Patrick Erichsen
edd4e01a07
feat: replace creators directory with official orgs ( #3247 )
2026-07-23 14:07:20 -07:00
Patrick Erichsen
a402451282
fix: prevent and repair skill lineage cycles ( #3246 )
...
* fix: prevent self-referential skill merges
* fix: add guarded skill lineage repair
2026-07-23 13:39:39 -07:00
Patrick Erichsen
9339df42f0
fix(ui): default homepage catalog to list view ( #3245 )
2026-07-23 13:16:35 -07:00
Patrick Erichsen
9c63ed9b6b
fix(ui): show stats on trending cards ( #3243 )
2026-07-23 12:38:09 -07:00
Patrick Erichsen
fec0f5bd23
feat: count successful OpenClaw plugin installs ( #3242 )
2026-07-23 12:12:58 -07:00
Patrick Erichsen
c8066fe89c
chore: update social preview headline
2026-07-23 11:16:20 -07:00
Patrick Erichsen
eb3050fdcc
fix(ui): restore official terminology
2026-07-23 10:59:05 -07:00
Patrick Erichsen
594a7be992
fix: update auth core security patch ( #3238 )
2026-07-23 08:55:08 -07:00
Patrick Erichsen
fe8eff20ee
feat: keep external skill rollouts production-dark ( #3236 )
...
* feat: add fail-closed skill rollout gates
* fix: preserve scan queue pagination semantics
2026-07-23 08:36:41 -07:00
Patrick Erichsen
688329b343
fix(deps): update Next.js security override ( #3234 )
2026-07-23 00:04:53 -07:00
Patrick Erichsen
7aff40d26a
feat: support npx skills discovery ( #3233 )
2026-07-22 22:37:34 -07:00
Patrick Erichsen
97bc586209
fix: terminalize orphaned publish attempts ( #3224 )
2026-07-22 12:34:05 -07:00
Patrick Erichsen
904038cbb4
fix(security): prevent ClawScan timeout worker leaks ( #3223 )
2026-07-22 12:33:49 -07:00
Patrick Erichsen
89f5e62ef7
feat: add controlled skills.sh scanned installs ( #3221 )
...
* feat: add controlled skills.sh scanned installs
* fix: resolve exact skills.sh install references
* fix: verify exact skills.sh catalog references
2026-07-22 02:00:19 -07:00
Patrick Erichsen
ee9fac51cd
feat: add controlled skills.sh metadata canary ( #3217 )
2026-07-21 23:21:19 -07:00
Patrick Erichsen
a9775fc39b
ci: restore static and unit baseline gates ( #3219 )
...
* test: use valid artifact fixture hashes
* chore(deps): override newly vulnerable transitive packages
2026-07-21 22:19:53 -07:00
Patrick Erichsen
eb47a7c177
fix: remove skill slug alias quotas ( #3218 )
2026-07-21 21:49:59 -07:00
Jesse Merhi
987ad8bdec
feat: add 30-day activity trends to abuse signal drawer ( #3216 )
...
Adds 30-day download and install trend charts to the abuse signal drawer, places them near the top for immediate context, and improves development fixtures for realistic manual validation.
2026-07-22 14:49:52 +10:00
Patrick Erichsen
b34a0d69ff
feat: add dark skills.sh catalog control plane ( #3211 )
...
Ships the fail-closed skills.sh catalog control plane validated by the bounded 500-row permanent Test gate. No production ingestion, schedule, visibility, or bulk scanning is enabled.
2026-07-21 20:50:07 -07:00
Jesse Merhi
7ef2b15cfb
Dedupe abuse signal alerts and add bulk review ( #3214 )
...
* fix: dedupe abuse alerts and add bulk review
* fix: use white bulk selection checks
2026-07-22 13:25:54 +10:00
Patrick Erichsen
f9713e81cd
fix(security): handle artifact directory markers ( #3206 )
2026-07-21 17:55:22 -07:00
Jesse Merhi
a09d42484a
fix: require six times P99 for sustained signals ( #3204 )
2026-07-22 00:14:12 +10:00
Jesse Merhi
723f1551e9
fix: make abuse signal snoozes evidence-aware ( #3203 )
2026-07-21 15:24:57 +10:00
Patrick Erichsen
8d8e99a65f
feat: make owner version deletion reversible ( #3199 )
2026-07-20 21:18:35 -07:00
Jesse Merhi
8a8e692730
fix: alert when signal scans stop retrying ( #3202 )
2026-07-21 13:58:09 +10:00
Patrick Erichsen
f754faa390
chore(autoreview): sync TruffleHog scanning ( #3201 )
2026-07-20 20:42:00 -07:00
Peter Steinberger
81f2dfc856
fix: preserve graphemes in webhook titles
2026-07-20 19:58:37 -07:00
Peter Steinberger
15702c1c01
docs: note Discord webhook title limit
2026-07-20 19:58:37 -07:00
Patrick Erichsen
492708207a
fix: bound Discord webhook titles
2026-07-20 19:58:37 -07:00
Jesse Merhi
a68f707f0b
fix(moderation): cap signal scan retries ( #3197 )
...
* fix(moderation): replace stale signal scans
* fix(moderation): bound stale scan recovery
* fix(moderation): cap signal scan retries
* fix(management): show terminal signal scan failures
* docs: add signal failure UI proof
* fix(moderation): preserve signal retry status
2026-07-21 12:23:56 +10:00
34ad6ab0ac
fix: owner-qualified skill reports for ambiguous slugs ( #3172 )
...
* fix: allow owner-qualified skill reports for ambiguous slugs
Report API/CLI previously resolved bare slugs only, so collisions
collapsed into "Skill not found" and blocked listing reports.
Accept ownerHandle/owner query/body and optional skillId, and surface
the standard ambiguous-slug guidance.
Fixes #3111
* fix: keep skill report target owner-scoped
---------
Co-authored-by: norbert-bounty-scout <bountybot@hermes.nousresearch.com >
Co-authored-by: Patrick Erichsen <patrick.a.erichsen@gmail.com >
2026-07-20 17:07:45 -07:00
Patrick Erichsen
1a964d7441
ci: retry transient GitHub package fixture failures ( #3194 )
...
* fix(ci): retry transient GitHub fixture failures
* test(ci): use first-party GitHub package fixture
2026-07-20 16:59:07 -07:00
Patrick Erichsen
aca16d7885
fix: allow transfers to replace owned redirects ( #3189 )
2026-07-20 16:57:21 -07:00
Patrick Erichsen
3097319ef6
fix: publish complete skill artifacts ( #3196 )
...
* fix: preserve complete skill artifacts
* test: align artifact metadata expectations
* fix: harden complete skill artifact handling
* fix: close complete artifact review gaps
* fix: preserve legacy skill file metadata hints
* fix: close artifact presentation review gaps
* fix(cli): preserve legacy skill file collector export
* refactor: centralize artifact upload helpers
* fix: preserve artifact scan and publish bounds
* fix: scan complete published text artifacts
* fix: harden artifact download presentation
* test: avoid secret-like fixture text
* refactor: preview artifacts by content
* chore(deps): patch transitive audit advisories
2026-07-20 15:54:47 -07:00
Patrick Erichsen
39a8db49fd
fix(build): use exported Monaco worker path ( #3195 )
2026-07-20 14:54:04 -07:00
Patrick Erichsen
3ff331925b
fix(cli): clarify pending publication results ( #3193 )
2026-07-20 12:58:04 -07:00
Patrick Erichsen
b0984d33c0
feat(observability): log prepublication queue health ( #3192 )
2026-07-20 12:22:56 -07:00
Yiğit ERDOĞAN
1821e80950
fix: show one year instead of 12 months in relative timestamps ( #3174 )
...
Listings updated 360-364 days ago rendered as "12mo ago" because 30-day
months do not tile a 365-day year, leaving a five-day gap that still
divided into twelve whole months.
Derive years from whole months so they roll over at 12, matching
formatRelativeUpdatedAt in routes/user/$handle.tsx, which already caps
months at 11.
2026-07-20 12:03:07 -07:00
Patrick Erichsen
a9c8efdd93
fix(security): extend prepublication ClawScan timeout ( #3190 )
2026-07-20 11:39:57 -07:00
Patrick Erichsen
57d1e1530b
fix: isolate ClawScan worker shard concurrency ( #3188 )
2026-07-20 11:17:46 -07:00
openclaw-barnacle[bot] and github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
3085fa2e9d
chore: update Convex AI files ( #3181 )
...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-07-20 10:56:27 -07:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
8aa76c1a72
chore(deps): bump the github-actions group with 2 updates ( #3184 )
...
Bumps the github-actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout ) and [actions/setup-python](https://github.com/actions/setup-python ).
Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1 )
Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
- dependency-name: actions/setup-python
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 10:55:30 -07:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
5426fef8df
chore(deps): bump the production-minor-and-patch group with 20 updates ( #3185 )
...
Bumps the production-minor-and-patch group with 20 updates:
| Package | From | To |
| --- | --- | --- |
| [@fontsource/bricolage-grotesque](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/bricolage-grotesque ) | `5.2.10` | `5.3.0` |
| [@fontsource/ibm-plex-mono](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/ibm-plex-mono ) | `5.2.7` | `5.3.0` |
| [@fontsource/manrope](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/manrope ) | `5.2.8` | `5.3.0` |
| [@fontsource/noto-sans-sc](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/noto-sans-sc ) | `5.2.9` | `5.3.0` |
| [@radix-ui/react-avatar](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/avatar ) | `1.2.2` | `1.2.3` |
| [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog ) | `1.1.19` | `1.1.20` |
| [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu ) | `2.1.20` | `2.1.21` |
| [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label ) | `2.1.11` | `2.1.12` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select ) | `2.3.3` | `2.3.4` |
| [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator ) | `1.1.11` | `1.1.12` |
| [@radix-ui/react-toggle-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/toggle-group ) | `1.1.15` | `1.1.16` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip ) | `1.2.12` | `1.2.13` |
| [@react-email/render](https://github.com/resend/react-email/tree/HEAD/packages/render ) | `2.0.10` | `2.1.0` |
| [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router ) | `1.170.17` | `1.170.18` |
| [@tanstack/react-start](https://github.com/TanStack/router/tree/HEAD/packages/react-start ) | `1.168.27` | `1.168.32` |
| [convex](https://github.com/get-convex/convex-backend/tree/HEAD/npm-packages/convex ) | `1.42.1` | `1.42.3` |
| [ignore](https://github.com/kaelzhang/node-ignore ) | `7.0.5` | `7.0.6` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) | `1.24.0` | `1.25.0` |
| [monaco-editor](https://github.com/microsoft/monaco-editor ) | `0.55.1` | `0.56.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss ) | `4.3.2` | `4.3.3` |
Updates `@fontsource/bricolage-grotesque` from 5.2.10 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/bricolage-grotesque )
Updates `@fontsource/ibm-plex-mono` from 5.2.7 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/ibm-plex-mono )
Updates `@fontsource/manrope` from 5.2.8 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/manrope )
Updates `@fontsource/noto-sans-sc` from 5.2.9 to 5.3.0
- [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/noto-sans-sc )
Updates `@radix-ui/react-avatar` from 1.2.2 to 1.2.3
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/avatar/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/avatar )
Updates `@radix-ui/react-dialog` from 1.1.19 to 1.1.20
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog )
Updates `@radix-ui/react-dropdown-menu` from 2.1.20 to 2.1.21
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu )
Updates `@radix-ui/react-label` from 2.1.11 to 2.1.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label )
Updates `@radix-ui/react-select` from 2.3.3 to 2.3.4
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select )
Updates `@radix-ui/react-separator` from 1.1.11 to 1.1.12
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator )
Updates `@radix-ui/react-toggle-group` from 1.1.15 to 1.1.16
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/toggle-group/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/toggle-group )
Updates `@radix-ui/react-tooltip` from 1.2.12 to 1.2.13
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip )
Updates `@react-email/render` from 2.0.10 to 2.1.0
- [Release notes](https://github.com/resend/react-email/releases )
- [Changelog](https://github.com/resend/react-email/blob/canary/packages/render/CHANGELOG.md )
- [Commits](https://github.com/resend/react-email/commits/@react-email/render@2.1.0/packages/render )
Updates `@tanstack/react-router` from 1.170.17 to 1.170.18
- [Release notes](https://github.com/TanStack/router/releases )
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md )
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.18/packages/react-router )
Updates `@tanstack/react-start` from 1.168.27 to 1.168.32
- [Release notes](https://github.com/TanStack/router/releases )
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-start/CHANGELOG.md )
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-start@1.168.32/packages/react-start )
Updates `convex` from 1.42.1 to 1.42.3
- [Release notes](https://github.com/get-convex/convex-backend/releases )
- [Changelog](https://github.com/get-convex/convex-backend/blob/main/npm-packages/convex/CHANGELOG.md )
- [Commits](https://github.com/get-convex/convex-backend/commits/HEAD/npm-packages/convex )
Updates `ignore` from 7.0.5 to 7.0.6
- [Release notes](https://github.com/kaelzhang/node-ignore/releases )
- [Commits](https://github.com/kaelzhang/node-ignore/compare/7.0.5...7.0.6 )
Updates `lucide-react` from 1.24.0 to 1.25.0
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.25.0/packages/lucide-react )
Updates `monaco-editor` from 0.55.1 to 0.56.0
- [Release notes](https://github.com/microsoft/monaco-editor/releases )
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md )
- [Commits](https://github.com/microsoft/monaco-editor/compare/v0.55.1...v0.56.0 )
Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases )
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss )
---
updated-dependencies:
- dependency-name: "@fontsource/bricolage-grotesque"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: "@fontsource/ibm-plex-mono"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: "@fontsource/manrope"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: "@fontsource/noto-sans-sc"
dependency-version: 5.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-avatar"
dependency-version: 1.2.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-dialog"
dependency-version: 1.1.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-dropdown-menu"
dependency-version: 2.1.21
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-label"
dependency-version: 2.1.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-select"
dependency-version: 2.3.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-separator"
dependency-version: 1.1.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-toggle-group"
dependency-version: 1.1.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@radix-ui/react-tooltip"
dependency-version: 1.2.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@react-email/render"
dependency-version: 2.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: "@tanstack/react-router"
dependency-version: 1.170.18
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: "@tanstack/react-start"
dependency-version: 1.168.32
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: convex
dependency-version: 1.42.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: ignore
dependency-version: 7.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
- dependency-name: lucide-react
dependency-version: 1.25.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: monaco-editor
dependency-version: 0.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: production-minor-and-patch
- dependency-name: tailwindcss
dependency-version: 4.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: production-minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-20 10:48:44 -07:00
Jesse Merhi
ed9c8fdda2
feat(moderation): rescan signals from signals tab ( #3180 )
2026-07-20 17:11:15 +10:00
Jesse Merhi and Peter Steinberger
c688ab845d
fix: recover scheduled temporal abuse scans ( #3176 )
...
* fix: recover scheduled temporal abuse scans
* test: strengthen temporal scan regression proof
Co-authored-by: Jesse Merhi <79823012+jesse-merhi@users.noreply.github.com >
* fix(ci): pin design system source commit
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-20 14:22:53 +10:00
Nancy and vyctorbrzezowski
aaa73625ed
feat: add plugin submission success modal ( #3141 )
...
Add the missing plugin submission success state, align plugin and skill success icons with the muted marketplace treatment, and harden pending-publish and public URL fallback behavior.
Validated with real full-stack browser proof, focused tests, maintainer review, and all required checks green. Vercel remains the expected contributor authorization failure.
Co-authored-by: Nancy <nancymxgao@gmail.com >
Co-authored-by: vyctorbrzezowski <krzyszchweski@gmail.com >
2026-07-17 23:08:26 -03:00
Patrick Erichsen
db3b3fe920
fix: sort featured listings by recency ( #3170 )
2026-07-17 18:53:40 -07:00
Patrick Erichsen
af3d01c6ad
feat: verify organization GitHub profiles ( #3169 )
2026-07-17 18:02:30 -07:00
Patrick Erichsen
da965d681c
feat: order featured catalog by recency ( #3168 )
2026-07-17 17:46:50 -07:00
Patrick Erichsen
43c079e434
feat: add audited admin skill hard delete ( #3167 )
2026-07-17 17:33:50 -07:00
Patrick Erichsen