mirror of
https://github.com/openclaw/openclaw.git
synced 2026-10-26 10:13:27 +08:00
Vito CappelloandVACInc
670a7ab33b
* feat(acpx): let operators keep Gateway env out of ACP agents * build(acpx): update acpx to 0.21.0 (contains openclaw/acpx#897) --------- Co-authored-by: VACInc <3279061+VACInc@users.noreply.github.com>
196 lines
7.5 KiB
YAML
196 lines
7.5 KiB
YAML
packages:
|
|
- .
|
|
- ui
|
|
- packages/*
|
|
- extensions/*
|
|
- examples/*
|
|
- tools/solid-lint
|
|
|
|
minimumReleaseAge: 10080
|
|
minimumReleaseAgeStrict: true
|
|
|
|
# Trusted Codex runtimes are outside the dependency cooldown.
|
|
minimumReleaseAgeExclude:
|
|
- "@openai/codex"
|
|
- "@openai/codex-*"
|
|
# Solid itself is exempt from the release-age gate (Peter, 2026-10-11).
|
|
- "solid-js"
|
|
- "@solidjs/*"
|
|
# Peter approved 2026-10-24: solid-js rc.18 transitive SSR/hydration serialization dependencies.
|
|
- "seroval@1.7.0"
|
|
- "seroval-plugins@1.7.0"
|
|
# Reviewed pnpm security bump (#179992); remove after 2026-10-28T11:16:18.199Z.
|
|
- "pnpm@12.15.0"
|
|
- "@pnpm/exe.android-arm64@12.15.0"
|
|
- "@pnpm/exe.android-x64@12.15.0"
|
|
- "@pnpm/exe.darwin-arm64@12.15.0"
|
|
- "@pnpm/exe.darwin-x64@12.15.0"
|
|
- "@pnpm/exe.freebsd-x64@12.15.0"
|
|
- "@pnpm/exe.linux-arm64-musl@12.15.0"
|
|
- "@pnpm/exe.linux-arm64@12.15.0"
|
|
- "@pnpm/exe.linux-ppc64@12.15.0"
|
|
- "@pnpm/exe.linux-riscv64@12.15.0"
|
|
- "@pnpm/exe.linux-s390x@12.15.0"
|
|
- "@pnpm/exe.linux-x64-musl@12.15.0"
|
|
- "@pnpm/exe.linux-x64@12.15.0"
|
|
- "@pnpm/exe.win32-arm64@12.15.0"
|
|
- "@pnpm/exe.win32-x64@12.15.0"
|
|
# Reviewed Edge TTS 403 fix; remove after 2026-10-19T16:27:27.581Z.
|
|
- "node-edge-tts@1.2.11"
|
|
# Reviewed acpx 0.21.0 release (agent process env controls, openclaw/acpx#897); remove after 2026-10-31T00:42:33.101Z.
|
|
- "acpx@0.21.0"
|
|
# Reviewed fs-safe 0.26.13 release and native helpers; remove after 2026-10-31T07:48:44.970Z.
|
|
- "@openclaw/fs-safe@0.26.13"
|
|
- "@openclaw/fs-safe-darwin-arm64@0.26.13"
|
|
- "@openclaw/fs-safe-darwin-x64@0.26.13"
|
|
- "@openclaw/fs-safe-freebsd-arm64@0.26.13"
|
|
- "@openclaw/fs-safe-freebsd-x64@0.26.13"
|
|
- "@openclaw/fs-safe-linux-arm64-gnu@0.26.13"
|
|
- "@openclaw/fs-safe-linux-arm64-musl@0.26.13"
|
|
- "@openclaw/fs-safe-linux-x64-gnu@0.26.13"
|
|
- "@openclaw/fs-safe-linux-x64-musl@0.26.13"
|
|
- "@openclaw/fs-safe-win32-arm64-msvc@0.26.13"
|
|
- "@openclaw/fs-safe-win32-x64-msvc@0.26.13"
|
|
# Reviewed proc-safe 0.4.2 release and native helpers; remove after 2026-10-26T00:51:31.079Z.
|
|
- "@openclaw/proc-safe@0.4.2"
|
|
- "@openclaw/proc-safe-darwin-arm64@0.4.2"
|
|
- "@openclaw/proc-safe-darwin-x64@0.4.2"
|
|
- "@openclaw/proc-safe-freebsd-arm64@0.4.2"
|
|
- "@openclaw/proc-safe-freebsd-x64@0.4.2"
|
|
- "@openclaw/proc-safe-linux-arm64-gnu@0.4.2"
|
|
- "@openclaw/proc-safe-linux-arm64-musl@0.4.2"
|
|
- "@openclaw/proc-safe-linux-x64-gnu@0.4.2"
|
|
- "@openclaw/proc-safe-linux-x64-musl@0.4.2"
|
|
- "@openclaw/proc-safe-win32-arm64-msvc@0.4.2"
|
|
- "@openclaw/proc-safe-win32-x64-msvc@0.4.2"
|
|
# Draft tsrs type-check trial (obviyus); remove after 2026-10-23T16:59:18.996Z.
|
|
- "tsrs@0.16.0-ts7.1.0-dev.20260929"
|
|
- "@tsrs/darwin-arm64@0.16.0-ts7.1.0-dev.20260929"
|
|
- "@tsrs/linux-arm64-gnu@0.16.0-ts7.1.0-dev.20260929"
|
|
- "@tsrs/linux-arm64-musl@0.16.0-ts7.1.0-dev.20260929"
|
|
- "@tsrs/linux-x64-gnu@0.16.0-ts7.1.0-dev.20260929"
|
|
- "@tsrs/linux-x64-musl@0.16.0-ts7.1.0-dev.20260929"
|
|
# Claude ACP adapter bump for CVE-2026-111497 (brotli fix in SDK 0.3.309 binaries); remove after 2026-10-30T20:00:57.929Z.
|
|
- "@agentclientprotocol/claude-agent-acp@0.95.0"
|
|
- "@agentclientprotocol/sdk@2.0.1"
|
|
- "@anthropic-ai/claude-agent-sdk@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-darwin-arm64@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-darwin-x64@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-linux-arm64-musl@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-linux-arm64@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-linux-x64-musl@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-linux-x64@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-win32-arm64@0.3.309"
|
|
- "@anthropic-ai/claude-agent-sdk-win32-x64@0.3.309"
|
|
|
|
# Isolated installs let pnpm reuse whole-package APFS clones instead of relinking every file.
|
|
nodeLinker: isolated
|
|
# Private inodes keep sibling installs from changing compiler input ctimes.
|
|
packageImportMethod: clone-or-copy
|
|
# GWTs share node_modules; script commands must not reconcile that shared install.
|
|
verifyDepsBeforeRun: false
|
|
blockExoticSubdeps: true
|
|
|
|
overrides:
|
|
# Memory LanceDB supplies vectors; WhatsApp prepares thumbnails with Rastermill.
|
|
"@lancedb/lancedb>@huggingface/transformers": "-"
|
|
"baileys>sharp": "-"
|
|
"baileys>audio-decode": 3.12.0
|
|
"chevrotain>lodash-es": 4.18.1
|
|
"@chevrotain/cst-dts-gen>lodash-es": 4.18.1
|
|
"@chevrotain/gast>lodash-es": 4.18.1
|
|
"@agentclientprotocol/codex-acp@2.2.2>@openai/codex": 0.164.0
|
|
"@codemirror/commands@6.11.1>@codemirror/view": 6.43.14
|
|
"@codemirror/view@6.43.14>@codemirror/state": 6.7.6
|
|
"@anthropic-ai/sdk": 0.135.0
|
|
"@anthropic-ai/vertex-sdk@0.21.0>google-auth-library": 11.3.1
|
|
"@opentelemetry/core": 2.12.0
|
|
"@opentelemetry/propagator-jaeger": 2.12.0
|
|
"@aws-sdk/core": 3.978.3
|
|
"@aws-sdk/credential-provider-node": 3.972.86
|
|
"@aws-sdk/xml-builder": 3.972.41
|
|
"@hono/node-server": 2.1.5
|
|
axios: 1.20.0
|
|
fast-uri: 4.2.2
|
|
follow-redirects: 1.16.1
|
|
defu: 6.1.7
|
|
fast-xml-parser: 5.11.2
|
|
request: "npm:@cypress/request@4.0.1"
|
|
request-promise: "npm:@cypress/request-promise@5.0.0"
|
|
basic-ftp: 6.2.3
|
|
brace-expansion: 5.0.12
|
|
# GHSA-68fv-2mgg-jv7q: source-map-js <1.2.2 event-loop DoS (via css-tree).
|
|
source-map-js: 1.2.2
|
|
file-type: 22.2.0
|
|
form-data: 4.0.6
|
|
ip-address: 10.7.4
|
|
minimatch: 10.2.6
|
|
path-to-regexp: 8.4.2
|
|
proxy-addr: 2.0.8
|
|
qs: 6.16.1
|
|
node-domexception: "npm:@nolyfill/domexception@1.0.28"
|
|
typebox: 1.4.1
|
|
tar: 7.5.22
|
|
tough-cookie: 6.0.2
|
|
"tsdown>rolldown-plugin-dts": 0.28.8
|
|
# Keep both Lit analyzers on the same classic compiler until they support native TS7.
|
|
"web-component-analyzer@2.0.0>typescript": 6.0.3
|
|
"zca-js@2.2.0>tough-cookie": 6.0.2
|
|
yauzl: 3.4.0
|
|
protobufjs: 8.8.1
|
|
uuid: 14.0.3
|
|
|
|
allowBuilds:
|
|
onnxruntime-node: false
|
|
"@google/genai": true
|
|
"@lydell/node-pty": true
|
|
"@matrix-org/matrix-sdk-crypto-nodejs": true
|
|
"@tloncorp/api": true
|
|
"@tloncorp/tlon-skill": true
|
|
baileys: true
|
|
authenticate-pam: true
|
|
"@discordjs/opus": false
|
|
esbuild: true
|
|
koffi: false
|
|
protobufjs: true
|
|
tree-sitter-bash: false
|
|
openclaw: true
|
|
"@openclaw/proxyline": true
|
|
clawpdf: true
|
|
"@openclaw/crabline": true
|
|
rastermill: true
|
|
node-pty: true
|
|
|
|
packageExtensions:
|
|
"playwright-core@1.64.1":
|
|
dependencies:
|
|
acorn: 8.19.0
|
|
# rc14 imports long directly; protobufjs's transitive edge is not visible in isolated graphs.
|
|
"baileys@7.0.0-rc14":
|
|
dependencies:
|
|
long: 5.3.2
|
|
# The transient npm lock generator also needs the peer marked optional.
|
|
baileys:
|
|
peerDependenciesMeta:
|
|
sharp:
|
|
optional: true
|
|
|
|
patchedDependencies:
|
|
"apache-arrow@21.2.0": patches/apache-arrow@21.2.0.patch
|
|
"@shinyoshiaki/binary-data@0.6.1": patches/@shinyoshiaki__binary-data@0.6.1.patch
|
|
"@openclaw/crabline@0.1.30": patches/@openclaw__crabline@0.1.30.patch
|
|
playwright-core@1.64.1: patches/playwright-core@1.64.1.patch
|
|
minizlib@3.1.0: patches/minizlib@3.1.0.patch
|
|
tar@7.5.22: patches/tar@7.5.22.patch
|
|
"baileys@7.0.0-rc14": patches/baileys@7.0.0-rc14.patch
|
|
"matrix-js-sdk@43.0.0": patches/matrix-js-sdk@43.0.0.patch
|
|
"@novnc/novnc@1.7.0": patches/@novnc__novnc@1.7.0.patch
|
|
vitest@5.0.5: patches/vitest@5.0.5.patch
|
|
ghostty-web@0.4.0: patches/ghostty-web@0.4.0.patch
|
|
chrome-devtools-mcp@1.11.0: patches/chrome-devtools-mcp@1.11.0.patch
|
|
"@solidjs/web@2.0.0-rc.18": patches/@solidjs__web@2.0.0-rc.18.patch
|
|
"@solidjs/signals@2.0.0-rc.18": patches/@solidjs__signals@2.0.0-rc.18.patch
|
|
"@homebridge/ciao@1.3.12": patches/@homebridge__ciao@1.3.12.patch
|
|
proper-lockfile@4.1.2: patches/proper-lockfile@4.1.2.patch
|
|
"@clawdbot/lobster@2026.9.16": patches/@clawdbot__lobster@2026.9.16.patch
|