ack-chai
8843e2f064
fix: retry wallet import with widened range on shrink-refusal ( #2604 ) ( #2666 )
...
Build Docker container on push / Build image (push) Has been cancelled
Electron smoketest / smoketest (push) Has been cancelled
Extension Compatibility Check / extension-compat (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / cypress (push) Has been cancelled
Tests / extension-smoketest (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
Black Python Linter / black (push) Has been cancelled
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-08 22:34:48 +02:00
al-munazzim
bf0780d6bc
Protect HWI bridge settings with auth and CSRF ( #2679 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-08 22:09:44 +02:00
dependabot[bot]
7b4d90f917
Chore(deps): Bump braces and gulp ( #2668 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-08 21:57:14 +02:00
k9ert
cf491ee5b9
Chore(deps): bundle 5 green low-risk npm dependabot bumps ( #2690 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 21:42:22 +02:00
k9ert
9f890a90f8
Chore(deps): bundle 5 green low-risk dependabot bumps ( #2689 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-08 21:12:49 +02:00
dependabot[bot]
1a3ecf07fb
Chore(deps): Bump certifi from 2024.6.2 to 2024.7.4 ( #2669 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-08 20:30:18 +02:00
al-munazzim
426ed39aac
Warn that Specter auth does not encrypt data folder ( #2683 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-08-08 19:48:20 +02:00
Bunlong Heng
693338d3af
fix(swan): add timeout to remote HTTP requests to prevent hang ( #2687 )
...
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-08 19:13:31 +02:00
Róbert Nagy
3d554fbc2e
Warn on ColdCard Mk3 seed-entropy advisory at device setup ( #2676 )
...
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-08 18:33:01 +02:00
k9ert
48fea77b8a
fix: validate active API tokens ( #2685 )
2026-08-08 14:57:14 +02:00
k9ert
0b027f49fd
fix: dev-server crash in the specter-desktop repo after the project-rename ( #2686 )
...
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-08 14:12:46 +02:00
dependabot[bot]
fe232048d4
Chore(deps-dev): Bump electron from 39.8.5 to 39.8.10 in /pyinstaller/electron ( #2680 )
...
Build Docker container on push / Build image (push) Has been cancelled
Electron smoketest / smoketest (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / cypress (push) Has been cancelled
Tests / extension-smoketest (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
Black Python Linter / black (push) Has been cancelled
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 10:57:20 +02:00
al-munazzim
54b3616b40
fix: restore Ledger udev hidraw fallback ( #2633 )
...
Build Docker container on push / Build image (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / cypress (push) Has been cancelled
Tests / extension-smoketest (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
Black Python Linter / black (push) Has been cancelled
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-08-04 16:56:52 +02:00
dependabot[bot]
44c5fdeaad
Chore(deps): Bump jinja2 from 3.1.4 to 3.1.6 ( #2670 )
...
Build Docker container on push / Build image (push) Has been cancelled
Extension Compatibility Check / extension-compat (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / cypress (push) Has been cancelled
Tests / extension-smoketest (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
Black Python Linter / black (push) Has been cancelled
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 21:13:02 +02:00
k9ert
febcf619d9
Bump Spectrum to 0.8.0 ( #2641 )
Build Docker container on push / Build image (push) Has been cancelled
Extension Compatibility Check / extension-compat (push) Has been cancelled
Tests / test (push) Has been cancelled
Tests / cypress (push) Has been cancelled
Tests / extension-smoketest (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
Black Python Linter / black (push) Has been cancelled
2026-06-29 14:35:14 +02:00
k9ert
314a8579a0
deps: bump hwi 2.4.0 -> 3.1.0 (drops Python 3.7/3.8) ( #2616 )
2026-05-22 09:08:28 +02:00
Oren
a1a82082dd
Update specterext-timelockrecovery to v0.2.3 ( #2620 )
2026-05-17 21:15:57 +02:00
al-munazzim
64139ebdb7
ci: harden elements GPG key import in install_noded.sh ( #2621 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-05-11 21:22:50 +02:00
k9ert
9e43afbdd0
Chore(deps): Security — high-severity pip bumps (incremental) ( #2614 )
2026-04-23 08:46:33 +02:00
k9ert
5a4f24295f
ci: cache electron binaries + retry downloads on 502 ( #2612 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 09:29:09 +02:00
k9ert
a793e2dce8
test: bump tested bitcoind to v27.2.0 ( #2609 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 22:27:32 +02:00
k9ert
6b7013066d
Chore(deps): Security — bump h11 and form-data ( #2613 )
2026-04-19 22:01:56 +02:00
dependabot[bot]
c183c772a7
Chore(deps): Bump tar and electron-builder in /pyinstaller/electron ( #2593 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-19 20:35:32 +02:00
k9ert
fdd1cd8f3c
ci: retire Cirrus + GitLab, consolidate on GitHub Actions ( #2610 )
...
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-19 18:32:29 +02:00
dependabot[bot]
62ea02657b
Chore(deps): Bump axios and wait-on ( #2592 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-17 22:33:20 +02:00
k9ert
a24df2eb50
ci: add GHA test workflow + GPG-verify bitcoind/elementsd downloads ( #2606 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 20:50:12 +02:00
k9ert
3e277689ef
ci: upgrade Node.js 12→18, migrate CI images to GHCR ( #2602 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 20:06:26 +02:00
k9ert
50d81434a8
Fix Electron stuck on splash in hwibridge mode ( #2600 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-12 14:42:52 +02:00
k9ert
496f3f5d79
docs(agents): refresh CI/release section post-GitLab migration ( #2605 )
2026-04-12 10:31:54 +02:00
dependabot[bot]
9780d82d70
Chore(deps): Bump psf/black from 22.3.0 to 26.3.0 in /.github/workflows ( #2561 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-11 13:15:37 +02:00
dependabot[bot]
36efc821de
Chore(deps-dev): Bump electron from 30.5.1 to 39.8.5 in /pyinstaller/electron ( #2591 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 14:57:43 +02:00
al-munazzim
3917c15e4f
chore: migrate PyInstaller 5.2 → 6.x, bump setuptools to 78.1.1 ( #2587 )
...
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-10 13:43:30 +02:00
dependabot[bot]
608d6a61e5
Chore(deps-dev): Bump lodash from 4.17.23 to 4.18.1 in /pyinstaller/electron ( #2586 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 13:22:06 +02:00
dependabot[bot]
d6c162eeaf
Chore(deps): Bump brace-expansion from 1.1.12 to 1.1.13 ( #2580 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 13:07:36 +02:00
dependabot[bot]
38b7dbf2a3
Chore(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 ( #2576 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-10 12:57:37 +02:00
Copilot
69dae28c63
Fix offline crash in Electron app: guard undefined response in download HEAD request and show user-facing error ( #2595 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-04-09 16:05:52 +02:00
al-munazzim
041df50d0d
Fix open redirect bypass via percent-encoded characters (issue #2590 ) ( #2596 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 15:17:11 +02:00
k9ert
5546b1f068
fix: auto-create BTC node from env vars on fresh install ( #2598 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 14:56:36 +02:00
Oren
d222a8be29
Update specterext-timelockrecovery to version 0.2.1 ( #2589 )
2026-04-08 21:23:22 +02:00
al-munazzim
790c3ae138
dep: bump requests 2.26.0 → 2.31.0 (security) ( #2575 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 18:00:04 +02:00
al-munazzim
782d4f34e7
ci: add extension compatibility check workflow ( #2585 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
2026-04-02 17:48:19 +02:00
dependabot[bot]
5ab9c08c26
Chore(deps-dev): Bump @xmldom/xmldom from 0.8.10 to 0.8.12 in /pyinstaller/electron ( #2581 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 16:53:12 +02:00
dependabot[bot]
6bd279dff3
Chore(deps): Bump lodash from 4.17.23 to 4.18.1 ( #2584 )
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 16:31:01 +02:00
Abhishek Kumar
92951a4f33
Add startup warning when SECRET_KEY is a known default ( #2552 )
2026-04-02 15:27:49 +02:00
Abhishek Kumar
b6c230d1cb
Replace deprecated distutils usage (removed in Python 3.12) ( #2550 )
...
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:06:58 +02:00
al-munazzim
fdea9325f9
fix: pass SETUPTOOLS_SCM_PRETEND_VERSION to Docker build ( #2582 )
...
Co-authored-by: Nazim <nazim@openclaw.ai>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
2026-04-02 14:50:01 +02:00
k9ert
15d5c414b5
Fix floating point rounding in wallet balance properties ( #2583 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 14:02:00 +02:00
Oren
8ebf175b4b
Install specterext-timelockrecovery ( #2489 )
2026-03-28 22:09:34 +01:00
x19216888-stack
5101e4e317
Fix: Jade connect() crashes due to incorrect async protocol handling ( #2578 )
2026-03-28 09:37:40 +01:00
Copilot
248bed824f
Fix KeyError on malformed Bitcoin Core RPC responses ( #2532 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: k9ert <117085+k9ert@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-27 11:12:18 +01:00
