公开记录良好
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 05:04 UTC
paperclipinc / openclaw-operator
Kubernetes operator for deploying and managing OpenClaw AI agent instances with production-grade security, observability, and lifecycle management.
paperclipinc/openclaw-operator 的健康指数为 100 分中的 73 分，处于「良好」区间。 其得分最高的类别是Engineering Quality（86/100），最低的是Security（62/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
73
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。
73
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
所有权
软件包生态系统
| 注册表 | 软件包 | 版本 | 月下载量 | 版本数 | 最近发布 |
|---|---|---|---|---|---|
| Go | github.com/paperclipinc/openclaw-operator | v0.38.1 | - | 132 | 4 天前 |
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
84
开发活跃度
80良好
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 15.9/36 | 提交节奏 — 52 周中有 23 周有提交 |
| 18/18 | 提交量 — 最近一年 528 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 528 |
| human_commit_share | 0.78 |
| days_since_last_push | 0 |
| active_weeks_last_year | 23 |
发布纪律
90优秀
评分方式
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 4 天前 |
| 27/27 | 发布节奏 — 约每 5.3 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases. |
所用输入
| releases_count | 100 |
| latest_release_tag | v0.38.1 |
| releases_from_tags | 否 |
| days_since_latest_release | 4 |
| mean_days_between_releases | 5.3 |
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
63
流行度与采用
57中等
评分方式
| 42/60 | 星标 — 391 个星标 |
| 15.3/25 | 复刻 — 69 个复刻 |
| 0/15 | 关注者 — 2 位关注者 |
所用输入
| forks | 69 |
| stars | 391 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
70良好
评分方式
| 22.5/22.5 | README |
| 22.5/22.5 | 许可证 — 可识别的许可证（Apache-2.0） |
| 18/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| has_contributing | 是 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
65
维护者韧性（巴士系数）
35存在风险
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 2.3/22.5 | 提交分布 — 头号贡献者编写了 90% 的提交 |
| 13.5/13.5 | 贡献者广度 — 13 位贡献者 |
| 10/10 | OpenSSF Scorecard：Contributors — project has 7 contributing companies or organizations |
所用输入
| bus_factor | 1 |
| contributors_sampled | 13 |
| top_contributor_share | 0.896 |
议题与 PR 响应能力
83良好
评分方式
| 45.5/46.8 | 议题解决 — 97% 的议题已关闭 |
| 35.8/38.3 | PR 接受 — 已裁定的 PR 中 402/429 已合并 |
| 1.5/15 | OpenSSF Scorecard：Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
所用输入
| merged_prs | 402 |
| open_issues | 4 |
| closed_issues | 142 |
| issue_closed_ratio | 0.973 |
| closed_unmerged_prs | 27 |
所有权与托管责任
54中等
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 14.7/25 | 所有者影响力 — paperclipinc 有 110 位关注者 |
| 8.8/25 | 既往记录 — 11 个公开仓库，账户约 0 年 |
所用输入
| followers | 110 |
| owner_type | Organization |
| is_verified | — |
| owner_login | paperclipinc |
| public_repos | 11 |
| account_age_days | 168 |
软件包维护
100优秀
评分方式
| 25/25 | 已发布且可解析 — go 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 4 天前 |
| 20/20 | 版本历史 — 132 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | github.com/paperclipinc/openclaw-operator |
| ecosystems | go |
| any_deprecated | 否 |
| min_days_since_publish | 4 |
工程质量
基础的工程与文档实践是否到位？
86
工程实践
84良好
评分方式
| 24/24 | CI 工作流 — 8 个工作流 |
| 24/24 | 存在测试 |
| 16/16 | Linter 配置 — .golangci.yaml |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 是 |
| has_precommit_config | 否 |
文档
90优秀
评分方式
| 30/30 | README |
| 25/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://paperclip.inc/openclaw |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 7 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | kubernetes, openclaw, golang, helm, agents, ai, operator |
| has_wiki | 否 |
| homepage | https://paperclip.inc/openclaw |
| has_readme | 是 |
| has_docs_dir | 是 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
62
安全态势
55中等
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0.8/7.5 | Code-Review — Found 2/18 approved changesets -- score normalized to 1 |
| 2.5/2.5 | Contributors — project has 7 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 4.5/7.5 | Vulnerabilities — 4 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 5.5 |
依赖安全公告
89优秀
评分方式
| 26.6/35 | 直接依赖不含已知公告 — 1 个受影响：go.opentelemetry.io/otel v1.43.0 (unknown) |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
所用输入
| source | osv |
| advisories | 4 |
| affected_packages | 4 |
| assessed_packages | 106 |
| unassessed_packages | 0 |
| affected_by_severity | moderate 1, unknown 3 |
| direct_affected_packages | 1 |
已排除计分（无数据或不适用）：间接依赖不含已知公告。 其余权重已重新归一化。 已将 106 个已解析依赖与 OSV 比对。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。
82
AI 代理上下文与指引
85优秀
评分方式
| 45/45 | 代理指令 — CLAUDE.md |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 78 次人类提交中有 78 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 10,633 |
评分方式
| 18/18 | 一条命令的引导启动 — Makefile |
| 22/22 | 自动化测试 |
| 11/11 | Lint / 格式化配置 — .golangci.yaml |
| 11/11 | 静态类型检查 — Go（静态类型） |
| 10/10 | 可复现环境 — Dockerfile, lockfile |
| 10/10 | 已体现的代理实践 — 最近 100 次提交中有 43 次由代理编写或署名代理 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 9 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | go.sum |
| has_dockerfile | 是 |
| typed_language | 是 |
| bootstrap_files | Makefile |
| has_devcontainer | 否 |
| has_linter_config | 是 |
| typecheck_configs | — |
| agent_commit_share | 0.43 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.09 |
面向模型的代码可读性
96优秀
评分方式
| 45/45 | 可类型检查的代码 — Go（静态类型） |
| 51.3/55 | 可控的文件大小 — 采样的 90 个源文件中有 6 个超过 60KB |
所用输入
| primary_language | Go |
| largest_source_bytes | 443,192 |
| source_files_sampled | 90 |
| oversized_source_files | 6 |
机器可读接口
40存在风险
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 0/20 | MCP 服务器 |
| 40/40 | 可运行示例 — samples |
所用输入
| example_dirs | samples |
| has_mcp_signal | 否 |
| api_schema_files | — |
关键数据
391GitHub 星标
13贡献者
528最近 12 个月提交数
0距最近推送天数
100发布版本数
1巴士系数（bus factor）
4开放议题
Go, PyPI软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
更多细节
Star 与 Fork 历史 0 ★ / 69 ⇿
0Star
69Fork
97发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 27修订 70
OpenSSF Scorecard 5.5 / 10
5.5综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 1 | Code-Review | Found 2/18 approved changesets -- score normalized to 1 |
| 10 | Contributors | project has 7 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 6 | Vulnerabilities | 4 existing vulnerabilities detected |
直接依赖 14
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| Go | github.com/Masterminds/semver/v3 | v3.4.0 | go.mod |
| Go | github.com/gorilla/websocket | v1.5.3 | go.mod |
| Go | github.com/onsi/ginkgo/v2 | v2.23.4 | go.mod |
| Go | github.com/onsi/gomega | v1.37.0 | go.mod |
| Go | github.com/prometheus/client_golang | v1.22.0 | go.mod |
| Go | go.opentelemetry.io/contrib/bridges/prometheus | v0.60.0 | go.mod |
| Go | go.opentelemetry.io/otel | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.35.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk | v1.43.0 | go.mod |
| Go | go.opentelemetry.io/otel/sdk/metric | v1.43.0 | go.mod |
| Go | k8s.io/api | v0.31.0 | go.mod |
| Go | k8s.io/apimachinery | v0.31.0 | go.mod |
| Go | k8s.io/client-go | v0.31.0 | go.mod |
| Go | sigs.k8s.io/controller-runtime | v0.19.0 | go.mod |
全部依赖 106
来自 GitHub 依赖图的完整解析依赖集合：14 个直接依赖与 92 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| Go | github.com/gorilla/websocket | v1.5.3 | 直接 |
| Go | github.com/masterminds/semver/v3 | v3.4.0 | 直接 |
| Go | github.com/onsi/ginkgo/v2 | v2.23.4 | 直接 |
| Go | github.com/onsi/gomega | v1.37.0 | 直接 |
| Go | github.com/prometheus/client_golang | v1.22.0 | 直接 |
| Go | go.opentelemetry.io/contrib/bridges/prometheus | v0.60.0 | 直接 |
| Go | go.opentelemetry.io/otel | v1.43.0 | 直接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.35.0 | 直接 |
| Go | go.opentelemetry.io/otel/sdk | v1.43.0 | 直接 |
| Go | go.opentelemetry.io/otel/sdk/metric | v1.43.0 | 直接 |
| Go | k8s.io/api | v0.31.0 | 直接 |
| Go | k8s.io/apimachinery | v0.31.0 | 直接 |
| Go | k8s.io/client-go | v0.31.0 | 直接 |
| Go | sigs.k8s.io/controller-runtime | v0.19.0 | 直接 |
| Go | github.com/antlr4-go/antlr/v4 | v4.13.0 | 间接 |
| Go | github.com/asaskevich/govalidator | v0.0.0-20190424111038-f61b66f89f4a | 间接 |
| Go | github.com/beorn7/perks | v1.0.1 | 间接 |
| Go | github.com/blang/semver/v4 | v4.0.0 | 间接 |
| Go | github.com/cenkalti/backoff/v4 | v4.3.0 | 间接 |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | 间接 |
| Go | github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | 间接 |
| Go | github.com/emicklei/go-restful/v3 | v3.11.0 | 间接 |
| Go | github.com/evanphx/json-patch/v5 | v5.9.0 | 间接 |
| Go | github.com/felixge/httpsnoop | v1.0.4 | 间接 |
| Go | github.com/fsnotify/fsnotify | v1.7.0 | 间接 |
| Go | github.com/fxamacker/cbor/v2 | v2.7.0 | 间接 |
| Go | github.com/go-logr/logr | v1.4.3 | 间接 |
| Go | github.com/go-logr/stdr | v1.2.2 | 间接 |
| Go | github.com/go-logr/zapr | v1.3.0 | 间接 |
| Go | github.com/go-openapi/jsonpointer | v0.19.6 | 间接 |
| Go | github.com/go-openapi/jsonreference | v0.20.2 | 间接 |
| Go | github.com/go-openapi/swag | v0.22.4 | 间接 |
| Go | github.com/go-task/slim-sprig/v3 | v3.0.0 | 间接 |
| Go | github.com/gogo/protobuf | v1.3.2 | 间接 |
| Go | github.com/golang/groupcache | v0.0.0-20210331224755-41bb18bfe9da | 间接 |
| Go | github.com/golang/protobuf | v1.5.4 | 间接 |
| Go | github.com/google/cel-go | v0.20.1 | 间接 |
| Go | github.com/google/gnostic-models | v0.6.8 | 间接 |
| Go | github.com/google/go-cmp | v0.7.0 | 间接 |
| Go | github.com/google/gofuzz | v1.2.0 | 间接 |
| Go | github.com/google/pprof | v0.0.0-20260115054156-294ebfa9ad83 | 间接 |
| Go | github.com/google/uuid | v1.6.0 | 间接 |
| Go | github.com/grpc-ecosystem/grpc-gateway/v2 | v2.26.3 | 间接 |
| Go | github.com/imdario/mergo | v0.3.6 | 间接 |
| Go | github.com/inconshreveable/mousetrap | v1.1.0 | 间接 |
| Go | github.com/josharian/intern | v1.0.0 | 间接 |
| Go | github.com/json-iterator/go | v1.1.12 | 间接 |
| Go | github.com/mailru/easyjson | v0.7.7 | 间接 |
| Go | github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | 间接 |
| Go | github.com/modern-go/reflect2 | v1.0.2 | 间接 |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | 间接 |
| Go | github.com/pkg/errors | v0.9.1 | 间接 |
| Go | github.com/prometheus/client_model | v0.6.2 | 间接 |
| Go | github.com/prometheus/common | v0.63.0 | 间接 |
| Go | github.com/prometheus/procfs | v0.15.1 | 间接 |
| Go | github.com/spf13/cobra | v1.8.1 | 间接 |
| Go | github.com/spf13/pflag | v1.0.5 | 间接 |
| Go | github.com/stoewer/go-strcase | v1.2.0 | 间接 |
| Go | github.com/x448/float16 | v0.8.4 | 间接 |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | 间接 |
| Go | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.53.0 | 间接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.28.0 | 间接 |
| Go | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.27.0 | 间接 |
| Go | go.opentelemetry.io/otel/metric | v1.43.0 | 间接 |
| Go | go.opentelemetry.io/otel/trace | v1.43.0 | 间接 |
| Go | go.opentelemetry.io/proto/otlp | v1.5.0 | 间接 |
| Go | go.uber.org/automaxprocs | v1.6.0 | 间接 |
| Go | go.uber.org/multierr | v1.11.0 | 间接 |
| Go | go.uber.org/zap | v1.26.0 | 间接 |
| Go | golang.org/x/exp | v0.0.0-20230515195305-f3d0a9c9a5cc | 间接 |
| Go | golang.org/x/net | v0.55.0 | 间接 |
| Go | golang.org/x/oauth2 | v0.36.0 | 间接 |
| Go | golang.org/x/sync | v0.20.0 | 间接 |
| Go | golang.org/x/sys | v0.45.0 | 间接 |
| Go | golang.org/x/term | v0.43.0 | 间接 |
| Go | golang.org/x/text | v0.37.0 | 间接 |
| Go | golang.org/x/time | v0.3.0 | 间接 |
| Go | golang.org/x/tools | v0.44.0 | 间接 |
| Go | gomodules.xyz/jsonpatch/v2 | v2.4.0 | 间接 |
| Go | google.golang.org/genproto/googleapis/api | v0.0.0-20260414002931-afd174a4e478 | 间接 |
| Go | google.golang.org/genproto/googleapis/rpc | v0.0.0-20260414002931-afd174a4e478 | 间接 |
| Go | google.golang.org/grpc | v1.82.1 | 间接 |
| Go | google.golang.org/protobuf | v1.36.11 | 间接 |
| Go | gopkg.in/inf.v0 | v0.9.1 | 间接 |
| Go | gopkg.in/yaml.v2 | v2.4.0 | 间接 |
| Go | gopkg.in/yaml.v3 | v3.0.1 | 间接 |
| Go | k8s.io/apiextensions-apiserver | v0.31.0 | 间接 |
| Go | k8s.io/apiserver | v0.31.0 | 间接 |
| Go | k8s.io/component-base | v0.31.0 | 间接 |
| Go | k8s.io/klog/v2 | v2.130.1 | 间接 |
| Go | k8s.io/kube-openapi | v0.0.0-20240228011516-70dd3763d340 | 间接 |
| Go | k8s.io/utils | v0.0.0-20240711033017-18e509b52bc8 | 间接 |
| Go | sigs.k8s.io/apiserver-network-proxy/konnectivity-client | v0.30.3 | 间接 |
| Go | sigs.k8s.io/json | v0.0.0-20221116044647-bc3834ca7abd | 间接 |
| Go | sigs.k8s.io/structured-merge-diff/v4 | v4.4.1 | 间接 |
| Go | sigs.k8s.io/yaml | v1.4.0 | 间接 |
| PyPI | cairosvg | 2.9.0 | 间接 |
| PyPI | mike | 2.1.3 | 间接 |
| PyPI | mkdocs | 1.6.1 | 间接 |
| PyPI | mkdocs-awesome-pages-plugin | 2.9.3 | 间接 |
| PyPI | mkdocs-git-revision-date-localized-plugin | 1.2.9 | 间接 |
| PyPI | mkdocs-include-markdown-plugin | 7.1.8 | 间接 |
| PyPI | mkdocs-material | 9.5.49 | 间接 |
| PyPI | mkdocs-minify-plugin | 0.8.0 | 间接 |
| PyPI | pillow | 12.3.0 | 间接 |
| PyPI | pymdown-extensions | 10.21.3 | 间接 |
依赖安全公告 4
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 106 个包，其中也包含从不交付的开发与测试版本固定：4 个存在已知公告，1 个为直接依赖。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| pymdown-extensions | 10.21.3 | 间接 | 中 | 1 | 11.0.0 |
| go.opentelemetry.io/otel | v1.43.0 | 直接 | 未知 | 1 | 1.44.0 |
| golang.org/x/net | v0.55.0 | 间接 | 未知 | 1 | 0.56.0 |
| golang.org/x/text | v0.37.0 | 间接 | 未知 | 1 | 0.39.0 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"kubernetes",
"openclaw",
"golang",
"helm",
"agents",
"ai",
"operator"
],
"is_fork": false,
"size_kb": 4038,
"has_wiki": false,
"homepage": "https://paperclip.inc/openclaw",
"languages": {
"Go": 1577763,
"HTML": 2541,
"Shell": 13719,
"Python": 2235,
"Makefile": 11228,
"Dockerfile": 1559,
"Go Template": 5816
},
"pushed_at": "2026-07-24T18:39:28Z",
"created_at": "2026-02-06T07:56:06Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T10:39:28Z",
"description": "Kubernetes operator for deploying and managing OpenClaw AI agent instances with production-grade security, observability, and lifecycle management.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://paperclip.inc",
"name": "Paperclip.inc",
"type": "Organization",
"login": "paperclipinc",
"company": null,
"location": "Estonia",
"followers": 110,
"avatar_url": "https://avatars.githubusercontent.com/u/259805909?v=4",
"created_at": "2026-02-06T07:40:50Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 168
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.38.1",
"kind": "patch",
"published_at": "2026-07-20T06:56:39Z"
},
{
"tag": "v0.38.0",
"kind": "minor",
"published_at": "2026-07-19T21:49:45Z"
},
{
"tag": "v0.37.0",
"kind": "minor",
"published_at": "2026-07-18T16:45:53Z"
},
{
"tag": "v0.36.5",
"kind": "patch",
"published_at": "2026-06-20T18:32:34Z"
},
{
"tag": "v0.36.4",
"kind": "patch",
"published_at": "2026-06-16T15:47:52Z"
},
{
"tag": "v0.36.3",
"kind": "patch",
"published_at": "2026-06-16T13:59:13Z"
},
{
"tag": "v0.36.2",
"kind": "patch",
"published_at": "2026-06-15T16:39:51Z"
},
{
"tag": "v0.36.1",
"kind": "patch",
"published_at": "2026-06-08T11:14:14Z"
},
{
"tag": "v0.36.0",
"kind": "minor",
"published_at": "2026-06-03T21:19:38Z"
},
{
"tag": "v0.35.0",
"kind": "minor",
"published_at": "2026-06-02T12:38:39Z"
},
{
"tag": "v0.34.8",
"kind": "patch",
"published_at": "2026-06-02T10:44:21Z"
},
{
"tag": "v0.34.7",
"kind": "patch",
"published_at": "2026-06-01T06:39:10Z"
},
{
"tag": "v0.34.6",
"kind": "patch",
"published_at": "2026-05-31T07:09:16Z"
},
{
"tag": "v0.34.5",
"kind": "patch",
"published_at": "2026-05-26T14:55:17Z"
},
{
"tag": "v0.34.4",
"kind": "patch",
"published_at": "2026-05-21T11:09:19Z"
},
{
"tag": "v0.34.3",
"kind": "patch",
"published_at": "2026-05-21T07:02:58Z"
},
{
"tag": "v0.34.2",
"kind": "patch",
"published_at": "2026-05-20T06:44:03Z"
},
{
"tag": "v0.34.1",
"kind": "patch",
"published_at": "2026-05-14T07:59:30Z"
},
{
"tag": "v0.34.0",
"kind": "minor",
"published_at": "2026-05-12T17:37:14Z"
},
{
"tag": "v0.33.0",
"kind": "minor",
"published_at": "2026-05-12T10:06:32Z"
},
{
"tag": "v0.32.1",
"kind": "patch",
"published_at": "2026-05-12T09:14:53Z"
},
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2026-05-10T09:07:20Z"
},
{
"tag": "v0.31.1",
"kind": "patch",
"published_at": "2026-05-09T08:39:13Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2026-05-06T03:03:12Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2026-04-26T06:28:05Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2026-04-23T08:39:29Z"
},
{
"tag": "v0.28.1",
"kind": "patch",
"published_at": "2026-04-21T19:07:44Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2026-04-18T07:25:50Z"
},
{
"tag": "v0.27.1",
"kind": "patch",
"published_at": "2026-04-17T14:35:05Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2026-04-15T11:15:58Z"
},
{
"tag": "v0.26.2",
"kind": "patch",
"published_at": "2026-04-09T14:32:46Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2026-04-09T10:41:07Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-04-09T09:46:27Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2026-04-06T07:32:46Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2026-04-01T14:16:35Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-03-31T08:16:28Z"
},
{
"tag": "v0.24.2",
"kind": "patch",
"published_at": "2026-03-30T14:40:16Z"
},
{
"tag": "v0.24.1",
"kind": "patch",
"published_at": "2026-03-26T09:56:38Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-03-25T08:49:11Z"
},
{
"tag": "v0.23.2",
"kind": "patch",
"published_at": "2026-03-25T08:07:05Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-03-25T07:08:13Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-03-24T11:28:08Z"
},
{
"tag": "v0.22.2",
"kind": "patch",
"published_at": "2026-03-18T20:24:36Z"
},
{
"tag": "v0.22.1",
"kind": "patch",
"published_at": "2026-03-18T13:31:24Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-03-18T11:48:13Z"
},
{
"tag": "v0.21.2",
"kind": "patch",
"published_at": "2026-03-18T06:50:27Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2026-03-17T20:27:22Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-03-17T19:17:40Z"
},
{
"tag": "v0.20.1",
"kind": "patch",
"published_at": "2026-03-16T10:39:06Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-03-16T09:11:28Z"
},
{
"tag": "v0.19.1",
"kind": "patch",
"published_at": "2026-03-15T18:10:52Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-03-15T10:25:59Z"
},
{
"tag": "v0.18.1",
"kind": "patch",
"published_at": "2026-03-14T21:41:51Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-03-14T10:27:26Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-03-13T15:54:14Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2026-03-13T11:29:06Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2026-03-13T08:21:42Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-03-12T21:05:41Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2026-03-12T10:23:48Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-03-12T08:49:28Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2026-03-11T14:50:36Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-03-11T14:28:56Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-03-11T14:09:22Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-03-10T19:14:02Z"
},
{
"tag": "v0.11.2",
"kind": "patch",
"published_at": "2026-03-10T14:55:50Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-03-10T08:18:11Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-03-10T07:52:27Z"
},
{
"tag": "v0.10.30",
"kind": "patch",
"published_at": "2026-03-10T07:18:44Z"
},
{
"tag": "v0.10.29",
"kind": "patch",
"published_at": "2026-03-09T19:52:11Z"
},
{
"tag": "v0.10.28",
"kind": "patch",
"published_at": "2026-03-09T19:48:50Z"
},
{
"tag": "v0.10.27",
"kind": "patch",
"published_at": "2026-03-09T15:42:38Z"
},
{
"tag": "v0.10.26",
"kind": "patch",
"published_at": "2026-03-09T11:06:40Z"
},
{
"tag": "v0.10.25",
"kind": "patch",
"published_at": "2026-03-07T21:15:25Z"
},
{
"tag": "v0.10.24",
"kind": "patch",
"published_at": "2026-03-06T23:16:06Z"
},
{
"tag": "v0.10.23",
"kind": "patch",
"published_at": "2026-03-06T18:32:06Z"
},
{
"tag": "v0.10.22",
"kind": "patch",
"published_at": "2026-03-05T15:56:33Z"
},
{
"tag": "v0.10.21",
"kind": "patch",
"published_at": "2026-03-05T12:27:59Z"
},
{
"tag": "v0.10.20",
"kind": "patch",
"published_at": "2026-03-04T18:15:00Z"
},
{
"tag": "v0.10.19",
"kind": "patch",
"published_at": "2026-03-04T08:56:52Z"
},
{
"tag": "v0.10.17",
"kind": "patch",
"published_at": "2026-03-02T16:48:35Z"
},
{
"tag": "v0.10.16",
"kind": "patch",
"published_at": "2026-03-01T11:13:26Z"
},
{
"tag": "v0.10.15",
"kind": "patch",
"published_at": "2026-02-27T20:10:26Z"
},
{
"tag": "v0.10.14",
"kind": "patch",
"published_at": "2026-02-27T19:51:00Z"
},
{
"tag": "v0.10.13",
"kind": "patch",
"published_at": "2026-02-27T16:21:08Z"
},
{
"tag": "v0.10.12",
"kind": "patch",
"published_at": "2026-02-26T22:18:31Z"
},
{
"tag": "v0.10.11",
"kind": "patch",
"published_at": "2026-02-26T20:53:23Z"
},
{
"tag": "v0.10.10",
"kind": "patch",
"published_at": "2026-02-26T17:47:07Z"
},
{
"tag": "v0.10.9",
"kind": "patch",
"published_at": "2026-02-26T11:20:47Z"
},
{
"tag": "v0.10.8",
"kind": "patch",
"published_at": "2026-02-26T11:08:51Z"
},
{
"tag": "v0.10.7",
"kind": "patch",
"published_at": "2026-02-25T00:11:30Z"
},
{
"tag": "v0.10.6",
"kind": "patch",
"published_at": "2026-02-25T00:10:14Z"
},
{
"tag": "v0.10.5",
"kind": "patch",
"published_at": "2026-02-24T17:45:02Z"
},
{
"tag": "v0.10.4",
"kind": "patch",
"published_at": "2026-02-24T09:46:33Z"
},
{
"tag": "v0.10.3",
"kind": "patch",
"published_at": "2026-02-24T05:13:15Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2026-02-23T12:54:37Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2026-02-22T22:16:10Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-02-22T17:19:44Z"
},
{
"tag": "v0.9.23",
"kind": "patch",
"published_at": "2026-02-22T14:53:28Z"
},
{
"tag": "v0.9.22",
"kind": "patch",
"published_at": "2026-02-22T09:19:51Z"
},
{
"tag": "v0.9.21",
"kind": "patch",
"published_at": "2026-02-21T19:20:08Z"
}
],
"recent_commits": [
{
"oid": "2bfeca50c5ffcbb2b8f455dbaabe5d1f460fb6cb",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump pillow from 12.2.0 to 12.3.0 in /docs-site (#574)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-22T18:20:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "443a8652ffe8b6a1d93ef7cff505bb1a0122b9a8",
"body": null,
"is_bot": true,
"headline": "chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#575)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-22T18:06:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40ebdc730f30bb7a44a74e53150009c38916d6c8",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.38.1](https://github.com/paperclipinc/openclaw-operator/compare/v0.38.0...v0.38.1)\n(2026-07-20)\n\n\n### Bug Fixes\n\n* gate PhaseRunning on StatefulSetReady so consumers don't route to a\nnot-ready instance\n([#572](https://github.com/paperclipinc\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.38.1 (#573)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-20T06:51:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a1820c6daed065132819b4120ad76c679e373ad",
"body": "…o a not-ready instance (#572)\n\n## Problem\n\nThe controller set `Status.Phase = Running` as soon as resources\nreconciled successfully, without checking whether the StatefulSet pod\nwas actually Ready. Downstream consumers (the hosted-OpenClaw proxy)\ntreat `Phase == Running` as \"safe to route to the in\n[…]\n Phase and the Ready condition. Full suite green (53\npassed), `make lint` clean.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: gate PhaseRunning on StatefulSetReady so consumers don't route t…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-20T06:13:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "32c04ea3e39ffd13a83a4fe36fa88318d4aafcd1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.38.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.37.0...v0.38.0)\n(2026-07-19)\n\n\n### Features\n\n* **skills:** support declarative skills for additional workspaces\n([#570](https://github.com/paperclipinc/openclaw-operator/issu\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.38.0 (#571)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-19T21:44:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efb202ca6d1b30a9daebdf0463a7615973387ca9",
"body": "…570)\n\nCloses #568\n\nImplements workspace-scoped skills per the design points in the issue\ndiscussion:\n\n## What\n\n`spec.workspace.additionalWorkspaces[].skills` accepts the same\nreference formats as top-level `spec.skills`:\n\n- **`pack:` entries** resolve through the existing GitHub resolver\n(private r\n[…]\nn operator upgrade — same\nbehavior as #566 introduced for the default workspace.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills): support declarative skills for additional workspaces (#…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-19T21:07:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b0abe63a12db1c462a3ad42eff7c85462e952db1",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.37.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.5...v0.37.0)\n(2026-07-18)\n\n\n### Features\n\n* **probes:** opt-in disk-aware readiness guard for PVC-backed\nworkspaces\n([#557](https://github.com/paperclipinc/openclaw-operat\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.37.0 (#565)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-07-18T16:40:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f5dd83d9a3d6415cc5db5626ddbfd389d7dd719",
"body": "## Problem\n\nThe disk-aware readiness guard (#557) computes available bytes inside\nawk:\n\n```sh\navail=$(df -Pk \"$p\" 2>/dev/null | awk 'NR==2 {print $4 * 1024}')\n[ \"$avail\" -ge 536870912 ]\n```\n\nawk renders large arithmetic results via `OFMT` (`%.6g`), so with ~10GB+\nfree the output is scientific notati\n[…]\n...`, `make lint`, `go test\n./internal/resources/` all pass locally.\n\nFixes #567\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(probes): compare disk readiness free space as integer KiB (#569)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-18T16:25:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "35d2987727ead34400ecf0d0417d170f1ee5aff7",
"body": "…ision (#566)\n\nCloses #564.\n\n## Problem\n\n`BuildInitScript` seeded `pack:` skill files create-only (`[ -f dest ]\n|| cp`). Updating an immutable `spec.skills` pack reference to a newer\nrevision updated the workspace ConfigMap and restarted the pod (the\nrevision is part of the config-hash annotation), \n[…]\nence.md` regenerated (not hand-edited); CRD\nYAML synced to chart and OLM bundle.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): converge PVC-seeded skill pack files to the declared rev…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T20:46:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb98a92df51dbbdd9da45a0a699dab800d0baa20",
"body": "…aces (#557)\n\nCloses #556.\n\n## Problem\n\nFor PVC-backed `OpenClawInstance` deployments, the operator delegates\nworkspace-volume health entirely to the gateway's HTTP `/readyz`. If\n`/readyz` stays green while the PVC-backed workspace is full or\nread-only, Kubernetes keeps the pod `Ready=true` and rout\n[…]\nly but not executed there (CI E2E is green on this\nPR).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(probes): opt-in disk-aware readiness guard for PVC-backed worksp…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T19:40:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bb2f3aaeb8078d602bf38feb47d375aa045f13d1",
"body": "… (#559)\n\n## Root cause\n\n`parseSkillEntry()` in `internal/resources/statefulset.go` ran every\nClawHub skill entry through `normalizeClawHubSlug()`, which stripped the\n`@owner/` prefix and passed only the bare slug to `clawhub install`. For\n**ambiguous** ClawHub slugs (the same slug published under m\n[…]\nve was added and\nthe e2e package vets/builds cleanly.\n\nCloses #558\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): preserve owner-qualified ClawHub refs for disambiguation…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-07-12T19:26:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c312a98f526b47b36acfd3b30c8ae7e344c5c8f0",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.48.0 to\n0.55.0.\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a\nhref=\"https://github.com/golang/net/commit/7770ec48d03fec35e378665337b4faca93c38423\"><code>7770ec4</code></a>\ngo.mod: update golang.org/x dependencies</li>\n<li><a\nhref=\"htt\n[…]\ncom/paperclipinc/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net from 0.48.0 to 0.55.0 (#561)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T19:12:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76bc93dcd8aa1fedf6da620c409bf10bb86d1aba",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.36.5 (#555)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-20T18:26:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07a040b42fd43e20ac088b7e5c44adedf9f654c3",
"body": "…iled (#553) (#554)",
"is_bot": false,
"headline": "fix(controller): treat optimistic-lock conflicts as retryable, not fa…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-20T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5e73500c9b4d442e647bed496199f5d558e22db",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.4](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.3...v0.36.4)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **operatorhub:** ship ci.yaml with updateGraph semver-mode\n([#551](https://github.com/paperclipinc/openclaw-operator/issues/55\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.4 (#552)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-16T15:41:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab5f444b646bb3a74f7b6cb66c5a85221e7e191e",
"body": "## Summary\n\n- Creates `bundle/ci.yaml` with `updateGraph: semver-mode` and\n`reviewers: [stubbi]`.\n- In **both** the `submit` (k8s community-operators) and `submit-redhat`\n(community-operators-prod) jobs, seeds\n`operators/openclaw-operator/ci.yaml` from `bundle/ci.yaml` if absent,\nand includes it in \n[…]\nm workflow YAML parses: `yq '.jobs|keys'\n.github/workflows/operatorhub.yaml`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(operatorhub): ship ci.yaml with updateGraph semver-mode (#551)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T15:21:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6fa1cffce3e9939c4e3e0d373b2c138fc46c51bc",
"body": "The chart installs the OpenClawClusterDefaults CRD and the CSV owns it,\nbut the Helm chart's `artifacthub.io/crds` annotation only declared 2 of\n3 CRDs. Adds the missing entry so Artifact Hub shows all three (matching\nhermes/paperclip).",
"is_bot": false,
"headline": "docs(chart): list OpenClawClusterDefaults in artifacthub.io/crds (#550)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T14:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f0b3aa1a25aa85536e77bce07c361dc1803c08f",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.3](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.2...v0.36.3)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **bundle:** declare com.redhat.openshift.versions for OpenShift cert\n([#549](https://github.com/paperclipinc/openclaw-operator\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.3 (#548)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-16T13:53:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a66a7f09ab3cc30a27afb5fcd66be9b11dca801",
"body": "… (#549)\n\nOpenShift community-operators-prod validation fails: minKubeVersion\n1.28.0 but com.redhat.openshift.versions not set. Declares v4.15 (k8s\n1.28 -> OCP 4.15).",
"is_bot": false,
"headline": "fix(bundle): declare com.redhat.openshift.versions for OpenShift cert…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-16T13:35:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4adde0edd49dcb4950aca332907c0cd6e03e6d59",
"body": "… (#547)\n\nThe OperatorHub submission to `k8s-operatorhub/community-operators` has\nfailed since **v0.36.1** (and again v0.36.2):\n\n```\n! [remote rejected] (refusing to allow a Personal Access Token to create or update\nworkflow `.github/workflows/command_merge.yaml` without `workflow` scope)\n```\n\n**Cau\n[…]\nw_dispatch`) to\nsubmit the bundle that the failed run never filed.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): sync OperatorHub fork to avoid workflow-scope push rejection…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T17:04:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7b5d425eabe43ab895c7a32922cce7179750803a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.2](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.1...v0.36.2)\n(2026-06-15)\n\n\n### Bug Fixes\n\n* **chart:** refresh changelog for signed-chart release (0.36.2)\n([#545](https://github.com/paperclipinc/openclaw-operator/issue\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.2 (#546)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-15T16:33:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f99b35a42fcf57f4c91cb7c5f99f2ee636c53966",
"body": "Forces a release (`Release-As: 0.36.2`) to ship the two Phase-1 fixes\nalready merged in #544:\n- Helm chart OCI artifact is now cosign-signed (keyless).\n- `artifacthub.io/images` annotation now tracks the released operator\nimage tag (and auto-bumps).\n\nOn merge, release-please cuts `v0.36.2`; the rele\n[…]\nundle PR to `k8s-operatorhub/community-operators` (refreshing the\noperatorhub.io listing off the stale `openclaw-rocks` `0.2.4` bundle).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(chart): refresh changelog for signed-chart release (0.36.2) (#545)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T16:18:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4bba215f3f30a63cd8ae4f9a3e1c2b43be31ef35",
"body": "…otation) (#544)\n\nPhase 1 of the Artifact Hub / OperatorHub world-class effort (spec &\nplan in `paperclip-operator/docs/superpowers/`).\n\n## Changes\n- **fix(chart):** `artifacthub.io/images` was stale at `v0.9.0`; now\nmatches the rendered image tag (`v0.36.1`) and auto-bumps on release via\na `# x-rel\n[…]\nchart tags, stand up the verified `paperclipinc` Artifact\nHub org.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Phase 1: world-class Artifact Hub presence (chart signing + image ann…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-15T15:57:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecd7ef0ed68e96765653b2b2707b733c1d6cd8a0",
"body": "## Summary\n\nThis follows up on the install-source clarification requested in #539.\n\nChanges:\n\n- clarify the README feature table so `spec.plugins` says plugin\ninstalls resolve through the OpenClaw CLI ClawHub installer\n- explain that an optional `npm:` prefix on plugin entries is accepted\nfor compat\n[…]\n.md`\n- added-line dash scan\n- added-line public-hygiene scan\n\nThis is README-only, so I did not regenerate API docs or run Go tests.\n\nCo-authored-by: kriptoburak <kriptoburak@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: clarify plugin install source handling (#543)",
"author_name": "Burak Bayır",
"author_login": "kriptoburak",
"committed_at": "2026-06-13T17:28:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "facd64b2f2f0d33b8e65953bbed5e8d046613186",
"body": "## Summary\n\nAdds a CI guard (`Chart Image Repository` job) that fails the build if\nthe Helm chart default `image.repository` in\n`charts/openclaw-operator/values.yaml` drifts away from the canonical\n`ghcr.io/paperclipinc/openclaw-operator` namespace.\n\n## Why\n\nChart releases 0.32.0 to 0.34.4 shipped w\n[…]\n`: documents the new job in the CI pipeline table.\n\n## Validation\n\nVerified locally: passes on the current correct values, exits 1 with a\nclear `::error::` on a simulated stale namespace.\n\nCloses #540",
"is_bot": false,
"headline": "ci: guard chart image.repository against namespace drift (#542)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-08T11:22:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b99eba53dded7e2297d29e3be8271905264b45e4",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.1](https://github.com/paperclipinc/openclaw-operator/compare/v0.36.0...v0.36.1)\n(2026-06-08)\n\n\n### Bug Fixes\n\n* keep otel-collector metrics alive (metric_expiration 8760h +\ndirectory-mount)\n([#538](https://github.com/paperclipinc/openclaw\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.1 (#541)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-08T11:08:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e6cbe8d975abd0b904532e92a6ec9c65df2eb46",
"body": "…ectory-mount) (#538)\n\nSupersedes #537.\n\nThe prometheus exporter defaulted to metric_expiration: 5m, evicting\ncounters (`tokens_total`, `model_call_duration`, etc.) from `/metrics`\nafter the gateway goes idle that long. Since the gateway only pushes\nOTLP during model calls, idle gaps routinely excee\n[…]\nation\nraces, instead of a subPath bind-mount that could resolve to an empty\nfile when ConfigMap and pod are created in the same instant.\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes@aqora.io>",
"is_bot": false,
"headline": "fix: keep otel-collector metrics alive (metric_expiration 8760h + dir…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-08T10:54:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "81be17a4ff788f18e31e68974ab159fc06e2716a",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.36.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.35.0...v0.36.0)\n(2026-06-03)\n\n\n### Features\n\n* add optional Gateway API HTTPRoute support\n([#535](https://github.com/paperclipinc/openclaw-operator/issues/535))\n([e56d4bb](ht\n[…]\nease-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.36.0 (#530)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-03T21:13:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "39e783adb6239b72b290cc7c9931d626c6464aa6",
"body": "## Summary\n\nDesign-only proposal for graduating the `openclaw.rocks` API group from\n`v1alpha1` to a stable `v1`. No conversion or controller code is\nimplemented; this lands two documents under `docs/superpowers/`:\n\n- `docs/superpowers/specs/2026-06-03-v1-graduation-design.md`\n- `docs/superpowers/pla\n[…]\n v1-stability reference.\n\nASCII-only (no em/en dashes). Docs only.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: v1 API graduation design and migration plan (#534)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:58:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e56d4bb322f1d4184ae72d0653d962532dea8935",
"body": "## Summary\n\nAdds optional Gateway API (`gateway.networking.k8s.io`) HTTPRoute\nsupport to `OpenClawInstance`, mirroring `paperclip-operator`. This is\nan alternative to Ingress for clusters running the Gateway API.\n\nNew `spec.networking.httpRoute`:\n- `enabled` (bool, default false)\n- `parentRefs[]` `{\n[…]\n-run.\n\nBased on `feat/parity-tier12`, targeting `main`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add optional Gateway API HTTPRoute support (#535)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:44:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c176eb8b542d67560452919dcd8a4bf8d6f7ae6",
"body": "…tchNamespaces (#531)\n\n## Summary\n\nFixes #529. When the operator is installed with `watchNamespaces` set,\nit fails to start with:\n\n```\nopenclawclusterdefaults.openclaw.rocks is forbidden: User \"system:serviceaccount:openclaw:openclaw-operator\" cannot list resource \"openclawclusterdefaults\" in API gr\n[…]\nclawclusterdefaults=True, #resources=26\n```\n\nNo Go/CRD/marker changes, so `config/crd/` and `config/rbac/role.yaml`\nare untouched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(helm): grant cluster-scoped OpenClawClusterDefaults RBAC under wa…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T20:30:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3787dd0153ae62ead33e2871b3998dbdc69604cc",
"body": "…CEL, conformance) (#533)\n\nBrings openclaw-operator up to parity with its sibling operators by\nporting four features. No merge intended; review only.\n\n## Ported features\n\n### 1. Digest-pin the operator image in the OperatorHub submission\n- Template: paperclip-operator `.github/workflows/operatorhub.\n[…]\n-rnP '[\\x{2013}\\x{2014}]'`) on all changed files:\nclean\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: tier-1/2 parity (operatorhub digest pin, verify-signing, image …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T19:45:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15f60cc218269e1b08a86a57d980cf1d201c5ecf",
"body": "## Summary\n\nAdds a second OperatorHub submission job, `submit-redhat`, to\n`.github/workflows/operatorhub.yaml`. It submits the OLM bundle to\nRedHat's `redhat-openshift-ecosystem/community-operators-prod` catalog,\nmirroring the existing `submit` job that targets\n`k8s-operatorhub/community-operators`.\n[…]\nthon3 yaml.safe_load_all` parses clean.\n- No em/en dashes present.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: submit OLM bundle to RedHat community-operators-prod (#532)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-03T17:53:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "58280c8bea4d329b86d7a3cfc18a996700de74da",
"body": "init-plugins runs on every pod start. With persistence enabled, the\nplugin already exists on the PVC from the previous run. `openclaw\nplugins install` exits non-zero with \"plugin already exists\", crashing\nthe init container in a loop.\n\n`--force` overwrites the existing install target, making the init\ncontainer idempotent across pod restarts.",
"is_bot": false,
"headline": "fix: idempotent plugin install in init-plugins container (#528)",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-03T14:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95d0c9394a9a56bb322ed34e1d70e3231c1d5aa6",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.35.0](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.8...v0.35.0)\n(2026-06-02)\n\n\n### Features\n\n* **api:** spec.config.forcePaths for partial-overwrite under\nmergeMode=merge\n([#500](https://github.com/paperclipinc/openclaw-op\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.35.0 (#527)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-02T12:31:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e59951cbaf020d0e384854cfd537aad93b81aa32",
"body": "…de=merge (#500)\n\n## Problem\n\nManaged multi-tenant deployers of this operator need two things at once\nthat\n`mergeMode` can't provide together:\n\n- Tenants must persist user-owned config (`channels.*`, `settings.*`)\nacross\n pod restarts → requires `mergeMode: merge`.\n- The operator must guarantee tha\n[…]\ns generate sync-chart-crds api-docs` regenerated\n- [x] Backward compatible\n- [x] No CHANGELOG edits (release-please owns it)\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "feat(api): spec.config.forcePaths for partial-overwrite under mergeMo…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T12:18:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50e75a9498b033c06dd2f34a2ce9c338173921fc",
"body": "…awhub (#518)\n\n`parsePluginEntry` strips the `npm:` prefix and then unconditionally\nprepends `clawhub:`, making the prefix a no-op. Plugins published on npm\n(not ClawHub) fail with \"Package not found on ClawHub\" on every fresh\npod start.\n\nFix: pass `npm:`-prefixed entries as `npm:<spec>` to the CLI, which\nalready supports this resolver. Non-prefixed entries still use\n`clawhub:`.\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "fix: parsePluginEntry drops npm: prefix, all plugins route through cl…",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T12:05:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b24b40324d384e0d0809b5c31d49b940003e9c11",
"body": "The operator sets `phase=BackingUp` and persists it via status update\nbefore checking the `skip-backup` annotation or persistence. This causes\na visible BackingUp phase and unnecessary StatefulSet scale-down even\nwhen backup is skipped.\n\n---------\n\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": false,
"headline": "fix: check skip-backup annotation before setting BackingUp phase (#524)",
"author_name": "teith",
"author_login": "teith",
"committed_at": "2026-06-02T11:17:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52f1f4392ff748797d0fc69425abdbf5a6900ab7",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.8](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.7...v0.34.8)\n(2026-06-02)\n\n\n### Bug Fixes\n\n* replace operator logo sunglasses with open eyes\n([eb61231](https://github.com/paperclipinc/openclaw-operator/commit/eb61231c14\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.34.8 (#525)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-02T10:38:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb61231c14851b3f5c4bf66463742028c126b690",
"body": "The OperatorHub.io / ArtifactHub icon still showed the old OpenClaw\nmascot wearing sunglasses, a leftover from before the move to the\nPaperclip Inc org. Swap the two dark lens shapes, bridge stroke, and\nglint highlights for open eyes (white sclera, dark pupils, highlight),\nkeeping the same red-gradi\n[…]\ncon-only change to the CSV base64 icon; no other metadata touched\n(provider, links, maintainer, and images were already migrated).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: replace operator logo sunglasses with open eyes",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-02T10:25:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "af2d7614b51242ec63f7054bea627b016201a100",
"body": "…mp price to EUR 19/mo\n\nUpdate both 'Paperclip Inc.' managed-hosting CTA links to https://paperclip.inc/openclaw (link target only, visible text unchanged) and the listed price from EUR 15/mo to EUR 19/mo.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): point managed-hosting CTA at paperclip.inc/openclaw, bu…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T08:33:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "13048855d81d7bb0c629562df56b6711174431cf",
"body": null,
"is_bot": true,
"headline": "chore(main): release 0.34.7",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-06-01T06:32:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7690d74ce9db9cfbca2fc4ec7c5a88b5535e6e31",
"body": "Match the real OpenClaw logo -- replace the sunglasses on all five lobsters with small black dot eyes.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: give the README banner OpenClaws dot eyes instead of sunglasses",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "842f73674e7475c8168ce557c2ff138233a687e8",
"body": "The bundle shipped only the OpenClawInstance CRD, so OperatorHub installs were missing OpenClawSelfConfig and OpenClawClusterDefaults (kubectl apply of those kinds failed with 'no matches for kind'); the shipped OpenClawInstance CRD had also drifted behind config/crd/bases. Sync all three CRDs from \n[…]\n the two new CRDs in the CSV owned list + alm-examples, and copy all CRDs (not just openclawinstances) in the submission workflow.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(olm): ship all three CRDs in the OperatorHub bundle",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "60d9f9e14146c9f594fd5eef8008393a6a72ba1b",
"body": "Migrate the remaining references off the former openclaw-rocks identity: website / docs / email / branding / security contact -> paperclip.inc, docs + runbook links -> https://paperclip.inc/docs/operators/openclaw, copyright OpenClaw.rocks -> Paperclip Inc., and drop the dead docs-operator.openclaw.\n[…]\nl keys, CRD names, and the kubebuilder domain are intentionally unchanged -- renaming them would break already-deployed resources.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: complete openclaw-rocks -> paperclipinc migration",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-06-01T06:14:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a93b472172a501af8fa4ebed45855bb9b66a48ab",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.6](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.5...v0.34.6)\n(2026-05-26)\n\n\n### Bug Fixes\n\n* **ci:** operatorhub workflow gh repo fork CLI syntax\n([#515](https://github.com/paperclipinc/openclaw-operator/issues/515))\n([\n[…]\nease-please#release-please).\n\nCo-authored-by: paperclip-release-bot[bot] <288053502+paperclip-release-bot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(main): release 0.34.6 (#516)",
"author_name": "paperclip-release-bot[bot]",
"author_login": "paperclip-release-bot[bot]",
"committed_at": "2026-05-31T07:03:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e02788db171567f8c9c8df5e5bb47ef6b84987af",
"body": "Migrates the one remaining `secrets.RELEASE_PLEASE_TOKEN` reference (the\n`Publish release` step that flips the draft GoReleaser publishes) to use\na short-lived token minted from the `paperclip-release-bot` App. After\nmerge, the RELEASE_PLEASE_TOKEN secret can be safely deleted.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "ci: release.yaml uses App token for draft→publish step (#517)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T17:36:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6be0b909322cf9a8a715fdf5b586345301c2141c",
"body": "## Problem\n\n`gh repo fork` has been failing every release since v0.34.1 with:\n\n> the `--remote` flag is unsupported when a repository argument is\nprovided\n\nNewer gh CLI rejects `--remote=true` when a repository positional arg is\nalso passed. The OperatorHub submission step never ran, so v0.34.0 is\nt\n[…]\nfter this merges, re-run \"OperatorHub\" workflow against v0.34.5 to\nsubmit the first paperclipinc-flavored bundle to community-operators.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(ci): operatorhub workflow gh repo fork CLI syntax (#515)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T15:54:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4ed487c716ad484672d24a6b7123abffcfc1cd9d",
"body": "Replaces the long-lived PAT (`secrets.RELEASE_PLEASE_TOKEN`) with a\nshort-lived App installation token minted via\n`actions/create-github-app-token@v1` from the new\n`paperclip-release-bot` GitHub App. The org policy now blocks\nfine-grained PATs >366 days, which is what just broke hermes's\nrelease-ple\n[…]\n to ~1h and don't have a\nlifetime cap.\n\nAfter this merges, the `RELEASE_PLEASE_TOKEN` repo secret can be deleted\n(no longer referenced).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "ci: release-please uses paperclip-release-bot App token (#514)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T15:16:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0860204353ce1478eeec044a7da8f86744576335",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.5](https://github.com/paperclipinc/openclaw-operator/compare/v0.34.4...v0.34.5)\n(2026-05-26)\n\n\n### Bug Fixes\n\n* rename openclaw-rocks → paperclipinc across chart, CI, docs, Go module\n([2de5f6b](https://github.com/paperclipinc/openclaw-ope\n[…]\n00c004ca283d2f83db98))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.5 (#513)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T14:48:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2de5f6b68be3f6b05dcc00c004ca283d2f83db98",
"body": "…module\n\n## Why\n\nOrg rename from openclaw-rocks → paperclipinc happened earlier. The repo\n+ image + chart all migrated to the new org, but in-tree references\nstill point at the old URL. Artifact Hub is failing to scan the chart's\nimage because the old `ghcr.io/openclaw-rocks/openclaw-operator` URL n\n[…]\nre-scans against the new URL and the error emails stop.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: rename openclaw-rocks → paperclipinc across chart, CI, docs, Go …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-26T14:34:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "46c04743f1c29a55b0f65873e68f9a55c5e2027b",
"body": "## Summary\n- Rewrite `docs/index.md` as a self-authored landing page (no\n`include-markdown` macro, no `hide:` frontmatter), so the `docs/` tree\nrenders correctly in any docs site (MkDocs, Starlight, Hugo, etc.)\nwithout preprocessing.\n- Delete `docs/specs/` (already excluded from MkDocs builds via\n`e\n[…]\narchitecture, full-example, custom-providers, api-reference,\nbackup-restore, troubleshooting, runbooks/, monitoring/,\nopenclaw-cluster-defaults, openclaw-self-config, model-fallback,\nexternal-secrets)",
"is_bot": false,
"headline": "docs: make docs/ renderer-agnostic (#508)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-23T10:53:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "088c02a360956e7b38d84419975869578c3e1cd5",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.4](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.3...v0.34.4)\n(2026-05-21)\n\n\n### Bug Fixes\n\n* **plugins:** install via openclaw CLI to handle workspace:* deps\n([#506](https://github.com/openclaw-rocks/openclaw-operator\n[…]\ne0533ca139aedd930f9f))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.4 (#507)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T11:03:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00d08d98818e8d533a6de0533ca139aedd930f9f",
"body": "## Summary\n- Closes #505.\n- Switch the plugins init container from `npm pack` + `npm install\n--omit=dev` to `openclaw plugins install clawhub:<spec>` so first-party\nplugins published with `workspace:*` dependency markers (e.g.\n`@openclaw/matrix`) resolve correctly. Raw `npm install` rejects them\nwit\n[…]\nplugins` on a real\ncluster and confirm the plugin loads\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): install via openclaw CLI to handle workspace:* deps (#506)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T09:50:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "185b70dbadb15b2fe63b562a8d7b58f514c85fef",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.3](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.2...v0.34.3)\n(2026-05-20)\n\n\n### Bug Fixes\n\n* **environment-skill:** document openclaw CLI availability\n([#499](https://github.com/openclaw-rocks/openclaw-operator/issues\n[…]\nf2f3e7d38d04fedda582))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.3 (#504)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-21T06:57:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6cb6a7843aabd7a8f861758707f2ef0ea0943d4",
"body": "…-site (#501)\n\nBumps\n[pymdown-extensions](https://github.com/facelessuser/pymdown-extensions)\nfrom 10.16.1 to 10.21.3.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/facelessuser/pymdown-extensions/releases\">pymdown-extensions's\nreleases</a>.</em></p>\n<blo\n[…]\nm/openclaw-rocks/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump pymdown-extensions from 10.16.1 to 10.21.3 in /docs…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-20T17:46:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5067192e9d94f9d58dcef2f3e7d38d04fedda582",
"body": "## Summary\n\n- Adds a short \"OpenClaw CLI\" section to the `ENVIRONMENT.md` skill\ninjected into every workspace, telling the agent that the `openclaw`\ncommand is available on PATH (symlinked to `/app/openclaw.mjs` by the\nupstream image) and giving a couple of examples (`--help`, `doctor`,\n`--version`)\n[…]\nated `ENVIRONMENT.md` in\nits workspace ConfigMap on next reconcile\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(environment-skill): document openclaw CLI availability (#499)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T17:27:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28d5865f18d969af6d3bbabaa1804bcf75494ba8",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.2](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.1...v0.34.2)\n(2026-05-20)\n\n\n### Bug Fixes\n\n* **config:** inject gateway.mode=local for openclaw >= v2026.5.18\n([#502](https://github.com/openclaw-rocks/openclaw-opera\n[…]\n2a0ac18bbf30e50d5cae))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.2 (#503)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T06:38:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e114ce7291d4798e444e2a0ac18bbf30e50d5cae",
"body": "## Summary\n\n- Upstream `ghcr.io/openclaw/openclaw:latest` (v2026.5.18, built\n2026-05-18) added a boot-time safety check that refuses to start when\n`gateway.mode` is missing from the config: `Gateway start blocked:\nexisting config is missing gateway.mode`.\n- The operator never set this field, so ever\n[…]\nE2E in CI - the same failing suite should go green once this lands\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(config): inject gateway.mode=local for openclaw >= v2026.5.18 (#502)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-20T04:21:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6da9836834fc3bcc318febf901e6d484dc71626c",
"body": "…in /docs-site (#495)\n\nBumps\n[mkdocs-include-markdown-plugin](https://github.com/mondeja/mkdocs-include-markdown-plugin)\nfrom 6.2.2 to 7.1.8.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/mondeja/mkdocs-include-markdown-plugin/releases\">mkdocs-include-mar\n[…]\n/v6.2.2...v7.1.8\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump mkdocs-include-markdown-plugin from 6.2.2 to 7.1.8 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-17T10:30:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54c2c336f6d43c03198a397f202a301b00ea7ac6",
"body": "…ite (#494)\n\nBumps\n[pymdown-extensions](https://github.com/facelessuser/pymdown-extensions)\nfrom 10.12 to 10.16.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/facelessuser/pymdown-extensions/releases\">pymdown-extensions's\nreleases</a>.</em></p>\n<blockqu\n[…]\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>",
"is_bot": true,
"headline": "chore(deps): bump pymdown-extensions from 10.12 to 10.16.1 in /docs-s…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T09:51:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "442bedd0413e0694cb65d322d2e45072f75a4548",
"body": "Bumps [pillow](https://github.com/python-pillow/Pillow) from 11.0.0 to\n12.2.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/python-pillow/Pillow/releases\">pillow's\nreleases</a>.</em></p>\n<blockquote>\n<h2>12.2.0</h2>\n<p><a\nhref=\"https://pillow.readthedocs\n[…]\n/11.0.0...12.2.0\">compare\nview</a></li>\n</ul>\n</details>\n<br />\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump pillow from 11.0.0 to 12.2.0 in /docs-site (#493)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T09:38:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17d2ab3802e3b47513a747b202d5f8f76c7cffdb",
"body": "Bumps [cairosvg](https://github.com/Kozea/CairoSVG) from 2.7.1 to 2.9.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/Kozea/CairoSVG/releases\">cairosvg's\nreleases</a>.</em></p>\n<blockquote>\n<h2>2.9.0</h2>\n<p><strong>WARNING:</strong> this is a security u\n[…]\nm/openclaw-rocks/openclaw-operator/network/alerts).\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump cairosvg from 2.7.1 to 2.9.0 in /docs-site (#492)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-14T08:08:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a83546075d0485796e1cca06c8906b0bbe7bad63",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.34.0...v0.34.1)\n(2026-05-12)\n\n\n### Bug Fixes\n\n* **docs-site:** correctly detect new CNAME file in gh-pages step\n([#490](https://github.com/openclaw-rocks/openclaw-operator/\n[…]\n955fcbc135b9fa8c8a03))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.1 (#491)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-14T07:53:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deb6b8c2079329ba180d955fcbc135b9fa8c8a03",
"body": "## Summary\n\nThe CNAME-write step in \\`docs.yaml\\` succeeded on the first\nauto-publish (v0.34.0) but didn't actually push anything because of a\nsubtle git-diff bug. CNAME has been manually pushed to \\`gh-pages\\` to\nunblock the current state; this PR ensures future deploys preserve it\ncorrectly.\n\n## B\n[…]\n] Next \\`docs.yaml\\` run (release-published or workflow_dispatch)\nconfirms CNAME is preserved and the step is a no-op on subsequent runs\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(docs-site): correctly detect new CNAME file in gh-pages step (#490)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T18:26:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0772118f6818a42357dddce385ea04949cc54918",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.34.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.33.0...v0.34.0)\n(2026-05-12)\n\n\n### Features\n\n* docs site at openclaw.rocks/docs/operator/\n([#488](https://github.com/openclaw-rocks/openclaw-operator/issues/488))\n([0a6aa43\n[…]\nbc0de2e11905f69b272b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.34.0 (#489)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T17:32:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a6aa43f2c4c88367cadbc0de2e11905f69b272b",
"body": "## Summary\n\nFoundation PR for the versioned docs site, per the [design\nspec](docs/specs/2026-05-12-docs-site-design.md) and [implementation\nplan](docs/specs/2026-05-12-docs-site-plan.md). Establishes:\n\n- mkdocs-material site under `docs-site/` building from existing\n`docs/*.md` + `README.md` + `ROAD\n[…]\nmatch parent site.\n6. **Chart.yaml** -- separate one-line PR to bump `/docs/operator/0.10`\n-> `/docs/operator/latest/`.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: docs site at openclaw.rocks/docs/operator/ (#488)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T15:31:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "652ad6d3a81a1051afe76c5fba2ea15e9fd3b41e",
"body": "## Summary\n\nThe ROADMAP had drifted significantly from reality. It was authored when\nthe operator was at v0.10.x and still listed the Phase 1/2/3 items from\nthe original community-chart gap analysis as planned, even though all of\nthem shipped in v0.10.0. Between v0.10 and v0.33 the operator picked u\n[…]\nME.md` feature table and recent\n`CHANGELOG.md` entries.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: refresh ROADMAP for v0.33 and v1 path (#487)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T10:16:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "927ce224284f47555d5a91d8aaa7aa070d48a84b",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.33.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.32.1...v0.33.0)\n(2026-05-12)\n\n\n### Features\n\n* shareProcessNamespace (default true) to reap zombies\n([#485](https://github.com/openclaw-rocks/openclaw-operator/issues/485))\n[…]\n3f73db7d3401e7087aeb))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.33.0 (#486)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:56:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cbfd4da821b1b6610cf3f73db7d3401e7087aeb",
"body": "## Summary\n\nAdds `spec.shareProcessNamespace` (default `true`) to\n`OpenClawInstance`. When enabled, all containers in the pod share a PID\nnamespace and the Kubernetes `pause` container becomes PID 1,\nautomatically reaping zombie processes that accumulate under the Node.js\ngateway (which does not cal\n[…]\n476.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: alexander-morris <alex@weteachblockchain.org>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: shareProcessNamespace (default true) to reap zombies (#485)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:42:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f261a8fc7725b1de8d1244e4b55db6db6576fcd3",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.32.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.32.0...v0.32.1)\n(2026-05-11)\n\n\n### Bug Fixes\n\n* **workspace:** support nested paths in spec.workspace.initialFiles\n([#483](https://github.com/openclaw-rocks/openclaw-operat\n[…]\nc3a1b4c2db55d8af82bf))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.32.1 (#484)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-12T09:04:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efca189304f89a0005d2c3a1b4c2db55d8af82bf",
"body": "…#483)",
"is_bot": false,
"headline": "fix(workspace): support nested paths in spec.workspace.initialFiles (…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-11T16:29:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a98bf17523f7a7dd70f8619ab1a78d5688f2c1f",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.32.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.31.1...v0.32.0)\n(2026-05-10)\n\n\n### Features\n\n* **chart:** aggregate OpenClaw CRD permissions into admin/edit/view\nroles\n([#480](https://github.com/openclaw-rocks/openclaw-o\n[…]\ncd180f3d09c8b3265181))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.32.0 (#481)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-10T09:02:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d06f81f1e828efa3b53cd180f3d09c8b3265181",
"body": "…roles (#480)\n\n## Summary\n- Adds three aggregated `ClusterRole`s labeled with\n`rbac.authorization.k8s.io/aggregate-to-{admin,edit,view}` so users\nbound to Kubernetes' standard `admin`/`edit`/`view` `ClusterRole` in a\nnamespace can manage `OpenClawInstance` and `OpenClawSelfConfig`\nresources there.\n-\n[…]\n\n- [ ] CI: lint, test, reconcile-guard, helm-rbac-sync, build, e2e\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(chart): aggregate OpenClaw CRD permissions into admin/edit/view …",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-10T08:49:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37b90262b6ba75ced5204e6a8a8647d9e7f8dbef",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.31.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.31.0...v0.31.1)\n(2026-05-08)\n\n\n### Bug Fixes\n\n* **plugins:** install plugins under ~/.openclaw/extensions for\nauto-discovery\n([#477](https://github.com/openclaw-rocks/openc\n[…]\nfc8451b38d8a30e9a8f4))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.31.1 (#478)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-09T08:33:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de8c1c477d27d978432efc8451b38d8a30e9a8f4",
"body": "…iscovery (#477)\n\n## Summary\n\nFixes #474. The init-plugins container was installing OpenClaw plugins\ninto `~/.openclaw/node_modules/<pkg>/`, where the gateway's plugin\nloader cannot find them. This rewrites the install layout to match what\nthe loader actually scans: `~/.openclaw/extensions/<unscoped\n[…]\n(could be relied upon by `npm:`-prefixed skills) and are harmless.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): install plugins under ~/.openclaw/extensions for auto-d…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-08T17:41:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "67633f3dad9faa7c8c944a66cc774eefe6268406",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.31.0 (#475)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-06T02:58:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46abfa4756b6fcc82cd9b7b9e8a5a85fc4afb7a1",
"body": "…paces (#469)\n\nCloses #468.\n\n## Summary\n\n- Add `rbac.create` Helm value (default `true`); set to `false` to skip\nchart-managed RBAC so operators can supply their own\n- Add `watchNamespaces` Helm value (default empty/cluster-wide); when\nset, the chart renders per-namespace `Role`/`RoleBinding` pairs \n[…]\n e2e verification on a kind cluster (relies on existing CI matrix)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(chart): allow disabling chart RBAC and scoping operator to names…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-05-05T13:13:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7df1a972dca486fea3bd33e4eb238742d5c05917",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.30.0 (#466)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-26T06:23:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67bbf7125d6df23ab62ea6fcb59ce4472f25df66",
"body": "…465)\n\n## Summary\n\nFixes #463.\n\nThe operator seeds `BOOTSTRAP.md` into the default workspace via an init\ncontainer using `[ -f target ] || cp source target`. OpenClaw deletes\nthe file after applying it, so on every subsequent pod restart or config\nchange the init container sees the file is missing a\n[…]\ninstance with `bootstrap.enabled: false`, verify\n`BOOTSTRAP.md` is absent from the workspace ConfigMap and from the\n`init-config` script\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "feat(workspace): add spec.workspace.bootstrap.enabled disable flag (#…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-24T13:47:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c4c5f50f44a12dfc3676923a11a97fdcb3280d01",
"body": "…o /app (#464)\n\n## Summary\n\nFixes #462.\n\nBundled OpenClaw plugin extensions (e.g. `discord`) under\n`~/.openclaw/plugin-runtime-deps/openclaw-<version>-<hash>/dist/extensions/`\nimport `openclaw/...` as bare ESM specifiers. Node's resolver walks up\nlooking for `openclaw` in `node_modules`.\n\nAfter an i\n[…]\nit + e2e on kind\n- [ ] Manual: deploy, upgrade image version across a breaking npm cache,\nconfirm discord provider no longer crash loops\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "fix(statefulset): symlink plugin-runtime-deps/node_modules/openclaw t…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-24T13:19:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5b6761d0b91251b162ed4ae87014e6539af9cb82",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.29.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.28.1...v0.29.0)\n(2026-04-23)\n\n\n### Features\n\n* **cluster-defaults:** add OpenClawClusterDefaults singleton CRD\n([#460](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\n6c896342ec21e0ae181b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.29.0 (#461)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-23T08:34:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e3f6bc9b82a78855d1b6c896342ec21e0ae181b",
"body": null,
"is_bot": false,
"headline": "feat(cluster-defaults): add OpenClawClusterDefaults singleton CRD (#460)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-23T08:18:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2883afcba597dd5155f006a8a5d40ccba07266f6",
"body": null,
"is_bot": false,
"headline": "chore(main): release 0.28.1 (#459)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-21T19:02:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab8c081bb1ce98e7668bbf39b3a4772e13aec9f",
"body": "## Summary\n\n- Add `~/.config` as a PVC subPath mount in the main container,\nalongside the existing `~/.local` and `~/.cache` mounts.\n- Extend the init-uv script to pre-create `/data/.config` with pod UID\nownership, so the SubPath mount works on hostPath-backed PVCs\n(consistent with the `#448` fix fo\n[…]\n vet ./...` clean\n- [ ] CI: lint + e2e (kind cluster)\n\nCloses #456\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(statefulset): mount ~/.config as writable PVC subPath (#458)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-21T18:32:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a3fc06d8d170771fdcdc2e38e581d9de95dcda3",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.28.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.27.1...v0.28.0)\n(2026-04-17)\n\n\n### Features\n\n* **skillpacks:** install packs from plain git repos without\nskillpack.json\n([#454](https://github.com/openclaw-rocks/openclaw-\n[…]\n961bfc0591717009b008))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.28.0 (#455)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-18T07:21:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78b92d73d7495d481121961bfc0591717009b008",
"body": "…k.json (#454)\n\n## Summary\n\nCloses #452.\n\n- When a `pack:owner/repo/path[@ref]` entry has no `skillpack.json` at\nthe given path, the resolver now falls back to a **raw-repo install**:\nit lists the repository via the GitHub Git Trees API and seeds every\nfile beneath the path into the workspace at\n`sk\n[…]\nedictable\ndestination no matter where in the repo the skill lives.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skillpacks): install packs from plain git repos without skillpac…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:47:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "020712a2492c486dfd59216d1cb3793786e84eb2",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.27.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.27.0...v0.27.1)\n(2026-04-17)\n\n\n### Bug Fixes\n\n* **init:** mount full data volume in init-uv/init-pip for hostPath PVCs\n([#450](https://github.com/openclaw-rocks/openclaw-op\n[…]\n06a2fc4466e297bc4df2))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.27.1 (#453)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:28:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2eaaea9dc1f468f3cc1806a2fc4466e297bc4df2",
"body": "…Cs (#450)\n\n## Summary\n\nFixes #448 - `init-uv` failing with `mkdir: cannot create directory\n'/home/openclaw/.local/bin': Permission denied` on hostPath-backed PVCs\nsuch as Rancher local-path-provisioner on Talos.\n\nKubernetes does not apply `fsGroup` ownership to `hostPath` volumes\n([docs](https://ku\n[…]\ner (confirmed\nin #448 triage that the reporter hits this failure).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(init): mount full data volume in init-uv/init-pip for hostPath PV…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-17T14:16:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2a9df910bcef45ddcb22c44548b5d86cfdf28835",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.27.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.2...v0.27.0)\n(2026-04-14)\n\n\n### Features\n\n* **helm:** add logLevel value to control operator log verbosity\n([#445](https://github.com/openclaw-rocks/openclaw-operator/is\n[…]\n6c651bceacf0f044f5f9))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.27.0 (#449)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-15T11:10:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf4a88f10b919eed42e63ee4583feaf1f1f1766f",
"body": "Follow-up to #439 -- adds managed fields awareness, warning events, and\nthe \"remove all\" correctness fix to the SelfConfig SSA implementation.\n\n- Add managed fields parser to extract SelfConfig-owned items from\nKubernetes `managedFields` metadata\n- Emit `Warning`/`SelfConfigSkippedRemoval` events wh\n[…]\nms remain\n\n## Test plan\n\n- [x] `make test`\n- [x] `make`, `make vet` clean\n- [ ] Controller integration tests (envtest) -- CI\n- [ ] E2E tests: field manager verification + multi-apply coexistence --\nCI",
"is_bot": false,
"headline": "SelfConfig SSA improvements (#443)",
"author_name": "Stig Bakken",
"author_login": "stigsb",
"committed_at": "2026-04-14T14:38:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3711bce50b6de870d9f36c651bceacf0f044f5f9",
"body": "…aged resources (#447)\n\nCloses #446.\n\n## Problem\n\nIssue #446 identified four resources where `CreateOrUpdate` mutate funcs\nreplaced the annotation map wholesale:\n\n```go\nobj.Annotations = desired.Annotations\n```\n\nOn any cluster where an external controller annotates operator-managed\nresources, the op\n[…]\ntions` assignments\nreplaced with `mergeStringMap`\n- `internal/controller/annotations_test.go` -- unit tests covering nil\ncurrent, external key preservation, update, stale-key retention, and\nlabel case",
"is_bot": false,
"headline": "fix: preserve third-party annotations and labels when reconciling man…",
"author_name": "Nick Marden",
"author_login": "nickmarden",
"committed_at": "2026-04-12T11:37:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cab3f274a24e9c4c89e0d19156c56e1e63f0b77",
"body": "Closes #444.\n\nWires `--zap-log-level` into the deployment args via a new `logLevel`\nHelm value (default: `info`). The flag is already accepted by the binary\nvia `opts.BindFlags` — this just exposes it.\n\n```yaml\n# suppress debug output in production\nlogLevel: info\n\n# re-enable for troubleshooting\nlogLevel: debug\n```",
"is_bot": false,
"headline": "feat(helm): add logLevel value to control operator log verbosity (#445)",
"author_name": "Nick Marden",
"author_login": "nickmarden",
"committed_at": "2026-04-12T11:26:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f28268fad9da44597703038c5a76eb01c09e7c28",
"body": "…(#436)\n\nBumps\n[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go)\nfrom 1.40.0 to 1.43.0.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md\">go.opentelemetry.io/otel/sdk's\nchang\n[…]\ndependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Jannes Stubbemann <jannes.stubbemann@gmail.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": true,
"headline": "chore(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-10T12:07:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cc95eb6be90c81e689d2016f6fbe7db86c97b325",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.2](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.1...v0.26.2)\n(2026-04-09)\n\n\n### Bug Fixes\n\n* **backup:** use --skip-links instead of --copy-links in rclone\n([#430](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\nedda397be9acef844b1d))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.2 (#442)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T14:26:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd7b65ea8f28c2b0cadcedda397be9acef844b1d",
"body": "## Summary\n- Replaces `--copy-links` with `--skip-links` in all rclone\nbackup/restore commands\n- Broken/dangling symlinks (e.g. from pnpm, uv, python package managers)\ncaused rclone to fail with \"no such file or directory\" when\n`--copy-links` attempted to dereference them\n- `--skip-links` silently s\n[…]\nter with symlinks in `/data/` that backups\ncomplete without errors\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(backup): use --skip-links instead of --copy-links in rclone (#430)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T13:54:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "21a0a1629d2b087e1e8f4e98c4299ff8de2b2be9",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.1](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.26.0...v0.26.1)\n(2026-04-09)\n\n\n### Bug Fixes\n\n* **helm:** always pass --metrics-secure flag to operator binary\n([#440](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\n32cb61b00eb18fea6d3a))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.1 (#441)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T10:35:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b202def1245cd9b5a15732cb61b00eb18fea6d3a",
"body": "## Summary\n- When `metrics.secure=false`, the Helm chart omitted the\n`--metrics-secure` flag entirely\n- The operator binary defaults to `--metrics-secure=true`, so it kept\nserving HTTPS metrics while the ServiceMonitor switched to HTTP scraping\n- This caused `400 Client sent an HTTP request to an HT\n[…]\nsecure=false` and verify Prometheus scrapes\nsuccessfully over HTTP\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(helm): always pass --metrics-secure flag to operator binary (#440)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T10:21:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a92bed0726796938b0abb492dc13e24236605b2",
"body": "…ce (#439)\n\n## Summary\n\nMigrate the SelfConfig controller from `r.Update()` with optimistic\nconcurrency retry to **Server-Side Apply (SSA)** with a dedicated field\nmanager (`openclaw-selfconfig`). This enables coexistence with GitOps\ncontrollers like FluxCD by letting the Kubernetes API server track\n[…]\n- CI will verify\n- [ ] E2E tests on kind cluster -- CI will verify\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: use Server-Side Apply for SelfConfig to enable GitOps coexisten…",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T09:54:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "52947df172bcfd7821bf1f543ae9b34697d42f77",
"body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.26.0](https://github.com/openclaw-rocks/openclaw-operator/compare/v0.25.2...v0.26.0)\n(2026-04-09)\n\n\n### Features\n\n* exclude workspace from config-hash to skip unnecessary restarts\n([#432](https://github.com/openclaw-rocks/openclaw-operator/i\n[…]\na0c2e1660af5e53a281d))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
"is_bot": false,
"headline": "chore(main): release 0.26.0 (#438)",
"author_name": "Jannes Stubbemann",
"author_login": "stubbi",
"committed_at": "2026-04-09T09:41:13Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 528,
"latest_release_at": "2026-07-20T06:56:39Z",
"latest_release_tag": "v0.38.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 23,
"days_since_latest_release": 4,
"mean_days_between_releases": 5.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/paperclipinc/openclaw-operator",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/paperclipinc/openclaw-operator",
"is_deprecated": false,
"latest_version": "v0.38.1",
"repository_url": "https://github.com/paperclipinc/openclaw-operator",
"versions_count": 132,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T06:51:21Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 69,
"stars": 391,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-02-14",
"count": 3
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-02-17",
"count": 1
},
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-02-19",
"count": 2
},
{
"date": "2026-02-20",
"count": 1
},
{
"date": "2026-02-21",
"count": 2
},
{
"date": "2026-02-22",
"count": 2
},
{
"date": "2026-02-25",
"count": 3
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-04",
"count": 2
},
{
"date": "2026-03-05",
"count": 2
},
{
"date": "2026-03-08",
"count": 2
},
{
"date": "2026-03-09",
"count": 2
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 2
},
{
"date": "2026-03-12",
"count": 4
},
{
"date": "2026-03-13",
"count": 2
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-03-20",
"count": 1
},
{
"date": "2026-03-21",
"count": 2
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-23",
"count": 1
},
{
"date": "2026-03-27",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-02",
"count": 2
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-25",
"count": 2
},
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-05",
"count": 2
},
{
"date": "2026-05-13",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-14",
"count": 1
}
],
"complete": true,
"collected": 69,
"total_forks": 69
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 443192,
"source_files_sampled": 90,
"oversized_source_files": 6,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 10633
},
"dependencies": {
"manifests": [
"docs-site/requirements.txt",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-9xwg-3r6f-jcx2"
],
"fixed_version": "11.0.0",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.43.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5158"
],
"fixed_version": "1.44.0",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 10
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 10
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 3,
"moderate": 1
},
"advisory_count": 4,
"affected_count": 4,
"assessed_count": 106,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "github.com/Masterminds/semver/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.4.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/onsi/ginkgo/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.23.4"
},
{
"name": "github.com/onsi/gomega",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.37.0"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.22.0"
},
{
"name": "go.opentelemetry.io/contrib/bridges/prometheus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.60.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.35.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.43.0"
},
{
"name": "k8s.io/api",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "k8s.io/apimachinery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "k8s.io/client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "sigs.k8s.io/controller-runtime",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.19.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/gorilla/websocket",
"direct": true,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver/v3",
"direct": true,
"version": "v3.4.0",
"ecosystem": "go"
},
{
"name": "github.com/onsi/ginkgo/v2",
"direct": true,
"version": "v2.23.4",
"ecosystem": "go"
},
{
"name": "github.com/onsi/gomega",
"direct": true,
"version": "v1.37.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.22.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/bridges/prometheus",
"direct": true,
"version": "v0.60.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"direct": true,
"version": "v1.35.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"direct": true,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "k8s.io/api",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/apimachinery",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/client-go",
"direct": true,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/controller-runtime",
"direct": true,
"version": "v0.19.0",
"ecosystem": "go"
},
{
"name": "github.com/antlr4-go/antlr/v4",
"direct": false,
"version": "v4.13.0",
"ecosystem": "go"
},
{
"name": "github.com/asaskevich/govalidator",
"direct": false,
"version": "v0.0.0-20190424111038-f61b66f89f4a",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/blang/semver/v4",
"direct": false,
"version": "v4.0.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/go-restful/v3",
"direct": false,
"version": "v3.11.0",
"ecosystem": "go"
},
{
"name": "github.com/evanphx/json-patch/v5",
"direct": false,
"version": "v5.9.0",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.0.4",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/fxamacker/cbor/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/zapr",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.19.6",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v0.20.2",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.22.4",
"ecosystem": "go"
},
{
"name": "github.com/go-task/slim-sprig/v3",
"direct": false,
"version": "v3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20210331224755-41bb18bfe9da",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/google/cel-go",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/google/gnostic-models",
"direct": false,
"version": "v0.6.8",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/gofuzz",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/google/pprof",
"direct": false,
"version": "v0.0.0-20260115054156-294ebfa9ad83",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.26.3",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "v0.3.6",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/josharian/intern",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.63.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.15.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.8.1",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.5",
"ecosystem": "go"
},
{
"name": "github.com/stoewer/go-strcase",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/x448/float16",
"direct": false,
"version": "v0.8.4",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": false,
"version": "v0.53.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
"direct": false,
"version": "v1.27.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.43.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/automaxprocs",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.26.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20230515195305-f3d0a9c9a5cc",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.43.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.44.0",
"ecosystem": "go"
},
{
"name": "gomodules.xyz/jsonpatch/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260414002931-afd174a4e478",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260414002931-afd174a4e478",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.82.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/inf.v0",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "k8s.io/apiextensions-apiserver",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/apiserver",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/component-base",
"direct": false,
"version": "v0.31.0",
"ecosystem": "go"
},
{
"name": "k8s.io/klog/v2",
"direct": false,
"version": "v2.130.1",
"ecosystem": "go"
},
{
"name": "k8s.io/kube-openapi",
"direct": false,
"version": "v0.0.0-20240228011516-70dd3763d340",
"ecosystem": "go"
},
{
"name": "k8s.io/utils",
"direct": false,
"version": "v0.0.0-20240711033017-18e509b52bc8",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/apiserver-network-proxy/konnectivity-client",
"direct": false,
"version": "v0.30.3",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/json",
"direct": false,
"version": "v0.0.0-20221116044647-bc3834ca7abd",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/structured-merge-diff/v4",
"direct": false,
"version": "v4.4.1",
"ecosystem": "go"
},
{
"name": "sigs.k8s.io/yaml",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "cairosvg",
"direct": false,
"version": "2.9.0",
"ecosystem": "pypi"
},
{
"name": "mike",
"direct": false,
"version": "2.1.3",
"ecosystem": "pypi"
},
{
"name": "mkdocs",
"direct": false,
"version": "1.6.1",
"ecosystem": "pypi"
},
{
"name": "mkdocs-awesome-pages-plugin",
"direct": false,
"version": "2.9.3",
"ecosystem": "pypi"
},
{
"name": "mkdocs-git-revision-date-localized-plugin",
"direct": false,
"version": "1.2.9",
"ecosystem": "pypi"
},
{
"name": "mkdocs-include-markdown-plugin",
"direct": false,
"version": "7.1.8",
"ecosystem": "pypi"
},
{
"name": "mkdocs-material",
"direct": false,
"version": "9.5.49",
"ecosystem": "pypi"
},
{
"name": "mkdocs-minify-plugin",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "pillow",
"direct": false,
"version": "12.3.0",
"ecosystem": "pypi"
},
{
"name": "pymdown-extensions",
"direct": false,
"version": "10.21.3",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 106,
"direct_count": 14,
"indirect_count": 92
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 402,
"open_issues": 4,
"closed_ratio": 0.973,
"closed_issues": 142,
"closed_unmerged_prs": 27
},
"bus_factor": 1,
"bot_contributors": 4,
"top_contributors": [
{
"type": "User",
"login": "stubbi",
"commits": 447,
"avatar_url": "https://avatars.githubusercontent.com/u/24454679?v=4"
},
{
"type": "User",
"login": "tmccoy14",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/44643066?v=4"
},
{
"type": "User",
"login": "yuki-node",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/33125275?v=4"
},
{
"type": "User",
"login": "victorges",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/1613383?v=4"
},
{
"type": "User",
"login": "teith",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/123115827?v=4"
},
{
"type": "User",
"login": "mcgilly17",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/4136843?v=4"
},
{
"type": "User",
"login": "nickmarden",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/50927?v=4"
},
{
"type": "User",
"login": "RikuXan",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/3399940?v=4"
},
{
"type": "User",
"login": "kriptoburak",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8755484?v=4"
},
{
"type": "User",
"login": "sedlund",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8109138?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.896
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"conformance.yaml",
"docs.yaml",
"operatorhub.yaml",
"release-please.yaml",
"release.yaml",
"stale.yaml",
"verify-signing.yaml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/18 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 6,
"reason": "4 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2bfeca50c5ffcbb2b8f455dbaabe5d1f460fb6cb",
"ran_at": "2026-07-25T05:04:04Z",
"aggregate_score": 5.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T04:43:25Z",
"oldest_open_prs": [
{
"number": 562,
"created_at": "2026-07-07T02:44:28Z",
"last_comment_at": "2026-07-15T12:05:56Z",
"last_comment_author": "thiagobodevan"
},
{
"number": 579,
"created_at": "2026-07-24T18:39:51Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T18:20:57Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 560,
"created_at": "2026-07-03T13:40:14Z",
"last_comment_at": "2026-07-12T19:15:12Z",
"last_comment_author": "stubbi"
},
{
"number": 576,
"created_at": "2026-07-23T18:51:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 577,
"created_at": "2026-07-23T22:29:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 578,
"created_at": "2026-07-23T22:59:20Z",
"last_comment_at": "2026-07-24T23:40:30Z",
"last_comment_author": "katerinkaivanova"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/paperclipinc/openclaw-operator",
"host": "github.com",
"name": "openclaw-operator",
"owner": "paperclipinc"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"security": 62,
"vitality": 84,
"community": 63,
"governance": 65,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 84,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"commits_last_year": 528,
"human_commit_share": 0.78,
"days_since_last_push": 0,
"active_weeks_last_year": 23
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "23/52 weeks with commits",
"points": 15.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 23
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "528 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 528
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.38.1",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 5.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 63,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 69,
"stars": 391,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "391 stars",
"points": 42,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 391
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "69 forks",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 69
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.896
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 402,
"open_issues": 4,
"closed_issues": 142,
"issue_closed_ratio": 0.973,
"closed_unmerged_prs": 27
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "97% of issues closed",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 97
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "402/429 decided PRs merged",
"points": 35.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 402,
"decided": 429
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"followers": 110,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "paperclipinc",
"public_repos": 11,
"account_age_days": 168
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "110 followers of paperclipinc",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 110,
"login": "paperclipinc"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~0 yr old",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/paperclipinc/openclaw-operator"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "132 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 132
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"kubernetes",
"openclaw",
"golang",
"helm",
"agents",
"ai",
"operator"
],
"has_wiki": false,
"homepage": "https://paperclip.inc/openclaw",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://paperclip.inc/openclaw",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 62,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/18 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "4 existing vulnerabilities detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 106 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 106
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 4,
"assessed_packages": 106,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1, unknown 3",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: go.opentelemetry.io/otel v1.43.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "go.opentelemetry.io/otel v1.43.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 106,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 82,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 10633
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "78 of 78 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 78,
"sampled": 78
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.43,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "43 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 43,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 443192,
"source_files_sampled": 90,
"oversized_source_files": 6
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "6/90 source files over 60KB",
"points": 51.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 90,
"oversized": 6
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T05:04:28.373365Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/paperclipinc/openclaw-operator.svg",
"full_name": "paperclipinc/openclaw-operator",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}