惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
Visual Studio Blog
Y
Y Combinator Blog
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Hugging Face - Blog
Hugging Face - Blog
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
The Cloudflare Blog
L
LangChain Blog
美团技术团队
N
Netflix TechBlog - Medium
量子位
酷 壳 – CoolShell
酷 壳 – CoolShell
B
Blog
博客园 - 司徒正美
爱范儿
爱范儿
D
DataBreaches.Net
月光博客
月光博客
U
Unit 42
B
Blog RSS Feed
Engineering at Meta
Engineering at Meta
Apple Machine Learning Research
Apple Machine Learning Research
Jina AI
Jina AI
MongoDB | Blog
MongoDB | Blog
腾讯CDC

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
chore(ci): add gateway CodeQL PR quality guard · openclaw...
vincentkoc · 2026-04-30 · via Recent Commits to openclaw:main

@@ -10,6 +10,7 @@ on:

1010

type: choice

1111

options:

1212

- all

13+

- gateway-runtime-boundary

1314

- plugin-boundary

1415

- plugin-sdk-package-contract

1516

- plugin-sdk-reply-runtime

@@ -22,6 +23,11 @@ on:

2223

- ".github/workflows/codeql-critical-quality.yml"

2324

- "packages/plugin-package-contract/**"

2425

- "packages/plugin-sdk/**"

26+

- "src/gateway/method-scopes.ts"

27+

- "src/gateway/protocol/**"

28+

- "src/gateway/server-methods/**"

29+

- "src/gateway/server-methods.ts"

30+

- "src/gateway/server-methods-list.ts"

2531

- "src/plugin-sdk/**"

2632

- "src/plugins/**"

2733

schedule:

@@ -37,9 +43,64 @@ env:

3743

permissions:

3844

actions: read

3945

contents: read

46+

pull-requests: read

4047

security-events: write

41484249

jobs:

50+

quality-shards:

51+

name: Select Critical Quality shards

52+

runs-on: blacksmith-4vcpu-ubuntu-2404

53+

timeout-minutes: 5

54+

outputs:

55+

gateway: ${{ steps.detect.outputs.gateway }}

56+

plugin: ${{ steps.detect.outputs.plugin }}

57+

plugin_sdk_package: ${{ steps.detect.outputs.plugin_sdk_package }}

58+

steps:

59+

- name: Detect PR shard paths

60+

id: detect

61+

env:

62+

EVENT_NAME: ${{ github.event_name }}

63+

GH_TOKEN: ${{ github.token }}

64+

PR_NUMBER: ${{ github.event.pull_request.number }}

65+

REPOSITORY: ${{ github.repository }}

66+

run: |

67+

set -euo pipefail

68+69+

gateway=false

70+

plugin=false

71+

plugin_sdk_package=false

72+73+

if [[ "${EVENT_NAME}" != "pull_request" ]]; then

74+

gateway=true

75+

plugin=true

76+

plugin_sdk_package=true

77+

else

78+

while IFS= read -r file; do

79+

case "${file}" in

80+

.github/codeql/*|.github/workflows/codeql-critical-quality.yml)

81+

gateway=true

82+

plugin=true

83+

plugin_sdk_package=true

84+

;;

85+

src/gateway/method-scopes.ts|src/gateway/protocol/*|src/gateway/server-methods/*|src/gateway/server-methods.ts|src/gateway/server-methods-list.ts)

86+

gateway=true

87+

;;

88+

src/plugin-sdk/*|src/plugins/*)

89+

plugin=true

90+

;;

91+

packages/plugin-package-contract/*|packages/plugin-sdk/*|src/plugin-sdk/*)

92+

plugin_sdk_package=true

93+

;;

94+

esac

95+

done < <(gh api --paginate "repos/${REPOSITORY}/pulls/${PR_NUMBER}/files" --jq '.[].filename')

96+

fi

97+98+

{

99+

echo "gateway=${gateway}"

100+

echo "plugin=${plugin}"

101+

echo "plugin_sdk_package=${plugin_sdk_package}"

102+

} >> "${GITHUB_OUTPUT}"

103+43104

core-auth-secrets:

44105

name: Critical Quality (core-auth-secrets)

45106

if: ${{ github.event_name != 'pull_request' && (github.event_name != 'workflow_dispatch' || inputs.profile == 'all') }}

@@ -86,7 +147,8 @@ jobs:

8614787148

gateway-runtime-boundary:

88149

name: Critical Quality (gateway-runtime-boundary)

89-

if: ${{ github.event_name != 'pull_request' && (github.event_name != 'workflow_dispatch' || inputs.profile == 'all') }}

150+

needs: quality-shards

151+

if: ${{ needs.quality-shards.outputs.gateway == 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'gateway-runtime-boundary') }}

90152

runs-on: blacksmith-4vcpu-ubuntu-2404

91153

timeout-minutes: 25

92154

steps:

@@ -306,7 +368,8 @@ jobs:

306368307369

plugin-boundary:

308370

name: Critical Quality (plugin-boundary)

309-

if: ${{ (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'plugin-boundary') }}

371+

needs: quality-shards

372+

if: ${{ needs.quality-shards.outputs.plugin == 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'plugin-boundary') }}

310373

runs-on: blacksmith-4vcpu-ubuntu-2404

311374

timeout-minutes: 25

312375

steps:

@@ -328,7 +391,8 @@ jobs:

328391329392

plugin-sdk-package-contract:

330393

name: Critical Quality (plugin-sdk-package-contract)

331-

if: ${{ (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'plugin-sdk-package-contract') }}

394+

needs: quality-shards

395+

if: ${{ needs.quality-shards.outputs.plugin_sdk_package == 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'plugin-sdk-package-contract') }}

332396

runs-on: blacksmith-4vcpu-ubuntu-2404

333397

timeout-minutes: 25

334398

steps: