paperclipinc/openclaw-operator holds a health index of 73 out of 100, placing it in the Good band. It scores highest on Engineering Quality (86/100) and lowest on Security (62/100). It was last updated today. A single contributor accounts for most of its recent work.
73
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
73
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — 1 affected: go.opentelemetry.io/otel v1.43.0 (unknown)
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
40/40
No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
source
osv
advisories
4
affected_packages
4
assessed_packages
106
unassessed_packages
0
affected_by_severity
moderate 1, unknown 3
direct_affected_packages
1
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 106 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 69 ⇿
0Stars
69Forks
97Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 27Patch 70
OpenSSF Scorecard 5.5 / 10
5.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 05:04 UTC
Full resolved dependency set from the GitHub dependency graph: 14 direct and 92 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
This repository publishes no package the index resolves, so its own dependency graph was assessed — 106 packages, which also include development and test pins that never ship: 4 carry known advisories, of which 1 are direct.
Package
Version
Relation
Severity
Advisories
Fixed in
pymdown-extensions
10.21.3
indirect
moderate
1
11.0.0
go.opentelemetry.io/otel
v1.43.0
direct
unknown
1
1.44.0
golang.org/x/net
v0.55.0
indirect
unknown
1
0.56.0
golang.org/x/text
v0.37.0
indirect
unknown
1
0.39.0
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"kubernetes",
"openclaw",
"golang",
"helm",
"agents",
"ai",
"operator"
],
"is_fork": false,
"size_kb": 4038,
"has_wiki": false,
"homepage": "https://paperclip.inc/openclaw",
"languages": {
"Go": 1577763,
"HTML": 2541,
"Shell": 13719,
"Python": 2235,
"Makefile": 11228,
"Dockerfile": 1559,
"Go Template": 5816
},
"pushed_at": "2026-07-24T18:39:28Z",
"created_at": "2026-02-06T07:56:06Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T10:39:28Z",
"description": "Kubernetes operator for deploying and managing OpenClaw AI agent instances with production-grade security, observability, and lifecycle management.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://paperclip.inc",
"name": "Paperclip.inc",
"type": "Organization",
"login": "paperclipinc",
"company": null,
"location": "Estonia",
"followers": 110,
"avatar_url": "https://avatars.githubusercontent.com/u/259805909?v=4",
"created_at": "2026-02-06T07:40:50Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 168
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.38.1",
"kind": "patch",
"published_at": "2026-07-20T06:56:39Z"
},
{
"tag": "v0.38.0",
"kind": "minor",
"published_at": "2026-07-19T21:49:45Z"
},
{
"tag": "v0.37.0",
"kind": "minor",
"published_at": "2026-07-18T16:45:53Z"
},
{
"tag": "v0.36.5",
"kind": "patch",
"published_at": "2026-06-20T18:32:34Z"
},
{
"tag": "v0.36.4",
"kind": "patch",
"published_at": "2026-06-16T15:47:52Z"
},
{
"tag": "v0.36.3",
"kind": "patch",
"published_at": "2026-06-16T13:59:13Z"
},
{
"tag": "v0.36.2",
"kind": "patch",
"published_at": "2026-06-15T16:39:51Z"
},
{
"tag": "v0.36.1",
"kind": "patch",
"published_at": "2026-06-08T11:14:14Z"
},
{
"tag": "v0.36.0",
"kind": "minor",
"published_at": "2026-06-03T21:19:38Z"
},
{
"tag": "v0.35.0",
"kind": "minor",
"published_at": "2026-06-02T12:38:39Z"
},
{
"tag": "v0.34.8",
"kind": "patch",
"published_at": "2026-06-02T10:44:21Z"
},
{
"tag": "v0.34.7",
"kind": "patch",
"published_at": "2026-06-01T06:39:10Z"
},
{
"tag": "v0.34.6",
"kind": "patch",
"published_at": "2026-05-31T07:09:16Z"
},
{
"tag": "v0.34.5",
"kind": "patch",
"published_at": "2026-05-26T14:55:17Z"
},
{
"tag": "v0.34.4",
"kind": "patch",
"published_at": "2026-05-21T11:09:19Z"
},
{
"tag": "v0.34.3",
"kind": "patch",
"published_at": "2026-05-21T07:02:58Z"
},
{
"tag": "v0.34.2",
"kind": "patch",
"published_at": "2026-05-20T06:44:03Z"
},
{
"tag": "v0.34.1",
"kind": "patch",
"published_at": "2026-05-14T07:59:30Z"
},
{
"tag": "v0.34.0",
"kind": "minor",
"published_at": "2026-05-12T17:37:14Z"
},
{
"tag": "v0.33.0",
"kind": "minor",
"published_at": "2026-05-12T10:06:32Z"
},
{
"tag": "v0.32.1",
"kind": "patch",
"published_at": "2026-05-12T09:14:53Z"
},
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2026-05-10T09:07:20Z"
},
{
"tag": "v0.31.1",
"kind": "patch",
"published_at": "2026-05-09T08:39:13Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2026-05-06T03:03:12Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2026-04-26T06:28:05Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2026-04-23T08:39:29Z"
},
{
"tag": "v0.28.1",
"kind": "patch",
"published_at": "2026-04-21T19:07:44Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2026-04-18T07:25:50Z"
},
{
"tag": "v0.27.1",
"kind": "patch",
"published_at": "2026-04-17T14:35:05Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2026-04-15T11:15:58Z"
},
{
"tag": "v0.26.2",
"kind": "patch",
"published_at": "2026-04-09T14:32:46Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2026-04-09T10:41:07Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-04-09T09:46:27Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2026-04-06T07:32:46Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2026-04-01T14:16:35Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-03-31T08:16:28Z"
},
{
"tag": "v0.24.2",
"kind": "patch",
"published_at": "2026-03-30T14:40:16Z"
},
{
"tag": "v0.24.1",
"kind": "patch",
"published_at": "2026-03-26T09:56:38Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-03-25T08:49:11Z"
},
{
"tag": "v0.23.2",
"kind": "patch",
"published_at": "2026-03-25T08:07:05Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-03-25T07:08:13Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-03-24T11:28:08Z"
},
{
"tag": "v0.22.2",
"kind": "patch",
"published_at": "2026-03-18T20:24:36Z"
},
{
"tag": "v0.22.1",
"kind": "patch",
"published_at": "2026-03-18T13:31:24Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-03-18T11:48:13Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2026-03-18T06:50:27Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2026-03-17T20:27:22Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-03-17T19:17:40Z"
},
{
"tag": "v0.20.1",
"kind": "patch",
"published_at": "2026-03-16T10:39:06Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-03-16T09:11:28Z"
},
{
"tag": "v0.19.1",
"kind": "patch",
"published_at": "2026-03-15T18:10:52Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-03-15T10:25:59Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2026-03-14T21:41:51Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-03-14T10:27:26Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-03-13T15:54:14Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2026-03-13T11:29:06Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2026-03-13T08:21:42Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-03-12T21:05:41Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2026-03-12T10:23:48Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-03-12T08:49:28Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2026-03-11T14:50:36Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-03-11T14:28:56Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-03-11T14:09:22Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-03-10T19:14:02Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2026-03-10T14:55:50Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-03-10T08:18:11Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-03-10T07:52:27Z"
},
{
"tag": "v0.10.30",
"kind": "patch",
"published_at": "2026-03-10T07:18:44Z"
},
{
"tag": "v0.10.29",
"kind": "patch",
"published_at": "2026-03-09T19:52:11Z"
},
{
"tag": "v0.10.28",
"kind": "patch",
"published_at": "2026-03-09T19:48:50Z"
},
{
"tag": "v0.10.27",
"kind": "patch",
"published_at": "2026-03-09T15:42:38Z"
},
{
"tag": "v0.10.26",
"kind": "patch",
"published_at": "2026-03-09T11:06:40Z"
},
{
"tag": "v0.10.25",
"kind": "patch",
"published_at": "2026-03-07T21:15:25Z"
},
{
"tag": "v0.10.24",
"kind": "patch",
"published_at": "2026-03-06T23:16:06Z"
},
{
"tag": "v0.10.23",
"kind": "patch",
"published_at": "2026-03-06T18:32:06Z"
},
{
"tag": "v0.10.22",
"kind": "patch",
"published_at": "2026-03-05T15:56:33Z"
},
{
"tag": "v0.10.21",
"kind": "patch",
"published_at": "2026-03-05T12:27:59Z"
},
{
"tag": "v0.10.20",
"kind": "patch",
"published_at": "2026-03-04T18:15:00Z"
},
{
"tag": "v0.10.19",
"kind": "patch",
"published_at": "2026-03-04T08:56:52Z"
},
{
"tag": "v0.10.17",
"kind": "patch",
"published_at": "2026-03-02T16:48:35Z"
},
{
"tag": "v0.10.16",
"kind": "patch",
"published_at": "2026-03-01T11:13:26Z"
},
{
"tag": "v0.10.15",
"kind": "patch",
"published_at": "2026-02-27T20:10:26Z"
},
{
"tag": "v0.10.14",
"kind": "patch",
"published_at": "2026-02-27T19:51:00Z"
},
{
"tag": "v0.10.13",
"kind": "patch",
"published_at": "2026-02-27T16:21:08Z"
},
{
"tag": "v0.10.12",
"kind": "patch",
"published_at": "2026-02-26T22:18:31Z"
},
{
"tag": "v0.10.11",
"kind": "patch",
"published_at": "2026-02-26T20:53:23Z"
},
{
"tag": "v0.10.10",
"kind": "patch",
"published_at": "2026-02-26T17:47:07Z"
},
{
"tag": "v0.10.9",
"kind": "patch",
"published_at": "2026-02-26T11:20:47Z"
},
{
"tag": "v0.10.8",
"kind": "patch",
"published_at": "2026-02-26T11:08:51Z"
},
{
"tag": "v0.10.7",
"kind": "patch",
"published_at": "2026-02-25T00:11:30Z"
},
{
"tag": "v0.10.6",
"kind": "patch",
"published_at": "2026-02-25T00:10:14Z"
},
{
"tag": "v0.10.5",
"kind": "patch",
"published_at": "2026-02-24T17:45:02Z"
},
{
"tag": "v0.10.4",
"kind": "patch",
"published_at": "2026-02-24T09:46:33Z"
},
{
"tag": "v0.10.3",
"kind": "patch",
"published_at": "2026-02-24T05:13:15Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2026-02-23T12:54:37Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2026-02-22T22:16:10Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-02-22T17:19:44Z"
},
{
"tag": "v0.9.23",
"kind": "patch",
"published_at": "2026-02-22T14:53:28Z"
},
{
"tag": "v0.9.22",
"kind": "patch",
"published_at": "2026-02-22T09:19:51Z"
},
{
"tag": "v0.9.21",
"kind": "patch",
"published_at": "2026-02-21T19:20:08Z"
}
],
"recent_commits": [
{
"oid": "2bfeca50c5ffcbb2b8f455dbaabe5d1f460fb6cb",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump pillow from 12.2.0 to 12.3.0 in /docs-site (#574)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-22T18:20:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "443a8652ffe8b6a1d93ef7cff505bb1a0122b9a8",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#575)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-22T18:06:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40ebdc730f30bb7a44a74e53150009c38916d6c8",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.38.1](https://github.com/paperclipinc/openclaw-operator/compare/v0.38.0...v0.38.1)\n(2026-07-20)\n\n\n### Bug Fixes\n\n* gate PhaseRunning on StatefulSetReady so consumers don't route to a\nnot-ready instance\n([#572](https://github.com/paperclipinc\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.38.1 (#573)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-20T06:51:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a1820c6daed065132819b4120ad76c679e373ad",
"body": "…o a not-ready instance (#572)\n\n## Problem\n\nThe controller set `Status.Phase = Running` as soon as resources\nreconciled successfully, without checking whether the StatefulSet pod\nwas actually Ready. Downstream consumers (the hosted-OpenClaw proxy)\ntreat `Phase == Running` as \"safe to route to the in\n[…]\n Phase and the Ready condition. Full suite green (53\npassed), `make lint` clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: gate PhaseRunning on StatefulSetReady so consumers don't route t…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-20T06:13:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "32c04ea3e39ffd13a83a4fe36fa88318d4aafcd1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.38.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.37.0...v0.38.0)\n(2026-07-19)\n\n\n### Features\n\n* **skills:** support declarative skills for additional workspaces\n([#570](https://github.com/paperclipinc/openclaw-operator/issu\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.38.0 (#571)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-19T21:44:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efb202ca6d1b30a9daebdf0463a7615973387ca9",
"body": "…570)\n\nCloses #568\n\nImplements workspace-scoped skills per the design points in the issue\ndiscussion:\n\n## What\n\n`spec.workspace.additionalWorkspaces[].skills` accepts the same\nreference formats as top-level `spec.skills`:\n\n- **`pack:` entries** resolve through the existing GitHub resolver\n(private r\n[…]\nn operator upgrade — same\nbehavior as #566 introduced for the default workspace.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills): support declarative skills for additional workspaces (#…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-19T21:07:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b0abe63a12db1c462a3ad42eff7c85462e952db1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.37.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.5...v0.37.0)\n(2026-07-18)\n\n\n### Features\n\n* **probes:** opt-in disk-aware readiness guard for PVC-backed\nworkspaces\n([#557](https://github.com/paperclipinc/openclaw-operat\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.37.0 (#565)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-18T16:40:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f5dd83d9a3d6415cc5db5626ddbfd389d7dd719",
"body": "## Problem\n\nThe disk-aware readiness guard (#557) computes available bytes inside\nawk:\n\n```sh\navail=$(df -Pk \"$p\" 2>/dev/null | awk 'NR==2 {print $4 * 1024}')\n[ \"$avail\" -ge 536870912 ]\n```\n\nawk renders large arithmetic results via `OFMT` (`%.6g`), so with ~10GB+\nfree the output is scientific notati\n[…]\n...`, `make lint`, `go test\n./internal/resources/` all pass locally.\n\nFixes #567\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(probes): compare disk readiness free space as integer KiB (#569)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-18T16:25:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "35d2987727ead34400ecf0d0417d170f1ee5aff7",
"body": "…ision (#566)\n\nCloses #564.\n\n## Problem\n\n`BuildInitScript` seeded `pack:` skill files create-only (`[ -f dest ]\n|| cp`). Updating an immutable `spec.skills` pack reference to a newer\nrevision updated the workspace ConfigMap and restarted the pod (the\nrevision is part of the config-hash annotation), \n[…]\nence.md` regenerated (not hand-edited); CRD\nYAML synced to chart and OLM bundle.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): converge PVC-seeded skill pack files to the declared rev…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T20:46:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb98a92df51dbbdd9da45a0a699dab800d0baa20",
"body": "…aces (#557)\n\nCloses #556.\n\n## Problem\n\nFor PVC-backed `OpenClawInstance` deployments, the operator delegates\nworkspace-volume health entirely to the gateway's HTTP `/readyz`. If\n`/readyz` stays green while the PVC-backed workspace is full or\nread-only, Kubernetes keeps the pod `Ready=true` and rout\n[…]\nly but not executed there (CI E2E is green on this\nPR).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(probes): opt-in disk-aware readiness guard for PVC-backed worksp…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T19:40:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bb2f3aaeb8078d602bf38feb47d375aa045f13d1",
"body": "… (#559)\n\n## Root cause\n\n`parseSkillEntry()` in `internal/resources/statefulset.go` ran every\nClawHub skill entry through `normalizeClawHubSlug()`, which stripped the\n`@owner/` prefix and passed only the bare slug to `clawhub install`. For\n**ambiguous** ClawHub slugs (the same slug published under m\n[…]\nve was added and\nthe e2e package vets/builds cleanly.\n\nCloses #558\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): preserve owner-qualified ClawHub refs for disambiguation…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T19:26:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c312a98f526b47b36acfd3b30c8ae7e344c5c8f0",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.48.0 to\n0.55.0.\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a\nhref=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"><code>7770ec4</code></a>\ngo.mod: update golang.org/x dependencies</li>\n<li><a\nhref=\"htt\n[…]\ncom/paperclipinc/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net from 0.48.0 to 0.55.0 (#561)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T19:12:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76bc93dcd8aa1fedf6da620c409bf10bb86d1aba",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.36.5 (#555)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-20T18:26:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07a040b42fd43e20ac088b7e5c44adedf9f654c3",
"body": "…iled (#553) (#554)",
"is_bot": false,
"headline": "fix(controller): treat optimistic-lock conflicts as retryable, not fa…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-20T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5e73500c9b4d442e647bed496199f5d558e22db",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.4](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.3...v0.36.4)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **operatorhub:** ship ci.yaml with updateGraph semver-mode\n([#551](https://github.com/paperclipinc/openclaw-operator/issues/55\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.4 (#552)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-16T15:41:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab5f444b646bb3a74f7b6cb66c5a85221e7e191e",
"body": "## Summary\n\n- Creates `bundle/ci.yaml` with `updateGraph: semver-mode` and\n`reviewers: [stubbi]`.\n- In **both** the `submit` (k8s community-operators) and `submit-redhat`\n(community-operators-prod) jobs, seeds\n`operators/openclaw-operator/ci.yaml` from `bundle/ci.yaml` if absent,\nand includes it in \n[…]\nm workflow YAML parses: `yq '.jobs|keys'\n.github/workflows/operatorhub.yaml`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(operatorhub): ship ci.yaml with updateGraph semver-mode (#551)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T15:21:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6fa1cffce3e9939c4e3e0d373b2c138fc46c51bc",
"body": "The chart installs the OpenClawClusterDefaults CRD and the CSV owns it,\nbut the Helm chart's `artifacthub.io/crds` annotation only declared 2 of\n3 CRDs. Adds the missing entry so Artifact Hub shows all three (matching\nhermes/paperclip).",
"is_bot": false,
"headline": "docs(chart): list OpenClawClusterDefaults in artifacthub.io/crds (#550)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T14:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f0b3aa1a25aa85536e77bce07c361dc1803c08f",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.3](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.2...v0.36.3)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **bundle:** declare com.redhat.openshift.versions for OpenShift cert\n([#549](https://github.com/paperclipinc/openclaw-operator\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.3 (#548)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-16T13:53:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a66a7f09ab3cc30a27afb5fcd66be9b11dca801",
"body": "… (#549)\n\nOpenShift community-operators-prod validation fails: minKubeVersion\n1.28.0 but com.redhat.openshift.versions not set. Declares v4.15 (k8s\n1.28 -> OCP 4.15).",
"is_bot": false,
"headline": "fix(bundle): declare com.redhat.openshift.versions for OpenShift cert…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T13:35:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adde0edd49dcb4950aca332907c0cd6e03e6d59",
"body": "… (#547)\n\nThe OperatorHub submission to `k8s-operatorhub/community-operators` has\nfailed since **v0.36.1** (and again v0.36.2):\n\n```\n! [remote rejected] (refusing to allow a Personal Access Token to create or update\nworkflow `.github/workflows/command_merge.yaml` without `workflow` scope)\n```\n\n**Cau\n[…]\nw_dispatch`) to\nsubmit the bundle that the failed run never filed.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): sync OperatorHub fork to avoid workflow-scope push rejection…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T17:04:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7b5d425eabe43ab895c7a32922cce7179750803a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.2](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.1...v0.36.2)\n(2026-06-15)\n\n\n### Bug Fixes\n\n* **chart:** refresh changelog for signed-chart release (0.36.2)\n([#545](https://github.com/paperclipinc/openclaw-operator/issue\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.2 (#546)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-15T16:33:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f99b35a42fcf57f4c91cb7c5f99f2ee636c53966",
"body": "Forces a release (`Release-As: 0.36.2`) to ship the two Phase-1 fixes\nalready merged in #544:\n- Helm chart OCI artifact is now cosign-signed (keyless).\n- `artifacthub.io/images` annotation now tracks the released operator\nimage tag (and auto-bumps).\n\nOn merge, release-please cuts `v0.36.2`; the rele\n[…]\nundle PR to `k8s-operatorhub/community-operators` (refreshing the\noperatorhub.io listing off the stale `openclaw-rocks` `0.2.4` bundle).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(chart): refresh changelog for signed-chart release (0.36.2) (#545)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T16:18:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4bba215f3f30a63cd8ae4f9a3e1c2b43be31ef35",
"body": "…otation) (#544)\n\nPhase 1 of the Artifact Hub / OperatorHub world-class effort (spec &\nplan in `paperclip-operator/docs/superpowers/`).\n\n## Changes\n- **fix(chart):** `artifacthub.io/images` was stale at `v0.9.0`; now\nmatches the rendered image tag (`v0.36.1`) and auto-bumps on release via\na `# x-rel\n[…]\nchart tags, stand up the verified `paperclipinc` Artifact\nHub org.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Phase 1: world-class Artifact Hub presence (chart signing + image ann…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T15:57:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecd7ef0ed68e96765653b2b2707b733c1d6cd8a0",
"body": "## Summary\n\nThis follows up on the install-source clarification requested in #539.\n\nChanges:\n\n- clarify the README feature table so `spec.plugins` says plugin\ninstalls resolve through the OpenClaw CLI ClawHub installer\n- explain that an optional `npm:` prefix on plugin entries is accepted\nfor compat\n[…]\n.md`\n- added-line dash scan\n- added-line public-hygiene scan\n\nThis is README-only, so I did not regenerate API docs or run Go tests.\n\nCo-authored-by: kriptoburak <kriptoburak@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: clarify plugin install source handling (#543)",
"author_name": "Burak Bayır",
"author_login": "kriptoburak",
"committed_at": "2026-06-13T17:28:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "facd64b2f2f0d33b8e65953bbed5e8d046613186",
"body": "## Summary\n\nAdds a CI guard (`Chart Image Repository` job) that fails the build if\nthe Helm chart default `image.repository` in\n`charts/openclaw-operator/values.yaml` drifts away from the canonical\n`ghcr.io/paperclipinc/openclaw-operator` namespace.\n\n## Why\n\nChart releases 0.32.0 to 0.34.4 shipped w\n[…]\n`: documents the new job in the CI pipeline table.\n\n## Validation\n\nVerified locally: passes on the current correct values, exits 1 with a\nclear `::error::` on a simulated stale namespace.\n\nCloses #540",
"is_bot": false,
"headline": "ci: guard chart image.repository against namespace drift (#542)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-08T11:22:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b99eba53dded7e2297d29e3be8271905264b45e4",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.1](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.0...v0.36.1)\n(2026-06-08)\n\n\n### Bug Fixes\n\n* keep otel-collector metrics alive (metric_expiration 8760h +\ndirectory-mount)\n([#538](https://github.com/paperclipinc/openclaw\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.1 (#541)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-08T11:08:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e6cbe8d975abd0b904532e92a6ec9c65df2eb46",
"body": "…ectory-mount) (#538)\n\nSupersedes #537.\n\nThe prometheus exporter defaulted to metric_expiration: 5m, evicting\ncounters (`tokens_total`, `model_call_duration`, etc.) from `/metrics`\nafter the gateway goes idle that long. Since the gateway only pushes\nOTLP during model calls, idle gaps routinely excee\n[…]\nation\nraces, instead of a subPath bind-mount that could resolve to an empty\nfile when ConfigMap and pod are created in the same instant.\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes@aqora.io>",
"is_bot": false,
"headline": "fix: keep otel-collector metrics alive (metric_expiration 8760h + dir…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-08T10:54:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "81be17a4ff788f18e31e68974ab159fc06e2716a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.35.0...v0.36.0)\n(2026-06-03)\n\n\n### Features\n\n* add optional Gateway API HTTPRoute support\n([#535](https://github.com/paperclipinc/openclaw-operator/issues/535))\n([e56d4bb](ht\n[…]\nease-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.0 (#530)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-03T21:13:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "39e783adb6239b72b290cc7c9931d626c6464aa6",
"body": "## Summary\n\nDesign-only proposal for graduating the `openclaw.rocks` API group from\n`v1alpha1` to a stable `v1`. No conversion or controller code is\nimplemented; this lands two documents under `docs/superpowers/`:\n\n- `docs/superpowers/specs/2026-06-03-v1-graduation-design.md`\n- `docs/superpowers/pla\n[…]\n v1-stability reference.\n\nASCII-only (no em/en dashes). Docs only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: v1 API graduation design and migration plan (#534)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:58:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e56d4bb322f1d4184ae72d0653d962532dea8935",
"body": "## Summary\n\nAdds optional Gateway API (`gateway.networking.k8s.io`) HTTPRoute\nsupport to `OpenClawInstance`, mirroring `paperclip-operator`. This is\nan alternative to Ingress for clusters running the Gateway API.\n\nNew `spec.networking.httpRoute`:\n- `enabled` (bool, default false)\n- `parentRefs[]` `{\n[…]\n-run.\n\nBased on `feat/parity-tier12`, targeting `main`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add optional Gateway API HTTPRoute support (#535)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:44:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c176eb8b542d67560452919dcd8a4bf8d6f7ae6",
"body": "…tchNamespaces (#531)\n\n## Summary\n\nFixes #529. When the operator is installed with `watchNamespaces` set,\nit fails to start with:\n\n```\nopenclawclusterdefaults.openclaw.rocks is forbidden: User \"system:serviceaccount:openclaw:openclaw-operator\" cannot list resource \"openclawclusterdefaults\" in API gr\n[…]\nclawclusterdefaults=True, #resources=26\n```\n\nNo Go/CRD/marker changes, so `config/crd/` and `config/rbac/role.yaml`\nare untouched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(helm): grant cluster-scoped OpenClawClusterDefaults RBAC under wa…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:30:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3787dd0153ae62ead33e2871b3998dbdc69604cc",
"body": "…CEL, conformance) (#533)\n\nBrings openclaw-operator up to parity with its sibling operators by\nporting four features. No merge intended; review only.\n\n## Ported features\n\n### 1. Digest-pin the operator image in the OperatorHub submission\n- Template: paperclip-operator `.github/workflows/operatorhub.\n[…]\n-rnP '[\\x{2013}\\x{2014}]'`) on all changed files:\nclean\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: tier-1/2 parity (operatorhub digest pin, verify-signing, image …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T19:45:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15f60cc218269e1b08a86a57d980cf1d201c5ecf",
"body": "## Summary\n\nAdds a second OperatorHub submission job, `submit-redhat`, to\n`.github/workflows/operatorhub.yaml`. It submits the OLM bundle to\nRedHat's `redhat-openshift-ecosystem/community-operators-prod` catalog,\nmirroring the existing `submit` job that targets\n`k8s-operatorhub/community-operators`.\n[…]\nthon3 yaml.safe_load_all` parses clean.\n- No em/en dashes present.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: submit OLM bundle to RedHat community-operators-prod (#532)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T17:53:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "58280c8bea4d329b86d7a3cfc18a996700de74da",
"body": "init-plugins runs on every pod start. With persistence enabled, the\nplugin already exists on the PVC from the previous run. `openclaw\nplugins install` exits non-zero with \"plugin already exists\", crashing\nthe init container in a loop.\n\n`--force` overwrites the existing install target, making the init\ncontainer idempotent across pod restarts.",
"is_bot": false,
"headline": "fix: idempotent plugin install in init-plugins container (#528)",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-03T14:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95d0c9394a9a56bb322ed34e1d70e3231c1d5aa6",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.35.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.8...v0.35.0)\n(2026-06-02)\n\n\n### Features\n\n* **api:** spec.config.forcePaths for partial-overwrite under\nmergeMode=merge\n([#500](https://github.com/paperclipinc/openclaw-op\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.35.0 (#527)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-02T12:31:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e59951cbaf020d0e384854cfd537aad93b81aa32",
"body": "…de=merge (#500)\n\n## Problem\n\nManaged multi-tenant deployers of this operator need two things at once\nthat\n`mergeMode` can't provide together:\n\n- Tenants must persist user-owned config (`channels.*`, `settings.*`)\nacross\n pod restarts → requires `mergeMode: merge`.\n- The operator must guarantee tha\n[…]\ns generate sync-chart-crds api-docs` regenerated\n- [x] Backward compatible\n- [x] No CHANGELOG edits (release-please owns it)\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "feat(api): spec.config.forcePaths for partial-overwrite under mergeMo…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T12:18:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50e75a9498b033c06dd2f34a2ce9c338173921fc",
"body": "…awhub (#518)\n\n`parsePluginEntry` strips the `npm:` prefix and then unconditionally\nprepends `clawhub:`, making the prefix a no-op. Plugins published on npm\n(not ClawHub) fail with \"Package not found on ClawHub\" on every fresh\npod start.\n\nFix: pass `npm:`-prefixed entries as `npm:<spec>` to the CLI, which\nalready supports this resolver. Non-prefixed entries still use\n`clawhub:`.\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "fix: parsePluginEntry drops npm: prefix, all plugins route through cl…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T12:05:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b24b40324d384e0d0809b5c31d49b940003e9c11",
"body": "The operator sets `phase=BackingUp` and persists it via status update\nbefore checking the `skip-backup` annotation or persistence. This causes\na visible BackingUp phase and unnecessary StatefulSet scale-down even\nwhen backup is skipped.\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "fix: check skip-backup annotation before setting BackingUp phase (#524)",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T11:17:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52f1f4392ff748797d0fc69425abdbf5a6900ab7",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.8](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.7...v0.34.8)\n(2026-06-02)\n\n\n### Bug Fixes\n\n* replace operator logo sunglasses with open eyes\n([eb61231](https://github.com/paperclipinc/openclaw-operator/commit/eb61231c14\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.34.8 (#525)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-02T10:38:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb61231c14851b3f5c4bf66463742028c126b690",
"body": "The OperatorHub.io / ArtifactHub icon still showed the old OpenClaw\nmascot wearing sunglasses, a leftover from before the move to the\nPaperclip Inc org. Swap the two dark lens shapes, bridge stroke, and\nglint highlights for open eyes (white sclera, dark pupils, highlight),\nkeeping the same red-gradi\n[…]\ncon-only change to the CSV base64 icon; no other metadata touched\n(provider, links, maintainer, and images were already migrated).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: replace operator logo sunglasses with open eyes",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-02T10:25:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "af2d7614b51242ec63f7054bea627b016201a100",
"body": "…mp price to EUR 19/mo\n\nUpdate both 'Paperclip Inc.' managed-hosting CTA links to https://paperclip.inc/openclaw (link target only, visible text unchanged) and the listed price from EUR 15/mo to EUR 19/mo.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): point managed-hosting CTA at paperclip.inc/openclaw, bu…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T08:33:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "13048855d81d7bb0c629562df56b6711174431cf",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.34.7",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-01T06:32:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7690d74ce9db9cfbca2fc4ec7c5a88b5535e6e31",
"body": "Match the real OpenClaw logo -- replace the sunglasses on all five lobsters with small black dot eyes.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: give the README banner OpenClaws dot eyes instead of sunglasses",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "842f73674e7475c8168ce557c2ff138233a687e8",
"body": "The bundle shipped only the OpenClawInstance CRD, so OperatorHub installs were missing OpenClawSelfConfig and OpenClawClusterDefaults (kubectl apply of those kinds failed with 'no matches for kind'); the shipped OpenClawInstance CRD had also drifted behind config/crd/bases. Sync all three CRDs from \n[…]\n the two new CRDs in the CSV owned list + alm-examples, and copy all CRDs (not just openclawinstances) in the submission workflow.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(olm): ship all three CRDs in the OperatorHub bundle",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "60d9f9e14146c9f594fd5eef8008393a6a72ba1b",
"body": "Migrate the remaining references off the former openclaw-rocks identity: website / docs / email / branding / security contact -> paperclip.inc, docs + runbook links -> https://paperclip.inc/docs/operators/openclaw, copyright OpenClaw.rocks -> Paperclip Inc., and drop the dead docs-operator.openclaw.\n[…]\nl keys, CRD names, and the kubebuilder domain are intentionally unchanged -- renaming them would break already-deployed resources.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: complete openclaw-rocks -> paperclipinc migration",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a93b472172a501af8fa4ebed45855bb9b66a48ab",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.6](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.5...v0.34.6)\n(2026-05-26)\n\n\n### Bug Fixes\n\n* **ci:** operatorhub workflow gh repo fork CLI syntax\n([#515](https://github.com/paperclipinc/openclaw-operator/issues/515))\n([\n[…]\nease-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.34.6 (#516)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-05-31T07:03:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e02788db171567f8c9c8df5e5bb47ef6b84987af",
"body": "Migrates the one remaining `secrets.RELEASE_PLEASE_TOKEN` reference (the\n`Publish release` step that flips the draft GoReleaser publishes) to use\na short-lived token minted from the `paperclip-release-bot` App. After\nmerge, the RELEASE_PLEASE_TOKEN secret can be safely deleted.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "ci: release.yaml uses App token for draft→publish step (#517)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T17:36:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6be0b909322cf9a8a715fdf5b586345301c2141c",
"body": "## Problem\n\n`gh repo fork` has been failing every release since v0.34.1 with:\n\n> the `--remote` flag is unsupported when a repository argument is\nprovided\n\nNewer gh CLI rejects `--remote=true` when a repository positional arg is\nalso passed. The OperatorHub submission step never ran, so v0.34.0 is\nt\n[…]\nfter this merges, re-run \"OperatorHub\" workflow against v0.34.5 to\nsubmit the first paperclipinc-flavored bundle to community-operators.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(ci): operatorhub workflow gh repo fork CLI syntax (#515)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T15:54:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4ed487c716ad484672d24a6b7123abffcfc1cd9d",
"body": "Replaces the long-lived PAT (`secrets.RELEASE_PLEASE_TOKEN`) with a\nshort-lived App installation token minted via\n`actions/create-github-app-token@v1` from the new\n`paperclip-release-bot` GitHub App. The org policy now blocks\nfine-grained PATs >366 days, which is what just broke hermes's\nrelease-ple\n[…]\n to ~1h and don't have a\nlifetime cap.\n\nAfter this merges, the `RELEASE_PLEASE_TOKEN` repo secret can be deleted\n(no longer referenced).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "ci: release-please uses paperclip-release-bot App token (#514)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T15:16:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0860204353ce1478eeec044a7da8f86744576335",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.5](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.4...v0.34.5)\n(2026-05-26)\n\n\n### Bug Fixes\n\n* rename openclaw-rocks → paperclipinc across chart, CI, docs, Go module\n([2de5f6b](https://github.com/paperclipinc/openclaw-ope\n[…]\n00c004ca283d2f83db98))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.5 (#513)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T14:48:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2de5f6b68be3f6b05dcc00c004ca283d2f83db98",
"body": "…module\n\n## Why\n\nOrg rename from openclaw-rocks → paperclipinc happened earlier. The repo\n+ image + chart all migrated to the new org, but in-tree references\nstill point at the old URL. Artifact Hub is failing to scan the chart's\nimage because the old `ghcr.io/openclaw-rocks/openclaw-operator` URL n\n[…]\nre-scans against the new URL and the error emails stop.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: rename openclaw-rocks → paperclipinc across chart, CI, docs, Go …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T14:34:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "46c04743f1c29a55b0f65873e68f9a55c5e2027b",
"body": "## Summary\n- Rewrite `docs/index.md` as a self-authored landing page (no\n`include-markdown` macro, no `hide:` frontmatter), so the `docs/` tree\nrenders correctly in any docs site (MkDocs, Starlight, Hugo, etc.)\nwithout preprocessing.\n- Delete `docs/specs/` (already excluded from MkDocs builds via\n`e\n[…]\narchitecture, full-example, custom-providers, api-reference,\nbackup-restore, troubleshooting, runbooks/, monitoring/,\nopenclaw-cluster-defaults, openclaw-self-config, model-fallback,\nexternal-secrets)",
"is_bot": false,
"headline": "docs: make docs/ renderer-agnostic (#508)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-23T10:53:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "088c02a360956e7b38d84419975869578c3e1cd5",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.4](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.3...v0.34.4)\n(2026-05-21)\n\n\n### Bug Fixes\n\n* **plugins:** install via openclaw CLI to handle workspace:* deps\n([#506](https://github.com/openclaw-rocks/openclaw-operator\n[…]\ne0533ca139aedd930f9f))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.4 (#507)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T11:03:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00d08d98818e8d533a6de0533ca139aedd930f9f",
"body": "## Summary\n- Closes #505.\n- Switch the plugins init container from `npm pack` + `npm install\n--omit=dev` to `openclaw plugins install clawhub:<spec>` so first-party\nplugins published with `workspace:*` dependency markers (e.g.\n`@openclaw/matrix`) resolve correctly. Raw `npm install` rejects them\nwit\n[…]\nplugins` on a real\ncluster and confirm the plugin loads\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): install via openclaw CLI to handle workspace:* deps (#506)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T09:50:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "185b70dbadb15b2fe63b562a8d7b58f514c85fef",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.3](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.2...v0.34.3)\n(2026-05-20)\n\n\n### Bug Fixes\n\n* **environment-skill:** document openclaw CLI availability\n([#499](https://github.com/openclaw-rocks/openclaw-operator/issues\n[…]\nf2f3e7d38d04fedda582))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.3 (#504)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T06:57:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6cb6a7843aabd7a8f861758707f2ef0ea0943d4",
"body": "…-site (#501)\n\nBumps\n[pymdown-extensions](https://github.com/facelessuser/pymdown-extensions)\nfrom 10.16.1 to 10.21.3.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/facelessuser/pymdown-extensions/releases\">pymdown-extensions's\nreleases</a>.</em></p>\n<blo\n[…]\nm/openclaw-rocks/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump pymdown-extensions from 10.16.1 to 10.21.3 in /docs…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-20T17:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5067192e9d94f9d58dcef2f3e7d38d04fedda582",
"body": "## Summary\n\n- Adds a short \"OpenClaw CLI\" section to the `ENVIRONMENT.md` skill\ninjected into every workspace, telling the agent that the `openclaw`\ncommand is available on PATH (symlinked to `/app/openclaw.mjs` by the\nupstream image) and giving a couple of examples (`--help`, `doctor`,\n`--version`)\n[…]\nated `ENVIRONMENT.md` in\nits workspace ConfigMap on next reconcile\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(environment-skill): document openclaw CLI availability (#499)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T17:27:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28d5865f18d969af6d3bbabaa1804bcf75494ba8",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.2](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.1...v0.34.2)\n(2026-05-20)\n\n\n### Bug Fixes\n\n* **config:** inject gateway.mode=local for openclaw >= v2026.5.18\n([#502](https://github.com/openclaw-rocks/openclaw-opera\n[…]\n2a0ac18bbf30e50d5cae))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.2 (#503)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T06:38:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e114ce7291d4798e444e2a0ac18bbf30e50d5cae",
"body": "## Summary\n\n- Upstream `ghcr.io/openclaw/openclaw:latest` (v2026.5.18, built\n2026-05-18) added a boot-time safety check that refuses to start when\n`gateway.mode` is missing from the config: `Gateway start blocked:\nexisting config is missing gateway.mode`.\n- The operator never set this field, so ever\n[…]\nE2E in CI - the same failing suite should go green once this lands\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(config): inject gateway.mode=local for openclaw >= v2026.5.18 (#502)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T04:21:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6da9836834fc3bcc318febf901e6d484dc71626c",
"body": "…in /docs-site (#495)\n\nBumps\n[mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin)\nfrom 6.2.2 to 7.1.8.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/mondeja/mkdocs-include-markdown-plugin/releases\">mkdocs-include-mar\n[…]\n/v6.2.2...v7.1.8\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump mkdocs-include-markdown-plugin from 6.2.2 to 7.1.8 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-17T10:30:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54c2c336f6d43c03198a397f202a301b00ea7ac6",
"body": "…ite (#494)\n\nBumps\n[pymdown-extensions](https://github.com/facelessuser/pymdown-extensions)\nfrom 10.12 to 10.16.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/facelessuser/pymdown-extensions/releases\">pymdown-extensions's\nreleases</a>.</em></p>\n<blockqu\n[…]\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump pymdown-extensions from 10.12 to 10.16.1 in /docs-s…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T09:51:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "442bedd0413e0694cb65d322d2e45072f75a4548",
"body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.0.0 to\n12.2.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/python-pillow/Pillow/releases\">pillow's\nreleases</a>.</em></p>\n<blockquote>\n<h2>12.2.0</h2>\n<p><a\nhref=\"https://pillow.readthedocs\n[…]\n/11.0.0...12.2.0\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump pillow from 11.0.0 to 12.2.0 in /docs-site (#493)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T09:38:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17d2ab3802e3b47513a747b202d5f8f76c7cffdb",
"body": "Bumps [cairosvg](https://github.com/Kozea/CairoSVG) from 2.7.1 to 2.9.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/Kozea/CairoSVG/releases\">cairosvg's\nreleases</a>.</em></p>\n<blockquote>\n<h2>2.9.0</h2>\n<p><strong>WARNING:</strong> this is a security u\n[…]\nm/openclaw-rocks/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump cairosvg from 2.7.1 to 2.9.0 in /docs-site (#492)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T08:08:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a83546075d0485796e1cca06c8906b0bbe7bad63",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.0...v0.34.1)\n(2026-05-12)\n\n\n### Bug Fixes\n\n* **docs-site:** correctly detect new CNAME file in gh-pages step\n([#490](https://github.com/openclaw-rocks/openclaw-operator/\n[…]\n955fcbc135b9fa8c8a03))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.1 (#491)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-14T07:53:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deb6b8c2079329ba180d955fcbc135b9fa8c8a03",
"body": "## Summary\n\nThe CNAME-write step in \\`docs.yaml\\` succeeded on the first\nauto-publish (v0.34.0) but didn't actually push anything because of a\nsubtle git-diff bug. CNAME has been manually pushed to \\`gh-pages\\` to\nunblock the current state; this PR ensures future deploys preserve it\ncorrectly.\n\n## B\n[…]\n] Next \\`docs.yaml\\` run (release-published or workflow_dispatch)\nconfirms CNAME is preserved and the step is a no-op on subsequent runs\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(docs-site): correctly detect new CNAME file in gh-pages step (#490)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T18:26:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0772118f6818a42357dddce385ea04949cc54918",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.33.0...v0.34.0)\n(2026-05-12)\n\n\n### Features\n\n* docs site at openclaw.rocks/docs/operator/\n([#488](https://github.com/openclaw-rocks/openclaw-operator/issues/488))\n([0a6aa43\n[…]\nbc0de2e11905f69b272b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.0 (#489)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T17:32:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a6aa43f2c4c88367cadbc0de2e11905f69b272b",
"body": "## Summary\n\nFoundation PR for the versioned docs site, per the [design\nspec](docs/specs/2026-05-12-docs-site-design.md) and [implementation\nplan](docs/specs/2026-05-12-docs-site-plan.md). Establishes:\n\n- mkdocs-material site under `docs-site/` building from existing\n`docs/*.md` + `README.md` + `ROAD\n[…]\nmatch parent site.\n6. **Chart.yaml** -- separate one-line PR to bump `/docs/operator/0.10`\n-> `/docs/operator/latest/`.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: docs site at openclaw.rocks/docs/operator/ (#488)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T15:31:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "652ad6d3a81a1051afe76c5fba2ea15e9fd3b41e",
"body": "## Summary\n\nThe ROADMAP had drifted significantly from reality. It was authored when\nthe operator was at v0.10.x and still listed the Phase 1/2/3 items from\nthe original community-chart gap analysis as planned, even though all of\nthem shipped in v0.10.0. Between v0.10 and v0.33 the operator picked u\n[…]\nME.md` feature table and recent\n`CHANGELOG.md` entries.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: refresh ROADMAP for v0.33 and v1 path (#487)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T10:16:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "927ce224284f47555d5a91d8aaa7aa070d48a84b",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.33.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.32.1...v0.33.0)\n(2026-05-12)\n\n\n### Features\n\n* shareProcessNamespace (default true) to reap zombies\n([#485](https://github.com/openclaw-rocks/openclaw-operator/issues/485))\n[…]\n3f73db7d3401e7087aeb))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.33.0 (#486)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:56:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cbfd4da821b1b6610cf3f73db7d3401e7087aeb",
"body": "## Summary\n\nAdds `spec.shareProcessNamespace` (default `true`) to\n`OpenClawInstance`. When enabled, all containers in the pod share a PID\nnamespace and the Kubernetes `pause` container becomes PID 1,\nautomatically reaping zombie processes that accumulate under the Node.js\ngateway (which does not cal\n[…]\n476.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: alexander-morris <alex@weteachblockchain.org>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: shareProcessNamespace (default true) to reap zombies (#485)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:42:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f261a8fc7725b1de8d1244e4b55db6db6576fcd3",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.32.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.32.0...v0.32.1)\n(2026-05-11)\n\n\n### Bug Fixes\n\n* **workspace:** support nested paths in spec.workspace.initialFiles\n([#483](https://github.com/openclaw-rocks/openclaw-operat\n[…]\nc3a1b4c2db55d8af82bf))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.32.1 (#484)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:04:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efca189304f89a0005d2c3a1b4c2db55d8af82bf",
"body": "…#483)",
"is_bot": false,
"headline": "fix(workspace): support nested paths in spec.workspace.initialFiles (…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-11T16:29:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a98bf17523f7a7dd70f8619ab1a78d5688f2c1f",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.32.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.31.1...v0.32.0)\n(2026-05-10)\n\n\n### Features\n\n* **chart:** aggregate OpenClaw CRD permissions into admin/edit/view\nroles\n([#480](https://github.com/openclaw-rocks/openclaw-o\n[…]\ncd180f3d09c8b3265181))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.32.0 (#481)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-10T09:02:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d06f81f1e828efa3b53cd180f3d09c8b3265181",
"body": "…roles (#480)\n\n## Summary\n- Adds three aggregated `ClusterRole`s labeled with\n`rbac.authorization.k8s.io/aggregate-to-{admin,edit,view}` so users\nbound to Kubernetes' standard `admin`/`edit`/`view` `ClusterRole` in a\nnamespace can manage `OpenClawInstance` and `OpenClawSelfConfig`\nresources there.\n-\n[…]\n\n- [ ] CI: lint, test, reconcile-guard, helm-rbac-sync, build, e2e\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(chart): aggregate OpenClaw CRD permissions into admin/edit/view …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-10T08:49:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37b90262b6ba75ced5204e6a8a8647d9e7f8dbef",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.31.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.31.0...v0.31.1)\n(2026-05-08)\n\n\n### Bug Fixes\n\n* **plugins:** install plugins under ~/.openclaw/extensions for\nauto-discovery\n([#477](https://github.com/openclaw-rocks/openc\n[…]\nfc8451b38d8a30e9a8f4))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.31.1 (#478)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-09T08:33:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de8c1c477d27d978432efc8451b38d8a30e9a8f4",
"body": "…iscovery (#477)\n\n## Summary\n\nFixes #474. The init-plugins container was installing OpenClaw plugins\ninto `~/.openclaw/node_modules/<pkg>/`, where the gateway's plugin\nloader cannot find them. This rewrites the install layout to match what\nthe loader actually scans: `~/.openclaw/extensions/<unscoped\n[…]\n(could be relied upon by `npm:`-prefixed skills) and are harmless.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): install plugins under ~/.openclaw/extensions for auto-d…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-08T17:41:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67633f3dad9faa7c8c944a66cc774eefe6268406",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.31.0 (#475)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-06T02:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46abfa4756b6fcc82cd9b7b9e8a5a85fc4afb7a1",
"body": "…paces (#469)\n\nCloses #468.\n\n## Summary\n\n- Add `rbac.create` Helm value (default `true`); set to `false` to skip\nchart-managed RBAC so operators can supply their own\n- Add `watchNamespaces` Helm value (default empty/cluster-wide); when\nset, the chart renders per-namespace `Role`/`RoleBinding` pairs \n[…]\n e2e verification on a kind cluster (relies on existing CI matrix)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(chart): allow disabling chart RBAC and scoping operator to names…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-05T13:13:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7df1a972dca486fea3bd33e4eb238742d5c05917",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.30.0 (#466)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-26T06:23:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67bbf7125d6df23ab62ea6fcb59ce4472f25df66",
"body": "…465)\n\n## Summary\n\nFixes #463.\n\nThe operator seeds `BOOTSTRAP.md` into the default workspace via an init\ncontainer using `[ -f target ] || cp source target`. OpenClaw deletes\nthe file after applying it, so on every subsequent pod restart or config\nchange the init container sees the file is missing a\n[…]\ninstance with `bootstrap.enabled: false`, verify\n`BOOTSTRAP.md` is absent from the workspace ConfigMap and from the\n`init-config` script\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "feat(workspace): add spec.workspace.bootstrap.enabled disable flag (#…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-24T13:47:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c4c5f50f44a12dfc3676923a11a97fdcb3280d01",
"body": "…o /app (#464)\n\n## Summary\n\nFixes #462.\n\nBundled OpenClaw plugin extensions (e.g. `discord`) under\n`~/.openclaw/plugin-runtime-deps/openclaw-<version>-<hash>/dist/extensions/`\nimport `openclaw/...` as bare ESM specifiers. Node's resolver walks up\nlooking for `openclaw` in `node_modules`.\n\nAfter an i\n[…]\nit + e2e on kind\n- [ ] Manual: deploy, upgrade image version across a breaking npm cache,\nconfirm discord provider no longer crash loops\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(statefulset): symlink plugin-runtime-deps/node_modules/openclaw t…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-24T13:19:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5b6761d0b91251b162ed4ae87014e6539af9cb82",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.29.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.28.1...v0.29.0)\n(2026-04-23)\n\n\n### Features\n\n* **cluster-defaults:** add OpenClawClusterDefaults singleton CRD\n([#460](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\n6c896342ec21e0ae181b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.29.0 (#461)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-23T08:34:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e3f6bc9b82a78855d1b6c896342ec21e0ae181b",
"body": null,
"is_bot": false,
"headline": "feat(cluster-defaults): add OpenClawClusterDefaults singleton CRD (#460)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-23T08:18:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2883afcba597dd5155f006a8a5d40ccba07266f6",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.28.1 (#459)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-21T19:02:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab8c081bb1ce98e7668bbf39b3a4772e13aec9f",
"body": "## Summary\n\n- Add `~/.config` as a PVC subPath mount in the main container,\nalongside the existing `~/.local` and `~/.cache` mounts.\n- Extend the init-uv script to pre-create `/data/.config` with pod UID\nownership, so the SubPath mount works on hostPath-backed PVCs\n(consistent with the `#448` fix fo\n[…]\n vet ./...` clean\n- [ ] CI: lint + e2e (kind cluster)\n\nCloses #456\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(statefulset): mount ~/.config as writable PVC subPath (#458)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-21T18:32:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a3fc06d8d170771fdcdc2e38e581d9de95dcda3",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.28.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.27.1...v0.28.0)\n(2026-04-17)\n\n\n### Features\n\n* **skillpacks:** install packs from plain git repos without\nskillpack.json\n([#454](https://github.com/openclaw-rocks/openclaw-\n[…]\n961bfc0591717009b008))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.28.0 (#455)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-18T07:21:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78b92d73d7495d481121961bfc0591717009b008",
"body": "…k.json (#454)\n\n## Summary\n\nCloses #452.\n\n- When a `pack:owner/repo/path[@ref]` entry has no `skillpack.json` at\nthe given path, the resolver now falls back to a **raw-repo install**:\nit lists the repository via the GitHub Git Trees API and seeds every\nfile beneath the path into the workspace at\n`sk\n[…]\nedictable\ndestination no matter where in the repo the skill lives.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skillpacks): install packs from plain git repos without skillpac…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:47:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "020712a2492c486dfd59216d1cb3793786e84eb2",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.27.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.27.0...v0.27.1)\n(2026-04-17)\n\n\n### Bug Fixes\n\n* **init:** mount full data volume in init-uv/init-pip for hostPath PVCs\n([#450](https://github.com/openclaw-rocks/openclaw-op\n[…]\n06a2fc4466e297bc4df2))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.27.1 (#453)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:28:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2eaaea9dc1f468f3cc1806a2fc4466e297bc4df2",
"body": "…Cs (#450)\n\n## Summary\n\nFixes #448 - `init-uv` failing with `mkdir: cannot create directory\n'/home/openclaw/.local/bin': Permission denied` on hostPath-backed PVCs\nsuch as Rancher local-path-provisioner on Talos.\n\nKubernetes does not apply `fsGroup` ownership to `hostPath` volumes\n([docs](https://ku\n[…]\ner (confirmed\nin #448 triage that the reporter hits this failure).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(init): mount full data volume in init-uv/init-pip for hostPath PV…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:16:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2a9df910bcef45ddcb22c44548b5d86cfdf28835",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.27.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.2...v0.27.0)\n(2026-04-14)\n\n\n### Features\n\n* **helm:** add logLevel value to control operator log verbosity\n([#445](https://github.com/openclaw-rocks/openclaw-operator/is\n[…]\n6c651bceacf0f044f5f9))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.27.0 (#449)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-15T11:10:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf4a88f10b919eed42e63ee4583feaf1f1f1766f",
"body": "Follow-up to #439 -- adds managed fields awareness, warning events, and\nthe \"remove all\" correctness fix to the SelfConfig SSA implementation.\n\n- Add managed fields parser to extract SelfConfig-owned items from\nKubernetes `managedFields` metadata\n- Emit `Warning`/`SelfConfigSkippedRemoval` events wh\n[…]\nms remain\n\n## Test plan\n\n- [x] `make test`\n- [x] `make`, `make vet` clean\n- [ ] Controller integration tests (envtest) -- CI\n- [ ] E2E tests: field manager verification + multi-apply coexistence --\nCI",
"is_bot": false,
"headline": "SelfConfig SSA improvements (#443)",
"author_name": "Stig Bakken",
"author_login": "stigsb",
"committed_at": "2026-04-14T14:38:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3711bce50b6de870d9f36c651bceacf0f044f5f9",
"body": "…aged resources (#447)\n\nCloses #446.\n\n## Problem\n\nIssue #446 identified four resources where `CreateOrUpdate` mutate funcs\nreplaced the annotation map wholesale:\n\n```go\nobj.Annotations = desired.Annotations\n```\n\nOn any cluster where an external controller annotates operator-managed\nresources, the op\n[…]\ntions` assignments\nreplaced with `mergeStringMap`\n- `internal/controller/annotations_test.go` -- unit tests covering nil\ncurrent, external key preservation, update, stale-key retention, and\nlabel case",
"is_bot": false,
"headline": "fix: preserve third-party annotations and labels when reconciling man…",
"author_name": "Nick Marden",
"author_login": "nickmarden",
"committed_at": "2026-04-12T11:37:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cab3f274a24e9c4c89e0d19156c56e1e63f0b77",
"body": "Closes #444.\n\nWires `--zap-log-level` into the deployment args via a new `logLevel`\nHelm value (default: `info`). The flag is already accepted by the binary\nvia `opts.BindFlags` — this just exposes it.\n\n```yaml\n# suppress debug output in production\nlogLevel: info\n\n# re-enable for troubleshooting\nlogLevel: debug\n```",
"is_bot": false,
"headline": "feat(helm): add logLevel value to control operator log verbosity (#445)",
"author_name": "Nick Marden",
"author_login": "nickmarden",
"committed_at": "2026-04-12T11:26:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f28268fad9da44597703038c5a76eb01c09e7c28",
"body": "…(#436)\n\nBumps\n[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go)\nfrom 1.40.0 to 1.43.0.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\">go.opentelemetry.io/otel/sdk's\nchang\n[…]\ndependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": true,
"headline": "chore(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T12:07:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cc95eb6be90c81e689d2016f6fbe7db86c97b325",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.2](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.1...v0.26.2)\n(2026-04-09)\n\n\n### Bug Fixes\n\n* **backup:** use --skip-links instead of --copy-links in rclone\n([#430](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\nedda397be9acef844b1d))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.2 (#442)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T14:26:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd7b65ea8f28c2b0cadcedda397be9acef844b1d",
"body": "## Summary\n- Replaces `--copy-links` with `--skip-links` in all rclone\nbackup/restore commands\n- Broken/dangling symlinks (e.g. from pnpm, uv, python package managers)\ncaused rclone to fail with \"no such file or directory\" when\n`--copy-links` attempted to dereference them\n- `--skip-links` silently s\n[…]\nter with symlinks in `/data/` that backups\ncomplete without errors\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backup): use --skip-links instead of --copy-links in rclone (#430)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T13:54:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "21a0a1629d2b087e1e8f4e98c4299ff8de2b2be9",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.0...v0.26.1)\n(2026-04-09)\n\n\n### Bug Fixes\n\n* **helm:** always pass --metrics-secure flag to operator binary\n([#440](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\n32cb61b00eb18fea6d3a))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.1 (#441)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T10:35:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b202def1245cd9b5a15732cb61b00eb18fea6d3a",
"body": "## Summary\n- When `metrics.secure=false`, the Helm chart omitted the\n`--metrics-secure` flag entirely\n- The operator binary defaults to `--metrics-secure=true`, so it kept\nserving HTTPS metrics while the ServiceMonitor switched to HTTP scraping\n- This caused `400 Client sent an HTTP request to an HT\n[…]\nsecure=false` and verify Prometheus scrapes\nsuccessfully over HTTP\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(helm): always pass --metrics-secure flag to operator binary (#440)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T10:21:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a92bed0726796938b0abb492dc13e24236605b2",
"body": "…ce (#439)\n\n## Summary\n\nMigrate the SelfConfig controller from `r.Update()` with optimistic\nconcurrency retry to **Server-Side Apply (SSA)** with a dedicated field\nmanager (`openclaw-selfconfig`). This enables coexistence with GitOps\ncontrollers like FluxCD by letting the Kubernetes API server track\n[…]\n- CI will verify\n- [ ] E2E tests on kind cluster -- CI will verify\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: use Server-Side Apply for SelfConfig to enable GitOps coexisten…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T09:54:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "52947df172bcfd7821bf1f543ae9b34697d42f77",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.25.2...v0.26.0)\n(2026-04-09)\n\n\n### Features\n\n* exclude workspace from config-hash to skip unnecessary restarts\n([#432](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\na0c2e1660af5e53a281d))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.0 (#438)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T09:41:13Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 528,
"latest_release_at": "2026-07-20T06:56:39Z",
"latest_release_tag": "v0.38.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 23,
"days_since_latest_release": 4,
"mean_days_between_releases": 5.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/paperclipinc/openclaw-operator",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/paperclipinc/openclaw-operator",
"is_deprecated": false,
"latest_version": "v0.38.1",
"repository_url": "https://github.com/paperclipinc/openclaw-operator",
"versions_count": 132,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T06:51:21Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 69,
"stars": 391,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-02-14",
"count": 3
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-02-17",
"count": 1
},
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-02-19",
"count": 2
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-02-21",
"count": 2
},
{
"date": "2026-02-22",
"count": 2
},
{
"date": "2026-02-25",
"count": 3
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-04",
"count": 2
},
{
"date": "2026-03-05",
"count": 2
},
{
"date": "2026-03-08",
"count": 2
},
{
"date": "2026-03-09",
"count": 2
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 2
},
{
"date": "2026-03-12",
"count": 4
},
{
"date": "2026-03-13",
"count": 2
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 2
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-23",
"count": 1
},
{
"date": "2026-03-27",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-02",
"count": 2
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-25",
"count": 2
},
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-05",
"count": 2
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-14",
"count": 1
}
],
"complete": true,
"collected": 69,
"total_forks": 69
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 443192,
"source_files_sampled": 90,
"oversized_source_files": 6,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 10633
},
"dependencies": {
"manifests": [
"docs-site/requirements.txt",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-9xwg-3r6f-jcx2"
],
"fixed_version": "11.0.0",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.43.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5158"
],
"fixed_version": "1.44.0",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 10
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 10
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 3,
"moderate": 1
},
"advisory_count": 4,
"affected_count": 4,
"assessed_count": 106,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "github.com/Masterminds/semver/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.4.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.23.4"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.37.0"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.22.0"
},
{
"name": "go.opentelemetry.io/contrib/bridges/prometheus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.60.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.35.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/gorilla/websocket",
"direct": true,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver/v3",
"direct": true,
"version": "v3.4.0",
"ecosystem": "go"
},
{
"name": "github.com/onsi/ginkgo/v2",
"direct": true,
"version": "v2.23.4",
"ecosystem": "go"
},
{
"name": "github.com/onsi/gomega",
"direct": true,
"version": "v1.37.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.22.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/bridges/prometheus",
"direct": true,
"version": "v0.60.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"direct": true,
"version": "v1.35.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "k8s.io/api",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/apimachinery",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/client-go",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-runtime",
"direct": true,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "github.com/antlr4-go/antlr/v4",
"direct": false,
"version": "v4.13.0",
"ecosystem": "go"
},
{
"name": "github.com/asaskevich/govalidator",
"direct": false,
"version": "v0.0.0-20190424111038-f61b66f89f4a",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/blang/semver/v4",
"direct": false,
"version": "v4.0.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/go-restful/v3",
"direct": false,
"version": "v3.11.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": false,
"version": "v5.9.0",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/fxamacker/cbor/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/zapr",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.19.6",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v0.20.2",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.22.4",
"ecosystem": "go"
},
{
"name": "github.com/go-task/slim-sprig/v3",
"direct": false,
"version": "v3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20210331224755-41bb18bfe9da",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/google/cel-go",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/google/gnostic-models",
"direct": false,
"version": "v0.6.8",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/gofuzz",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/google/pprof",
"direct": false,
"version": "v0.0.0-20260115054156-294ebfa9ad83",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.26.3",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "v0.3.6",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/josharian/intern",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.63.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.15.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.5",
"ecosystem": "go"
},
{
"name": "github.com/stoewer/go-strcase",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/x448/float16",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": false,
"version": "v0.53.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": false,
"version": "v1.27.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/automaxprocs",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.26.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20230515195305-f3d0a9c9a5cc",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.43.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.44.0",
"ecosystem": "go"
},
{
"name": "gomodules.xyz/jsonpatch/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260414002931-afd174a4e478",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260414002931-afd174a4e478",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.82.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/inf.v0",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "k8s.io/apiextensions-apiserver",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/apiserver",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/component-base",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": false,
"version": "v2.130.1",
"ecosystem": "go"
},
{
"name": "k8s.io/kube-openapi",
"direct": false,
"version": "v0.0.0-20240228011516-70dd3763d340",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": false,
"version": "v0.0.0-20240711033017-18e509b52bc8",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
"direct": false,
"version": "v0.30.3",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/json",
"direct": false,
"version": "v0.0.0-20221116044647-bc3834ca7abd",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/structured-merge-diff/v4",
"direct": false,
"version": "v4.4.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "cairosvg",
"direct": false,
"version": "2.9.0",
"ecosystem": "pypi"
},
{
"name": "mike",
"direct": false,
"version": "2.1.3",
"ecosystem": "pypi"
},
{
"name": "mkdocs",
"direct": false,
"version": "1.6.1",
"ecosystem": "pypi"
},
{
"name": "mkdocs-awesome-pages-plugin",
"direct": false,
"version": "2.9.3",
"ecosystem": "pypi"
},
{
"name": "mkdocs-git-revision-date-localized-plugin",
"direct": false,
"version": "1.2.9",
"ecosystem": "pypi"
},
{
"name": "mkdocs-include-markdown-plugin",
"direct": false,
"version": "7.1.8",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material",
"direct": false,
"version": "9.5.49",
"ecosystem": "pypi"
},
{
"name": "mkdocs-minify-plugin",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "pillow",
"direct": false,
"version": "12.3.0",
"ecosystem": "pypi"
},
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 106,
"direct_count": 14,
"indirect_count": 92
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 402,
"open_issues": 4,
"closed_ratio": 0.973,
"closed_issues": 142,
"closed_unmerged_prs": 27
},
"bus_factor": 1,
"bot_contributors": 4,
"top_contributors": [
{
"type": "User",
"login": "stubbi",
"commits": 447,
"avatar_url": "https://avatars.githubusercontent.com/u/24454679?v=4"
},
{
"type": "User",
"login": "tmccoy14",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/44643066?v=4"
},
{
"type": "User",
"login": "yuki-node",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/33125275?v=4"
},
{
"type": "User",
"login": "victorges",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/1613383?v=4"
},
{
"type": "User",
"login": "teith",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/123115827?v=4"
},
{
"type": "User",
"login": "mcgilly17",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/4136843?v=4"
},
{
"type": "User",
"login": "nickmarden",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/50927?v=4"
},
{
"type": "User",
"login": "RikuXan",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/3399940?v=4"
},
{
"type": "User",
"login": "kriptoburak",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8755484?v=4"
},
{
"type": "User",
"login": "sedlund",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8109138?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.896
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"conformance.yaml",
"docs.yaml",
"operatorhub.yaml",
"release-please.yaml",
"release.yaml",
"stale.yaml",
"verify-signing.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/18 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 6,
"reason": "4 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2bfeca50c5ffcbb2b8f455dbaabe5d1f460fb6cb",
"ran_at": "2026-07-25T05:04:04Z",
"aggregate_score": 5.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T04:43:25Z",
"oldest_open_prs": [
{
"number": 562,
"created_at": "2026-07-07T02:44:28Z",
"last_comment_at": "2026-07-15T12:05:56Z",
"last_comment_author": "thiagobodevan"
},
{
"number": 579,
"created_at": "2026-07-24T18:39:51Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T18:20:57Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 560,
"created_at": "2026-07-03T13:40:14Z",
"last_comment_at": "2026-07-12T19:15:12Z",
"last_comment_author": "stubbi"
},
{
"number": 576,
"created_at": "2026-07-23T18:51:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 577,
"created_at": "2026-07-23T22:29:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 578,
"created_at": "2026-07-23T22:59:20Z",
"last_comment_at": "2026-07-24T23:40:30Z",
"last_comment_author": "katerinkaivanova"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/paperclipinc/openclaw-operator",
"host": "github.com",
"name": "openclaw-operator",
"owner": "paperclipinc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"security": 62,
"vitality": 84,
"community": 63,
"governance": 65,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 84,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"commits_last_year": 528,
"human_commit_share": 0.78,
"days_since_last_push": 0,
"active_weeks_last_year": 23
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "23/52 weeks with commits",
"points": 15.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 23
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "528 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 528
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.38.1",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 5.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 63,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 69,
"stars": 391,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "391 stars",
"points": 42,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 391
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "69 forks",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 69
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.896
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 402,
"open_issues": 4,
"closed_issues": 142,
"issue_closed_ratio": 0.973,
"closed_unmerged_prs": 27
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "97% of issues closed",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 97
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "402/429 decided PRs merged",
"points": 35.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 402,
"decided": 429
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"followers": 110,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "paperclipinc",
"public_repos": 11,
"account_age_days": 168
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "110 followers of paperclipinc",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 110,
"login": "paperclipinc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~0 yr old",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/paperclipinc/openclaw-operator"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "132 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 132
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"kubernetes",
"openclaw",
"golang",
"helm",
"agents",
"ai",
"operator"
],
"has_wiki": false,
"homepage": "https://paperclip.inc/openclaw",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://paperclip.inc/openclaw",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 62,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "4 existing vulnerabilities detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 106 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 106
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 4,
"assessed_packages": 106,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1, unknown 3",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: go.opentelemetry.io/otel v1.43.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "go.opentelemetry.io/otel v1.43.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 106,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 82,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 10633
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 78 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 78
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.43,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "43 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 43,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 443192,
"source_files_sampled": 90,
"oversized_source_files": 6
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "6/90 source files over 60KB",
"points": 51.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 90,
"oversized": 6
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T05:04:28.373365Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/paperclipinc/openclaw-operator.svg",
"full_name": "paperclipinc/openclaw-operator",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with paperclipinc/openclaw-operator. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
