwiftlint to skip app lint on any non-macOS environment without SwiftLint. (scripts/check-changed.mjs:70, 838679ac5ec6)
Current main scoped the skip to Testbox: Current main only skips app lint when OPENCLAW_TESTBOX_REMOTE_RUN is set, keeping normal changed gates explicit. (scripts/check-changed.mjs:71, 1a7669bc63a0)

Likely related people:

Ayaan Zaidi: git blame shows commit 357e3ec currently owns the AboutSettings literal, SettingsRootView About route, changed-check skip helper, and status redaction fixture lines involved in this review. (role: introduced behavior and recent area contributor; confidence: high; commits: 357e3ecc65e3; files: apps/macos/Sources/OpenClaw/AboutSettings.swift, apps/macos/Sources/OpenClaw/SettingsRootView.swift, scripts/check-changed.mjs)
@amknight: git blame and the commit body for ac69776 show the OpenRouter provider-routing helper touched by the repair came from the provider routing params change. (role: feature owner for adjacent touched provider code; confidence: high; commits: ac6977633092; files: extensions/openrouter/provider-routing.ts)
Peter Steinberger: git log -S configuredModel points to recent pinned-session model status work that explains why the status redaction fixture was adjacent to the repair. (role: recent adjacent status contributor; confidence: medium; commits: a13468320c63; files: src/commands/status.summary.redaction.test.ts, src/commands/status.types.ts)

Codex review notes: model gpt-5.5, reasoning high; reviewed against 1a7669bc63a0.

clawsweeper · 2026-05-20T01:26:08Z

ClawSweeper PR egg

✨ Hatched: 🥚 common Moonlit Test Hopper

Hatch command

Comment @clawsweeper hatch when this PR is hatchable.

Hatchability rules:

Merged PRs are hatchable.
Open PRs are hatchable when they are status: 👀 ready for maintainer look, status: 🚀 automerge armed, or labeled clawsweeper:automerge.
Closed unmerged PRs are hatchable only when one of those hatchable labels is still present in the durable record.

Rarity: 🥚 common.
Trait: sleeps inside passing CI.
Image traits: location diff observatory; accessory proof snapshot camera; palette sunrise gold and clean white; mood calm; pose balancing on a branch marker; shell paper lantern shell; lighting tiny status-light glow; background gentle dashboard dots.
Share on X: post this hatch
Copy: My PR egg hatched a 🥚 common Moonlit Test Hopper in ClawSweeper.

What is this egg doing here?

Eggs appear after the PR passes real-behavior proof. It is here for vibes, not verdicts: it does not change labels, ratings, merge decisions, or automation.
The shell reacts to review momentum: open follow-up work warms it up, re-review makes it wobble, and a clean final review lets it hatch.
Hatchability usually comes from sufficient real-behavior proof, no blocking P0/P1/P2 findings, no security attention needed, and clean correctness. A merged PR is already final, so merge makes the egg hatchable independently.
The hatch is seeded from this repository and PR number, so the same PR keeps the same creature; the reviewed head SHA can only change safe visual details.
Rarity is just collectible sparkle: 🥚 common, 🌱 uncommon, 💎 rare, ✨ glimmer, and 🌈 legendary.

pejmanjohn · 2026-05-20T03:18:28Z

Visual proof from the built macOS app About screen:

pejmanjohn · 2026-05-20T03:19:29Z

@clawsweeper re-review

clawsweeper · 2026-05-20T03:21:22Z

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

State: Complete
Detail: The targeted re-review finished, the durable review comment was updated, and the synced verdict was routed.
Run: https://github.com/openclaw/clawsweeper/actions/runs/26139729229
Updated: 2026-05-20T03:45:32.874Z

pejmanjohn · 2026-05-20T03:56:47Z

@clawsweeper hatch

clawsweeper · 2026-05-20T03:58:40Z

🦞👀
ClawSweeper PR egg hatch requested.

I queued a comment sync for this PR. If the egg is hatchable, ClawSweeper will generate the image once and update the existing review comment.
Action: PR egg hatch queued (workflow sweep.yml, event repository_dispatch).
The ASCII egg stays as the fallback.

Takhoffman · 2026-05-20T14:30:47Z

@clawsweeper merge

Takhoffman · 2026-05-20T17:56:09Z

@clawsweeper automerge

clawsweeper · 2026-05-20T17:59:09Z

🦞🔧
ClawSweeper automerge is enabled.

Head: 838679ac5ec6
Label: clawsweeper:automerge
Action: repair worker queued. Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119
Flow: review this head, repair/rebase only if needed, then re-review the exact repaired head before merge.

Draft PRs stay fix-only until GitHub marks them ready for review. Pause with /clawsweeper stop.

Automerge progress:

2026-05-20 19:21:26 UTC validation plan (passed) in 17s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 pnpm check:changed; pnpm lint; pnpm check:test-types

2026-05-20 19:21:41 UTC Codex write preflight (passed) in 32s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 danger-full-access

2026-05-20 19:25:47 UTC Codex edit 1 4d7e9392f61a (complete) in 4m 37s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 exit 0

2026-05-20 19:40:28 UTC validation and review 1 838679ac5ec6 (complete) in 19m 19s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 already-current

2026-05-20 19:40:34 UTC repair completed 838679ac5ec6 (branch updated) in 19m 24s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 initial automerge rebase is delegated to Codex repair

2026-05-20 19:40:33 UTC review queued 838679ac5ec6 (after repair)

2026-05-20 19:43:11 UTC automerge wait 838679ac5ec6 (blocked) in 22m 2s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 GitHub checks failed: checks-node-core-runtime-infra-state:FAILURE

2026-05-20 19:43:12 UTC repair finished 838679ac5ec6 (pushed) in 22m 3s Run: https://github.com/openclaw/clawsweeper/actions/runs/26180475642 repair_contributor_branch

2026-05-20 23:22:41 UTC review queued 838679ac5ec6 (queued)

2026-05-20 23:24:41 UTC repair queued 838679ac5ec6 (autonomous) Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119

2026-05-20 23:27:27 UTC repair started (running) in 4s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 automerge-openclaw-openclaw-84385

2026-05-20 23:27:39 UTC validation plan (passed) in 15s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 pnpm check:changed; pnpm lint; pnpm check:test-types

2026-05-20 23:27:54 UTC Codex write preflight (passed) in 30s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 danger-full-access

2026-05-20 23:31:41 UTC Codex edit 1 b58572e283bc (complete) in 4m 17s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 exit 0

2026-05-20 23:38:30 UTC validation and review 1 26816c18d679 (complete) in 11m 6s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 already-current

2026-05-20 23:39:20 UTC repair finished 26816c18d679 (opened) in 11m 56s Run: https://github.com/openclaw/clawsweeper/actions/runs/26195801119 open_fix_pr

…5 (validation-1)

…5 (validation-2)

…5 (validation-3)

clawsweeper · 2026-05-20T19:45:03Z

🦞🧹
ClawSweeper re-review requested.

I asked ClawSweeper to review this item again.
Action: item re-review queued (workflow sweep.yml, event repository_dispatch).
Result: the existing ClawSweeper review comment will be edited in place when the review finishes.

Re-review progress:

State: Complete
Detail: The targeted re-review finished, the durable review comment was updated, and the synced verdict was routed.
Run: https://github.com/openclaw/clawsweeper/actions/runs/26185876716
Updated: 2026-05-20T19:54:09.875Z

Takhoffman · 2026-05-20T23:22:41Z

@clawsweeper automerge

clawsweeper · 2026-05-20T23:39:18Z

ClawSweeper 🐠 reef update

Thanks for the work on this. ClawSweeper could not push to this branch with the permissions available, so it opened a narrow replacement PR to keep the fix swimming forward without losing the contributor trail. not your fault, just GitHub branch-permission tides.

Why replacement: ClawSweeper could not update the source PR branch directly; GitHub did not grant sufficient push rights to the bot for that branch.
Replacement PR: #84729
Why close: this run explicitly closes the superseded source PR after the credited replacement PR is open, so review continues in one place.
This closeout is intentional for this run: the replacement PR is now the active review lane.
Credit follows the fix over to the replacement PR. no sneaky treasure grab.
Co-author credit kept:

@pejmanjohn: Co-authored-by: Pejman Pour-Moezzi 481729+pejmanjohn@users.noreply.github.com

fish notes: model gpt-5.5, reasoning high; reviewed against 26816c1.

…026.5.20) (#615) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/openclaw/openclaw](https://openclaw.ai) ([source](https://github.com/openclaw/openclaw)) | patch | `2026.5.19` → `2026.5.20` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/567) for more information. --- ### Release Notes <details> <summary>openclaw/openclaw (ghcr.io/openclaw/openclaw)</summary> ### [`v2026.5.20`](https://github.com/openclaw/openclaw/blob/HEAD/CHANGELOG.md#2026520) [Compare Source](openclaw/openclaw@v2026.5.19...v2026.5.20) ##### Changes - Exec approvals: remove the old `cat SKILL.md && printf ... && <skill-wrapper>` allowlist compatibility path so skill files must be loaded with the read tool and only the real skill executable is auto-allowed. - Discord: let voice sessions follow configured Discord users into voice channels, with allowed-channel checks, multi-user handoff, bounded reconciliation, and DAVE recovery preservation. ([#84264](openclaw/openclaw#84264)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Discord/voice: include bounded `IDENTITY.md`, `USER.md`, and `SOUL.md` profile context in realtime voice session instructions by default, with `voice.realtime.bootstrapContextFiles: []` available to disable it. ([#84499](openclaw/openclaw#84499)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Dependencies: bump the bundled Codex harness to `@openai/codex` `0.132.0` and refresh the app-server model-list docs for the new catalog. - CLI/policy: add the bundled Policy plugin for policy-backed channel conformance checks, doctor lint findings, and opt-in workspace repair. ([#80407](openclaw/openclaw#80407)) Thanks [@giodl73-repo](https://github.com/giodl73-repo). - Agents/config: allow `agents.list[].experimental.localModelLean` so lean local-model mode can be enabled for one configured agent instead of globally. - Providers/xAI: add device-code OAuth login so remote and headless setups can authorize xAI without a localhost browser callback. ([#84005](openclaw/openclaw#84005)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Providers/OpenRouter: honor provider-level `params.provider` routing policy for OpenRouter requests, with model and agent params overriding the defaults. Thanks [@amknight](https://github.com/amknight). ##### Fixes - CLI/tasks: include stale-running task maintenance decisions in `openclaw tasks maintenance --json` so retained and reconcile candidates explain backing-session, cron, CLI, and wedged-subagent state. ([#84691](openclaw/openclaw#84691)) Thanks [@efpiva](https://github.com/efpiva). - Codex app-server: keep system-prompt reports working when bootstrap hooks provide workspace files with only a path and content, so hook-supplied SOUL/IDENTITY/TOOLS/USER context still reports injected characters correctly. ([#84736](openclaw/openclaw#84736)) Thanks [@JARVIS-Glasses](https://github.com/JARVIS-Glasses). - Providers/MiniMax music: stop advertising `durationSeconds` control and remove prompt-injected duration hints, so `music_generate` reports MiniMax duration as an unsupported override instead of suggesting MiniMax can enforce track length. Fixes [#84508](openclaw/openclaw#84508). Thanks [@neeravmakwana](https://github.com/neeravmakwana). - Doctor: warn when sandbox tool policy hides configured MCP server tools before provider requests. ([#84699](openclaw/openclaw#84699)) Thanks [@nxmxbbd](https://github.com/nxmxbbd). - WhatsApp: update Baileys to `7.0.0-rc12`. - Build: suppress per-locale `rolldown-plugin-dts:fake-js` CommonJS dts warnings emitted while bundling the intentionally-inlined `zod/v4/locales/*.d.cts` files, so `pnpm build` output stays readable after the 0.25.1 plugin bump. Thanks [@romneyda](https://github.com/romneyda). - CLI/nodes: route lazy plugin-registration logs to stderr for JSON-mode `openclaw nodes` commands so stdout stays parseable. ([#84684](openclaw/openclaw#84684)) Thanks [@TurboTheTurtle](https://github.com/TurboTheTurtle). - Approvals: route manual `/approve` decisions through the trusted approval runtime so active exec and plugin approvals no longer look unknown or expired. - Mac app: update the About settings copyright year to 2026. ([#84385](openclaw/openclaw#84385)) Thanks [@pejmanjohn](https://github.com/pejmanjohn). - Dependencies: update `@openclaw/fs-safe` to `0.2.7` so OpenClaw's default Python-helper-off policy keeps best-effort Node write fallbacks for private stores, secret writes, run logs, and media attachments on Linux/macOS. - Infra/secrets: restore the fail-closed contract for `tryReadSecretFileSync` so credential loaders that pass `rejectSymlink: true` (Telegram, LINE, Zalo, IRC, Nextcloud Talk tokens) refuse symlinked credential files instead of silently accepting them, and the infra-state CI shard's secret-file symlink test passes again. Thanks [@romneyda](https://github.com/romneyda). - Browser: honor the configured image sanitization limit for screenshots and labeled snapshots so browser-captured images follow the same resize policy as other image results. ([#84595](openclaw/openclaw#84595)) - Doctor: remove unrecognized `models.providers.*.models[*].compat.thinkingFormat` values during `doctor --fix` so stale provider model config can validate after upgrade. Fixes [#77803](openclaw/openclaw#77803). - Doctor: warn when `openclaw.json` stores plaintext secret-bearing config fields, including model provider API keys and sensitive provider headers. ([#84718](openclaw/openclaw#84718)) Thanks [@lukaIvanic](https://github.com/lukaIvanic). - Status: show the configured default, session-selected model, reason, clear hint, and docs link when a session remains pinned to a model that differs from `agents.defaults.model.primary`. - WebChat: clear stale typing indicators when session change events mark the active chat run complete. - Mac app: keep local packaging signed with a stable app identity for permission testing and fix Control UI production builds under current Vite/Highlight.js exports. - macOS app: update the embedded Peekaboo bridge to 3.2.1 so OpenClaw-hosted UI automation works with current Peekaboo CLI capture flows. - Cron: deliver preferred final assistant output for successful scheduled runs when trailing plain tool warnings remain in diagnostics instead of marking the run failed. - fix(mattermost): fail closed on missing channel type \[AI]. ([#84091](openclaw/openclaw#84091)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Recheck rebuilt system.run argv \[AI]. ([#84090](openclaw/openclaw#84090)) Thanks [@pgondhi987](https://github.com/pgondhi987). - CLI: keep the private QA subcommand out of exported command descriptors unless `OPENCLAW_ENABLE_PRIVATE_QA_CLI=1`, so root help and subcommand markers match runtime registration. ([#84519](openclaw/openclaw#84519)) - CLI/cron: bound `openclaw cron show` job lookup pagination so non-advancing or unbounded `cron.list` responses fail instead of hanging the command. Fixes [#83856](openclaw/openclaw#83856). ([#83989](openclaw/openclaw#83989)) - Agents/messages: stop message-tool-only turns after a successful source-channel `message` send while keeping transcript mirrors under the session write lock. ([#84289](openclaw/openclaw#84289)) - Agents: filter silent heartbeat response-tool transcript artifacts out of embedded context snapshots so later user turns are not polluted by heartbeat no-op messages. ([#83477](openclaw/openclaw#83477)) Thanks [@fuller-stack-dev](https://github.com/fuller-stack-dev). - Agents/OpenAI: log repeated strict tool-schema downgrade diagnostics once per provider/model/tool signature, reducing duplicate debug noise while preserving `strict=false` fallback behavior. Fixes [#82930](openclaw/openclaw#82930). ([#82933](openclaw/openclaw#82933)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/code mode: spell out the `exec` tool's JavaScript/TypeScript, no Node module, and catalog-bridge constraints in model-visible schema text so agents can use enabled tools without trial-and-error. ([#84269](openclaw/openclaw#84269)) Thanks [@Kaspre](https://github.com/Kaspre). - Codex: give `image_generate` dynamic-tool calls a 120s default watchdog when no per-call or configured image timeout is set, so image generation no longer falls back to the generic 30s bridge timeout. ([#84254](openclaw/openclaw#84254)) Thanks [@moritzmmayerhofer](https://github.com/moritzmmayerhofer). - Codex: avoid duplicate dynamic tool terminal diagnostics while large diagnostic backlogs drain without blocking tool responses. ([#82937](openclaw/openclaw#82937)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI/message: include a stable top-level `messageId` in `openclaw message --json` output when channel sends return one. ([#84191](openclaw/openclaw#84191)) Thanks [@100menotu001](https://github.com/100menotu001). - Cron: preserve legacy top-level array `jobs.json` stores when loading or adding scheduled jobs so old cron jobs are no longer treated as an empty store during upgrade. Fixes [#60799](openclaw/openclaw#60799). ([#84433](openclaw/openclaw#84433)) Thanks [@IWhatsskill](https://github.com/IWhatsskill). - Gateway/agents: use an agent's `identity.name` in Gateway agent summaries when `agents.list[].name` is unset, so configured agent labels remain visible in clients. ([#84355](openclaw/openclaw#84355); refs [#57835](openclaw/openclaw#57835)) Thanks [@luoyanglang](https://github.com/luoyanglang). - Channels/replies: keep normal `/verbose` failed-tool progress compact in message-tool replies and prevent late text-only tool output from appearing after the final answer. ([#84303](openclaw/openclaw#84303)) Thanks [@VACInc](https://github.com/VACInc). - Plugins/hooks: apply a default 30-second timeout to `before_compaction` and `after_compaction` hooks so a hung plugin handler no longer blocks compaction completion. ([#84153](openclaw/openclaw#84153)) - Discord: preserve disabled presentation buttons when adapting and rendering Discord message controls. ([#84188](openclaw/openclaw#84188)) Thanks [@100menotu001](https://github.com/100menotu001). - Twitch: add a test-only client-manager registry reset helper so non-isolated Twitch tests can clear cached managers between cases. Fixes [#83887](openclaw/openclaw#83887). ([#84244](openclaw/openclaw#84244)) Thanks [@hclsys](https://github.com/hclsys). - Cron: run main-session scheduled work on a cron-owned wake lane while preserving reply delivery context, so background cron turns no longer block human main-session chat. Fixes [#82766](openclaw/openclaw#82766). ([#82767](openclaw/openclaw#82767)) Thanks [@galiniliev](https://github.com/galiniliev). - Cron: use structured embedded-run denial metadata for isolated scheduled tasks so blocked exec requests fail the job without treating ordinary assistant prose as a denial. ([#84067](openclaw/openclaw#84067)) Thanks [@abnershang](https://github.com/abnershang). - Cron: keep recovered tool warnings diagnostic for successful scheduled runs so final cron output is delivered instead of being replaced by a post-processing warning. ([#84045](openclaw/openclaw#84045)) Thanks [@abnershang](https://github.com/abnershang). - Plugins/perf: thread explicit plugin discovery results through `loadBundledCapabilityRuntimeRegistry`, `resolveBundledPluginSources`, and `listChannelCatalogEntries` so callers that already hold a discovery result skip redundant filesystem walks. Thanks [@SebTardif](https://github.com/SebTardif). - harden update restart script creation \[AI]. ([#84088](openclaw/openclaw#84088)) Thanks [@pgondhi987](https://github.com/pgondhi987). - Docker: keep the bundled Codex plugin in official release image keep lists so the default OpenAI agent harness remains available after Docker pruning. Fixes [#83613](openclaw/openclaw#83613). ([#83626](openclaw/openclaw#83626)) Thanks [@YuanHanzhong](https://github.com/YuanHanzhong). - CLI/channels: preserve the first line of `openclaw channels logs` output when the rolling tail window starts exactly on a line boundary, mirroring the already-fixed `readLogSlice` behavior in `src/logging/log-tail.ts`. - Control UI: treat terminal session status as authoritative over stale active-run flags so completed terminal runs stop showing abort/live UI. ([#84057](openclaw/openclaw#84057)) - CLI: preserve embedded equals signs in inline root option values instead of truncating after the second separator. ([#83995](openclaw/openclaw#83995)) Thanks [@ThiagoCAltoe](https://github.com/ThiagoCAltoe). - Matrix/config: accept `messages.queue.byChannel.matrix` queue overrides and keep queue provider schema/type keys aligned for Matrix, Google Chat, and Mattermost. Thanks [@bdjben](https://github.com/bdjben). - CLI: format `openclaw acp client` failures through the shared error formatter so object-shaped errors stay readable instead of printing `[object Object]`. Fixes [#83904](openclaw/openclaw#83904). ([#84080](openclaw/openclaw#84080)) - Providers/Ollama: default unknown-capabilities models to tool-capable so discovered native Ollama models can use tools when `/api/show` omits capabilities. ([#84055](openclaw/openclaw#84055)) Thanks [@dutifulbob](https://github.com/dutifulbob). - Installer/Windows: launch `install.ps1` onboarding as an attached child process so fresh native Windows installs do not freeze visibly at `Starting setup...` or corrupt the wizard's terminal rendering. - CLI/update: keep restart health checks working across one-version CLI/Gateway protocol skew and use the managed Gateway service Node for all follow-up commands even when the package root is unchanged, so `openclaw update` no longer silently switches the gateway to a different Node binary when multiple Node installations are present. Thanks [@amknight](https://github.com/amknight). - CLI/gateway: include the running Gateway version in `gateway status` JSON output, preserving existing server metadata while falling back to status RPC data for read probes. Fixes [#56222](openclaw/openclaw#56222). Thanks [@galiniliev](https://github.com/galiniliev). - Memory/search: close local embedding providers when active-memory searches time out so pending local model loads and embedding contexts are aborted and released. ([#83858](openclaw/openclaw#83858)) Thanks [@brokemac79](https://github.com/brokemac79). - CLI/nodes: request pending node surface approval scopes before `openclaw nodes approve` so exec-capable node approval can use admin-scoped Gateway credentials instead of failing with `missing scope: operator.admin`. ([#84392](openclaw/openclaw#84392)) Thanks [@joshavant](https://github.com/joshavant). - Gateway: reject slow node event sends before outbound buffers grow unbounded and log the rejected payload diagnostic. ([#84387](openclaw/openclaw#84387)) Thanks [@samzong](https://github.com/samzong). - Agents: include bounded trajectory queued-writer diagnostics in `pi-trajectory-flush` timeout warnings so flush stalls show pending writes, queued bytes, and append state. Fixes [#82961](openclaw/openclaw#82961). ([#82962](openclaw/openclaw#82962)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: recover stale completion announces by retrying unsupported transcript-wait wakes without transcript waiting and forcing a message-tool handoff when the requester run is already stale. Fixes [#83699](openclaw/openclaw#83699). ([#83700](openclaw/openclaw#83700)) Thanks [@galiniliev](https://github.com/galiniliev). - Agents/subagents: constrain wildcard subagent target allowlists to configured agents while preserving explicitly listed compatibility targets. Fixes [#84040](openclaw/openclaw#84040). ([#84357](openclaw/openclaw#84357)) Thanks [@joshavant](https://github.com/joshavant). - Providers/Anthropic: route Anthropic model refs selected with Claude CLI auth through the Claude CLI runtime so shorthand refs such as `anthropic/opus-4.7` no longer fall back to embedded Anthropic billing. Fixes [#84222](openclaw/openclaw#84222). ([#84374](openclaw/openclaw#84374)) Thanks [@joshavant](https://github.com/joshavant). - Agents: honor explicit `models.providers.<id>.timeoutSeconds` values above the default idle watchdog for cloud and self-hosted providers, so long first-token waits no longer fall back at \~120s when the provider timeout is higher. ([#83979](openclaw/openclaw#83979)) Thanks [@yujiawei](https://github.com/yujiawei). - Agents/Codex: keep encrypted Responses reasoning replay provenance-bound so stale mirrored Codex transcripts drop invalid encrypted content before request assembly while preserving matching same-session replay. Fixes [#83836](openclaw/openclaw#83836). ([#84367](openclaw/openclaw#84367)) Thanks [@joshavant](https://github.com/joshavant). - Agents/subagents: skip stale embedded-run wake probes for dormant completion requesters, so late subagent completions go straight to requester-agent/direct handoff instead of producing `reason=no_active_run` queue noise. ([#82964](openclaw/openclaw#82964)) Thanks [@galiniliev](https://github.com/galiniliev). - CLI: retry config snapshot reads after a transient failure so one rejected read no longer poisons later commands in the same process. ([#83931](openclaw/openclaw#83931)) Thanks [@honor2030](https://github.com/honor2030). - Media: decode URL path basenames before using them as remote media fallback filenames, so files like `My%20Report.pdf` are surfaced as `My Report.pdf`. Fixes [#84050](openclaw/openclaw#84050). ([#84052](openclaw/openclaw#84052)) Thanks [@jbetala7](https://github.com/jbetala7). - WhatsApp: clarify inbound group diagnostics so observed but unregistered groups point to `channels.whatsapp.groups` without changing routing or sender authorization. ([#83846](openclaw/openclaw#83846)) Thanks [@neeravmakwana](https://github.com/neeravmakwana). - WhatsApp: drain pending outbound deliveries on a 30s periodic timer in addition to the reconnect handler, so messages enqueued while the provider is already connected no longer wait for the next reconnect to send. ([#79083](openclaw/openclaw#79083)) Thanks [@Oviemudiaga](https://github.com/Oviemudiaga). - CLI/TUI: include gateway plugin slash commands in TUI autocomplete, so connected sessions can suggest plugin-owned commands exposed by the running Gateway. ([#83640](openclaw/openclaw#83640)) Thanks [@se7en-agent](https://github.com/se7en-agent). - Gateway/mobile: restore QR setup-code handoff of bounded operator tokens for iOS and Android onboarding while keeping admin and pairing scopes out of bootstrap. ([#83684](openclaw/openclaw#83684)) Thanks [@ngutman](https://github.com/ngutman). - iOS: repair Release archive compilation for the TestFlight build. ([#84255](openclaw/openclaw#84255)) Thanks [@ngutman](https://github.com/ngutman). - Agents/compaction: bound plugin-owned CLI transcript compaction with the host safety timeout so a hung context engine can no longer stall post-turn cleanup. ([#84083](openclaw/openclaw#84083)) Thanks [@100yenadmin](https://github.com/100yenadmin). - Control UI/usage: truncate long context skill, tool, and file names in the usage panel while keeping the full name available on hover. ([#42197](openclaw/openclaw#42197)) Thanks [@Rain120](https://github.com/Rain120). - Codex: respect explicit `models auth order set` and `config.auth.order` precedence over stale `lastGood` in `/codex account`, and show `no working credential` when every explicit-order profile is ineligible instead of marking a lower-ranked profile as active. Fixes [#84386](openclaw/openclaw#84386). ([#84412](openclaw/openclaw#84412)) Thanks [@openperf](https://github.com/openperf). - Agents: honor `messages.suppressToolErrors` for mutating tool failures so configured chat surfaces do not receive separate warning payloads. ([#81561](openclaw/openclaw#81561)) Thanks [@moeedahmed](https://github.com/moeedahmed). - Agents/fallback: surface billing guidance for mixed rate-limit plus billing fallback exhaustion instead of generic failure copy. Fixes [#79396](openclaw/openclaw#79396). ([#79489](openclaw/openclaw#79489)) Thanks [@aayushprsingh](https://github.com/aayushprsingh). </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://git.erwanleboucher.dev/eleboucher/homelab/pulls/615

openclaw-barnacle Bot added app: macos App: macos size: XS triage: blank-template Candidate: PR template appears mostly untouched. triage: needs-real-behavior-proof Candidate: external PR needs after-fix proof from a real setup. labels May 20, 2026

openclaw-barnacle Bot added proof: supplied External PR includes structured after-fix real behavior proof. and removed triage: needs-real-behavior-proof Candidate: external PR needs after-fix proof from a real setup. labels May 20, 2026

clawsweeper Bot added the clawsweeper:automerge Maintainer opted this PR into bounded ClawSweeper-reviewed automerge label May 20, 2026

Ada Brookson and others added 4 commits May 20, 2026 19:22

fix: update mac app copyright year

4d7e939

[codex] Fix macOS app copyright year

e2e3f67

fix(clawsweeper): address review for automerge-openclaw-openclaw-8438…

c365cb0

…5 (validation-1)

fix(clawsweeper): address review for automerge-openclaw-openclaw-8438…

d74ca70

…5 (validation-2)

fix(clawsweeper): address review for automerge-openclaw-openclaw-8438…

838679a

…5 (validation-3)

clawsweeper Bot force-pushed the codex/update-mac-copyright-year branch from 48d4eb9 to 838679a Compare May 20, 2026 19:40

openclaw-barnacle Bot added scripts Repository scripts commands Command implementations extensions: openrouter labels May 20, 2026

clawsweeper Bot mentioned this pull request May 20, 2026

[codex] Fix macOS app copyright year #84729

Merged

clawsweeper Bot closed this May 20, 2026

Uh oh!

Conversation

pejmanjohn commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Motivation

Change Type (select all)

Scope (select all touched areas)

Linked Issue/PR

Real behavior proof (required for external PRs)

Root Cause (if applicable)

Regression Test Plan (if applicable)

User-visible / Behavior Changes

Diagram (if applicable)

Security Impact (required)

Repro + Verification

Environment

Steps

Expected

Actual

Evidence

Human Verification (required)

Review Conversations

Compatibility / Migration

Risks and Mitigations

AI Assistance

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hatch command

Uh oh!

pejmanjohn commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pejmanjohn commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pejmanjohn commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026

Uh oh!

Takhoffman commented May 20, 2026

Uh oh!

Takhoffman commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

clawsweeper Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Takhoffman commented May 20, 2026

Uh oh!

clawsweeper Bot commented May 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

pejmanjohn commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

pejmanjohn commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading

clawsweeper Bot commented May 20, 2026 •

edited

Loading