fix: suppress false duplicate plugin warnings (#16222) (thanks @shadril238) (#16245)

This commit is contained in:
Peter Steinberger
2026-02-14 15:45:21 +01:00
committed by GitHub
parent 4c7838e3cf
commit 4f043991e0
3 changed files with 85 additions and 12 deletions
+1
View File
@@ -12,6 +12,7 @@ Docs: https://docs.openclaw.ai
- Security: fix Chutes manual OAuth login state validation (thanks @aether-ai-agent). (#16058)
- macOS: hard-limit unkeyed `openclaw://agent` deep links and ignore `deliver` / `to` / `channel` unless a valid unattended key is provided. Thanks @Cillian-Collins.
- Plugins: suppress false duplicate plugin id warnings when the same extension is discovered via multiple paths (config/workspace/global vs bundled), while still warning on genuine duplicates. (#16222) Thanks @shadril238.
- Security/Google Chat: deprecate `users/<email>` allowlists (treat `users/...` as immutable user id only); keep raw email allowlists for usability. Thanks @vincentkoc.
- Security/Archive: enforce archive extraction entry/size limits to prevent resource exhaustion from high-expansion ZIP/TAR archives. Thanks @vincentkoc.