Commit graph

2068 commits

Author SHA1 Message Date
k9ert
5a4f24295f
ci: cache electron binaries + retry downloads on 502 (#2612)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 09:29:09 +02:00
k9ert
a793e2dce8
test: bump tested bitcoind to v27.2.0 (#2609)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 22:27:32 +02:00
k9ert
6b7013066d
Chore(deps): Security — bump h11 and form-data (#2613) 2026-04-19 22:01:56 +02:00
dependabot[bot]
c183c772a7
Chore(deps): Bump tar and electron-builder in /pyinstaller/electron (#2593)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-19 20:35:32 +02:00
k9ert
fdd1cd8f3c
ci: retire Cirrus + GitLab, consolidate on GitHub Actions (#2610)
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 18:32:29 +02:00
dependabot[bot]
62ea02657b
Chore(deps): Bump axios and wait-on (#2592)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-17 22:33:20 +02:00
k9ert
a24df2eb50
ci: add GHA test workflow + GPG-verify bitcoind/elementsd downloads (#2606)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 20:50:12 +02:00
k9ert
3e277689ef
ci: upgrade Node.js 12→18, migrate CI images to GHCR (#2602)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 20:06:26 +02:00
k9ert
50d81434a8
Fix Electron stuck on splash in hwibridge mode (#2600)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 14:42:52 +02:00
k9ert
496f3f5d79
docs(agents): refresh CI/release section post-GitLab migration (#2605) 2026-04-12 10:31:54 +02:00
dependabot[bot]
9780d82d70
Chore(deps): Bump psf/black from 22.3.0 to 26.3.0 in /.github/workflows (#2561)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-11 13:15:37 +02:00
dependabot[bot]
36efc821de
Chore(deps-dev): Bump electron from 30.5.1 to 39.8.5 in /pyinstaller/electron (#2591)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 14:57:43 +02:00
al-munazzim
3917c15e4f
chore: migrate PyInstaller 5.2 → 6.x, bump setuptools to 78.1.1 (#2587)
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10 13:43:30 +02:00
dependabot[bot]
608d6a61e5
Chore(deps-dev): Bump lodash from 4.17.23 to 4.18.1 in /pyinstaller/electron (#2586)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 13:22:06 +02:00
dependabot[bot]
d6c162eeaf
Chore(deps): Bump brace-expansion from 1.1.12 to 1.1.13 (#2580)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 13:07:36 +02:00
dependabot[bot]
38b7dbf2a3
Chore(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 (#2576)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 12:57:37 +02:00
Copilot
69dae28c63
Fix offline crash in Electron app: guard undefined response in download HEAD request and show user-facing error (#2595)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-04-09 16:05:52 +02:00
al-munazzim
041df50d0d
Fix open redirect bypass via percent-encoded characters (issue #2590) (#2596)
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 15:17:11 +02:00
k9ert
5546b1f068
fix: auto-create BTC node from env vars on fresh install (#2598)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 14:56:36 +02:00
Oren
d222a8be29
Update specterext-timelockrecovery to version 0.2.1 (#2589) 2026-04-08 21:23:22 +02:00
al-munazzim
790c3ae138
dep: bump requests 2.26.0 → 2.31.0 (security) (#2575)
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 18:00:04 +02:00
al-munazzim
782d4f34e7
ci: add extension compatibility check workflow (#2585)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-04-02 17:48:19 +02:00
dependabot[bot]
5ab9c08c26
Chore(deps-dev): Bump @xmldom/xmldom from 0.8.10 to 0.8.12 in /pyinstaller/electron (#2581)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 16:53:12 +02:00
dependabot[bot]
6bd279dff3
Chore(deps): Bump lodash from 4.17.23 to 4.18.1 (#2584)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 16:31:01 +02:00
Abhishek Kumar
92951a4f33
Add startup warning when SECRET_KEY is a known default (#2552) 2026-04-02 15:27:49 +02:00
Abhishek Kumar
b6c230d1cb
Replace deprecated distutils usage (removed in Python 3.12) (#2550)
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:06:58 +02:00
al-munazzim
fdea9325f9
fix: pass SETUPTOOLS_SCM_PRETEND_VERSION to Docker build (#2582)
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-04-02 14:50:01 +02:00
k9ert
15d5c414b5
Fix floating point rounding in wallet balance properties (#2583)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 14:02:00 +02:00
Oren
8ebf175b4b
Install specterext-timelockrecovery (#2489) 2026-03-28 22:09:34 +01:00
x19216888-stack
5101e4e317
Fix: Jade connect() crashes due to incorrect async protocol handling (#2578) 2026-03-28 09:37:40 +01:00
Copilot
248bed824f
Fix KeyError on malformed Bitcoin Core RPC responses (#2532)
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-27 11:12:18 +01:00
roshii
2a2f4d5296
Warn user if imported key has derivation path different from xpub's depth (#2454)
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 09:38:35 +01:00
Michele Balistreri
2bc8444d11
add Keycard Shell support (#2505)
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 08:31:39 +01:00
al-munazzim
8365715a11
chore(deps): batch JS security updates (npm audit fix) (#2574)
Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-23 09:26:27 +01:00
al-munazzim
31524e43b9
fix: guard spectrum_endpoint.wallets_get behind extension check (#2535)
Co-authored-by: Nazim <al-munazzim@users.noreply.github.com>
2026-03-21 12:40:06 +01:00
al-munazzim
485bbbf5be
fix: skip missing extensions gracefully instead of crashing (#2536)
Co-authored-by: Nazim <al-munazzim@users.noreply.github.com>
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-21 12:21:04 +01:00
Abhishek Kumar
a65426d395
Remove duplicate imports in server.py (#2548) 2026-03-20 16:54:41 +01:00
al-munazzim
d2a8ddff3b
release: add Docker section to release notes template (#2570)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-20 12:38:51 +01:00
al-munazzim
9d83b3a620
fix: derive pip version from git tag instead of setuptools_scm (#2573)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-20 11:02:54 +01:00
al-munazzim
bc58dfab2a
fix: add --with-fingerprint for GPG trust setup on CI (#2572)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-20 10:19:41 +01:00
al-munazzim
88e0f58c41
fix: GPG signing on CI — set trust and explicit key selection (#2571)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-20 09:55:06 +01:00
al-munazzim
40fd9b24ac
release: update GPG signing key to Specter Signer 2026 (#2569)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-20 09:30:46 +01:00
al-munazzim
304649a8b4
fix: Python 3.12 compatibility — randint() no longer accepts floats (#2531)
Co-authored-by: Ayoub Zaki <ayoub.zaki@embetrix.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-19 14:13:00 +01:00
al-munazzim
a60e98ea8e
Fix: wrap livereload.js in DEBUG conditional (#2543)
Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>
2026-03-19 14:11:28 +01:00
al-munazzim
7fa79ed5f5
fix: defensive RPC response handling (#2546)
Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>
2026-03-19 13:47:12 +01:00
al-munazzim
8ebeb5f3e0
fix: correct macOS artifact name in release workflow (#2566)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-19 12:40:36 +01:00
al-munazzim
5589d6c308
fix: pin setuptools to 68.2.2 to fix pkg_resources issue (#2563)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-03-19 10:39:04 +01:00
al-munazzim
5b3a7935cb
Fix: replace print(e) with logger.debug in wallet.py (#2544)
Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-02-10 22:00:08 +01:00
al-munazzim
621dbd23ea
Fix typos in comments and strings (#2542)
Co-authored-by: al-munazzim <al-munazzim@users.noreply.github.com>
2026-02-10 21:36:09 +01:00
al-munazzim
c0655d3696
fix: add _arm64 suffix to macOS specterd binary name (#2529)
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-02-03 17:39:54 +01:00