@openclaw/plugin-inspector 0.3.21 → 0.3.22
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -2,6 +2,17 @@
|
|
|
2
2
|
|
|
3
3
|
## Unreleased
|
|
4
4
|
|
|
5
|
+
## 0.3.22 - 2026-08-30
|
|
6
|
+
|
|
7
|
+
### Fixed
|
|
8
|
+
|
|
9
|
+
- Finish OpenClaw target archive extraction before cleanup so strict extraction errors cannot race unfinished filesystem writes.
|
|
10
|
+
|
|
11
|
+
### Changed
|
|
12
|
+
|
|
13
|
+
- Refresh Crabbox hydration tooling to pnpm 11.24.0 and pnpm/action-setup 6.0.10.
|
|
14
|
+
- Update the code-scanning example to CodeQL's Node 24-based SARIF upload action.
|
|
15
|
+
|
|
5
16
|
## 0.3.21 - 2026-08-05
|
|
6
17
|
|
|
7
18
|
### Fixed
|
|
@@ -20,7 +20,7 @@ jobs:
|
|
|
20
20
|
cache: npm
|
|
21
21
|
- run: npm ci
|
|
22
22
|
- run: npx @openclaw/plugin-inspector ci --no-openclaw --runtime --mock-sdk --allow-execute
|
|
23
|
-
- uses: github/codeql-action/upload-sarif@
|
|
23
|
+
- uses: github/codeql-action/upload-sarif@v4
|
|
24
24
|
if: always()
|
|
25
25
|
with:
|
|
26
26
|
sarif_file: reports/plugin-inspector.sarif
|
package/package.json
CHANGED
package/src/openclaw-version.js
CHANGED
|
@@ -149,7 +149,9 @@ async function preparePackageArchive(resolvedTarget, options) {
|
|
|
149
149
|
try {
|
|
150
150
|
const archivePath = path.join(temporaryDir, "openclaw.tgz");
|
|
151
151
|
await writeFile(archivePath, archive);
|
|
152
|
-
|
|
152
|
+
// Async tar rejection can leave filesystem writes running. Finish extraction
|
|
153
|
+
// before finally removes its workspace, including when strict validation fails.
|
|
154
|
+
extractTar({ cwd: temporaryDir, file: archivePath, strict: true, sync: true });
|
|
153
155
|
const packageDir = path.join(temporaryDir, "package");
|
|
154
156
|
if (!(await isPreparedPackage(packageDir, resolvedTarget.version))) {
|
|
155
157
|
throw new Error(`downloaded OpenClaw ${resolvedTarget.version} archive has unexpected package metadata`);
|