[dependabot]

Bumps the npm-minor-patch group with 3 updates: openclaw, rimraf and vitest.

Updates openclaw from 2026.10.9 to 2026.11.1

Release notes

Sourced from openclaw's releases.

openclaw 2026.11.1

2026.11.1

Highlights

• Safer Mac settings: failed config saves no longer overwrite secrets, and turning off Tailscale exposure keeps Gateway authentication intact. (#187734, #187664) Fixes #187600, #187597 Thanks @​anmol0b.
• More reliable channel replies: Telegram, Discord, and webhook conversations keep reaching the agent after request handlers or earlier turns finish. (#179200, #179385, #179704, #189457) Fixes #178554 Thanks @​steipete, @​LiuwqGit, @​jalehman, and @​vincentkoc.
• Conversations survive more interruptions: oversized turns retain useful history, and stopping the first Claude CLI turn no longer starts the next message from scratch. (#191146, #181966, #186380) Fixes #191133, #181945 Thanks @​Yun-0000, @​obviyus, @​mirasrael, and @​holgergruenhagen.
• Update recovery gets unstuck after crashed or canceled updaters, restores the Windows Gateway after failed verification, and avoids repeated full-database copying during large-state checks. (#177932, #186787, #189647, #182632, #187921) Fixes #177684, #184893, #189620 Thanks @​duyufansh2008, @​RomneyDa, @​fuller-stack-dev, @​TheAngryPit, @​sukhdeepjohar, @​steipete, @​syxscott, and @​stephen3303.
• Subagents keep their follow-ups through model and session changes, while parent sessions receive child approvals even with a custom session store. (#186238, #183501, #189827) Fixes #179289, #189823 Thanks @​steipete, @​Marvinthebored, @​RomneyDa, and @​ekinnee.
• Android End Talk with a compatible Gateway stops listening without canceling accepted agent work, so its answer can still arrive in chat; explicit cancellation remains available. (#172276, #188798) Thanks @​RomneyDa.
• Provider recovery respects provider-specified rate-limit timing, and Gemini Flash text models use Interactions by default on the official API-key endpoint while custom proxies retain their existing default. (#180280, #189395) Thanks Ayaan Zaidi, @​evomach, @​sukhdeepjohar, @​RomneyDa.

Changes

• Claude CLI: saved subscription accounts can make configured models available without a separate native login, and operators can opt into native Agent and Workflow orchestration through plugins.entries.anthropic.config.managedNativeTools; the default remains off and restricted runs keep their existing tool limits. (#179203, #183765) Thanks @​RomneyDa.
• Anthropic: API-key setup can record an optional Anthropic workspace ID; existing workspace headers are preserved, and workspace-scoped keys need no extra setting. (#186976) Thanks Ayaan Zaidi, @​evomach, @​sukhdeepjohar, @​RomneyDa.
• Google: Interactions requests honor managed proxy and TLS settings, rotate eligible API keys before streaming after a rate limit, preserve native video input, and forward nucleus sampling consistently; choose google-generative-ai when explicit Gemini cache handles are required. (#189395, #190695) Thanks @​RomneyDa.
• Bedrock Mantle: discovered numbered OpenAI GPT models select the Responses route automatically, while GPT-OSS keeps Chat Completions and Claude keeps Anthropic Messages. Thanks @​MertBasar0, @​anmol0b, @​shakkernerd, @​kybrcore, @​sukhdeepjohar, @​potoior, @​RomneyDa.
• Control UI: the model picker shows the configured active context budget rather than only the model maximum, and short session links retain their intended navigation target. (#180870, #183148) Thanks @​RomneyDa.
• Google Chat: remote HTTP(S) attachments are delivered as visible links alongside captions; local files and native uploads remain unsupported with service-account authentication. Thanks @​RomneyDa.
• Update diagnostics: detailed readiness separates a ready core from channel outages, allowing repaired updaters to finish with named channel warnings without hiding HTTP 503 or weakening normal service-start checks. Thanks @​duyufansh2008, @​RomneyDa.

Fixes

• Network and tool safety: ClickClack and ClawHub reject redirects into unrelated private services, Discord CDN downloads no longer inherit browser private-network access, and FIFO native-hook credentials are rejected without hanging the agent. (#190944, #190939, #191458, #191423) Thanks @​pgondhi987, @​SebTardif, and @​Leon-SK668.
• Doctor consent and access policy: noninteractive checks no longer download plugins without repair consent, and explicitly empty group allowlists remain empty instead of being repopulated. (#191523, #174787) Fixes #191420, #173826 Thanks @​brandonulrich, @​steipete, and @​lockhartheavyindustries.
• Recovery data: malformed UTF-8 legacy imports are rejected instead of replacing original content; failed skill restore rollbacks preserve the original copy, and cleanup refuses destructive work when workspace inspection fails. (#180861, #173954, #174195, #176362) Fixes #180782, #180795 Thanks @​RomneyDa, @​duyufansh2008, @​steipete, and @​wangmiao0668000666.
• Log redaction: malformed custom entries no longer disable valid rules or built-in secret protection; invalid policy is reported while safe redaction remains active. (#173471) Thanks @​skyzhao1223 and @​RomneyDa.
• Secret egress: reject chains relying on the distrusted emSign ECC G3 root in the managed proxy and exported subprocess CA bundle; restart the Gateway after updating, and update clients with independent trust stores separately. (#179249) Thanks @​RomneyDa.
• macOS connectivity: configured credentials take precedence over stale app environment, typed environment secret references resolve correctly, and remote Settings respects the Control UI base path. (#191468, #185141, #128175) Fixes #164596 Thanks @​RomneyDa, @​anmol0b, and @​goldmar.
• Mac tools and messaging: iMessage remains usable after app updates without re-granting Automation, Peekaboo window inspection accepts valid snapshot references, and node exec preserves results for commands configured without a timeout. (#186107, #172116, #190729) Fixes #178719 Thanks @​aniketkrs, @​RomneyDa, @​anmol0b, @​SharkeyDev, @​holgergruenhagen, @​LiuwqGit, and @​etzelm.
• Mac voice and embedded pages: avoid duplicate voice sends and false sent feedback, and show a recoverable load error instead of a blank or stale Mac tab. (#186271, #185432) Thanks @​anmol0b, @​etzelm, and @​RomneyDa.
• Native voice and capture: iOS and macOS Talk tolerate slow audio acknowledgments within bounded buffering, long meeting replies are not cut off merely because generation outruns playback, and oversized Mac recordings fail with size guidance instead of dropping the node connection. Thanks @​MertBasar0, @​anmol0b, @​shakkernerd, @​kybrcore, @​sukhdeepjohar, @​potoior, and @​RomneyDa.
• Android and desktop compatibility: Android Chat waits for the role-allowed agent list after switching Gateways, and independently updated Mac nodes can return optional cursor coordinates without a computer-use contract error. Thanks @​MertBasar0, @​anmol0b, @​shakkernerd, @​kybrcore, @​sukhdeepjohar, @​potoior, @​RomneyDa.
• Channel recovery: Slack detects dead relay connections without treating ordinary silence as failure, Tlon reconnects stalled streams so unacknowledged events can replay, and managed Tailscale exposure recovers after a daemon restart while local authenticated access stays available. Thanks @​RomneyDa.
• Channel delivery: Feishu keeps text from before and after tool calls in the same streaming card; Synology confirms delivery only from recipient-matched message IDs; Twitch targets and Zalo unsupported-event text follow their channel handling rather than silently losing usable content. Thanks @​RomneyDa.
• Channel credentials and notices: implicit Slack default accounts retain complete top-level credentials alongside named accounts, channel secret consumers respect account activation, and Nostr reports failed pairing notifications without undoing approval. Thanks @​RomneyDa.
• iMessage storage: recovery cursor keys no longer contain a PostgreSQL-incompatible NUL separator, allowing the channel to start with PostgreSQL-backed state. (#184919) Fixes #184862 Thanks @​duyufansh2008, @​RomneyDa, and @​etzelm.
• Session and agent authority: deleting one agent no longer breaks other agents' tool authority, and local session-capability changes stop inappropriate provider fallback instead of trying every model. (#174918, #179312) Fixes #179290 Thanks @​steipete, @​chelsealong, @​obviyus, and @​Marvinthebored.
• Prompt caching: session tool definitions stay stable across turns, including completions, heartbeats, and non-owner requests, avoiding unnecessary prompt-cache misses. (#175309, #176167) Thanks @​obviyus.
• Conversation recovery: compaction retains the active human request across repeated summaries; queue overflow summaries retain each visible sender and conversation context; exec completion guidance survives overflow. (#180214, #187833, #190698, #182188, #184216) Thanks @​RomneyDa and @​aniketkrs.
• Codex continuity: conversation-wide restrictions retain compatible native threads, temporary restrictions preserve the ordinary conversation binding, and a missing thread with recorded history reports an error instead of silently starting over. Thanks @​skyzhao1223 and @​RomneyDa.
• Codex replies: transient retries can summarize the original request and completed tools without rerunning them; terminal handoffs allow already-submitted steering a bounded chance to confirm consumption and do not automatically replay uncertain input. (#183077, #184062, #181839, #167390) Thanks @​RomneyDa.
• Shared credentials and model availability: concurrent MCP callers can reuse a fresh OAuth token without unnecessary exclusive locking, rate-limit cooldowns follow provider timing instead of accumulating hours of local backoff, and fresh model publications replace superseded refresh results. (#179997, #180280, #179144) Thanks @​RomneyDa.
• Claude CLI and scheduled work: canceled cron runs stop reply hooks, interrupted long-running jobs no longer prevent scheduler startup, oversized or invalid CLI streams cancel their subprocess promptly, and managed completions retain the policy-filtered tool catalog. (#181245, #191422, #159931, #172026) Thanks @​steipete and @​fuller-stack-dev.
• Session history and memory: long transcript decoding releases database read snapshots promptly, bounded history pages keep their requested anchors and adjacent messages, and memory indexing waits for archived transcript materialization. (#164442, #172970, #177937, #182091, #190182, #189284, #188450, #188483, #190690) Fixes #171467 Thanks @​RomneyDa, and @​etzelm.
• Subagent and restart recovery: live descendants keep their expired parents available for communication, accepted yields settle sibling tool results before handoff, and stale interrupted input no longer blocks a new human message indefinitely. (#179057, #184021, #180853, #181871, #178888, #184041, #184069, #172959) Thanks @​RomneyDa.
• Agent handoffs: waiting session sends recover the stored long reply instead of returning only a short lifecycle preview, and ACP-created sessions retain the requested working directory for later prompts. (#178271, #176852) Thanks @​RomneyDa.
• Control UI recovery: silently dead Gateway connections reconnect without replaying uncertain sends, consumed slash-steering messages leave the queue, and routine restart notices stay concise. (#179101, #178642, #180024, #172843) Thanks @​RomneyDa.

... (truncated)

Changelog

Sourced from openclaw's changelog.

Changelog

Release notes: https://docs.openclaw.ai/releases

Each release has its complete changelog below. Audited contribution records are retained separately when available.

• Unreleased · Raw
• 2026.11.1 · Raw
• 2026.10.10 · Raw
• 2026.10.9 · Raw
• 2026.10.8 · Raw
• 2026.10.7 · Raw
• 2026.10.6 · Raw
• 2026.10.5 · Raw
• 2026.10.4 · Raw
• 2026.10.3 · Raw
• 2026.10.2 · Raw
• 2026.10.1 · Raw
• 2026.9.9 · Raw
• 2026.9.8 · Raw
• 2026.9.7 · Raw
• 2026.9.6 · Raw
• 2026.9.5 · Raw
• 2026.9.4 · Raw
• 2026.9.3 · Raw
• 2026.9.2 · Raw
• 2026.9.1 · Raw
• 2026.8.2 · Raw
• 2026.8.1 · Raw
• 2026.7.1 · Raw
• 2026.6.11 · Raw
• 2026.6.10 · Raw
• 2026.6.9 · Raw
• 2026.6.8 · Raw
• 2026.6.7 · Raw
• 2026.6.6 · Raw
• 2026.6.5 · Raw
• 2026.6.2 · Raw
• 2026.6.1 · Raw
• 2026.5.31 · Raw
• 2026.5.28 · Raw
• 2026.5.27 · Raw
• 2026.5.26 · Raw
• 2026.5.22 · Raw
• 2026.5.20 · Raw
• 2026.5.19 · Raw
• 2026.5.17 · Raw
• 2026.5.14 · Raw

... (truncated)

Commits

• 4ffdd20 test(release): supply the state script to manifest writer proofs
• d285b6a ci(release): route FRV state operations to admitted tooling
• b8fbe16 test: widen hosted cold-start limits for durability and voice-call proofs
• ec5d8d2 test(workers): format the aged memo clock import
• 3a4983e fix(test): report HTTP status when cache probes fail
• c16f7a9 test(workers): age fixture ctimes for memo reuse proofs
• ef14ea4 chore(release): attest 2026.11.1 candidate
• 5a44cd1 fix(release): shorten branch push preflight (#188743)
• adbc189 refactor: split oversized backport modules
• ea0a7c8 fix(agents): honor user constraints during response recovery
• Additional commits viewable in compare view

Updates rimraf from 6.1.3 to 6.1.4

Commits

• cbbc000 6.1.4
• 3c35eb4 glob 14
• 5fd6d20 make taprc yaml
• 051e6c7 bump tap for better module.register/registerHooks behavior
• dec62fd update tap
• 9fd58c1 project updates
• a51c7b0 remove rimraf test start/end char stuff
• f433d9f ci: update test workflow
• 78d68ef update deps
• 7263194 test: make opt-arg output a less ridiculous amount of logging
• Additional commits viewable in compare view

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

• Add --last-failed to run only failed tests  -  by @​sheremet-va in vitest-dev/vitest#11558 (82f63)
• Support Temporal.Instant and Temporal.ZonedDateTime in vi.setSystemTime()  -  by @​Prajwal2246, Prajwal2246, Claude Opus 5.5 (1M context), @​hi-ogawa and Codex (GPT-6) in vitest-dev/vitest#11321 (f150f)
• Introduce --since-last-run flag  -  by @​sheremet-va in vitest-dev/vitest#11516 (08bd9)
• Expose per-retry/repeat attempt result  -  by @​hi-ogawa, Codex (GPT-6) and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11232 (21be4)
• Support fake timers for node:timers and node:timers/promise  -  by @​hi-ogawa, OpenCode and Codex (GPT-6) in vitest-dev/vitest#10899 (fbe97)
• Allow coverage providers to store data in fs module cache  -  by @​AriPerkkio in vitest-dev/vitest#11747 (54a2b)
• Interactively review failed snapshots  -  by @​macarie and @​hi-ogawa in vitest-dev/vitest#11325 (54e5b)
• browser:
  • Mock modules through an import map  -  by @​sheremet-va in vitest-dev/vitest#11534 (707f8)
  • Drop experimental label from trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11518 (44c3c)
  • Introduce experimental pointer API  -  by @​macarie in vitest-dev/vitest#10780 (5dc09)
  • Capture aria snapshot in trace view  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11492 (0cc39)
  • Show trace steps timeline on terminal on test failure  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11594 (973dc)
  • Add failure-only trace view mode  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11612 (d5d7d)
  • Enable failure-only trace view by default  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11766 (f37b6)
• coverage:
  • V8 to support ignoreNode option  -  by @​erickserra and @​AriPerkkio in vitest-dev/vitest#11688 (e02db)
• experimental:
  • Add trace timeline for node  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11753 (4e985)
  • Add message option to vi.waitFor and vi.waitUntil  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11754 (fd145)

   🐞 Bug Fixes

• Rerun setup files after --changed filtering  -  by @​sheremet-va in vitest-dev/vitest#11621 (3a39c)
• Return the mock to concurrent imports  -  by @​sheremet-va in vitest-dev/vitest#11623 (1453b)
• Don't fail on console log pending at teardown  -  by @​sheremet-va in vitest-dev/vitest#11619 (a60b8)
• Reference chai types in every d.ts chunk  -  by @​sheremet-va in vitest-dev/vitest#11618 (fb150)
• Detect mock factory cycles that form later  -  by @​sheremet-va in vitest-dev/vitest#11642 (e9554)
• Skip fs module cache for typed import.meta.glob  -  by @​sheremet-va in vitest-dev/vitest#11666 (79501)
• Run tests that import a deleted file  -  by @​sheremet-va in vitest-dev/vitest#11669 (80aa1)
• Keep syntax highlighting in code frames  -  by @​sheremet-va in vitest-dev/vitest#11705 (d39f5)
• Respect CLI filters when prewarming browsers  -  by @​sheremet-va and Benjamin Tang in vitest-dev/vitest#11706 (10947)
• Read cached source as utf-8  -  by @​juan-fernandez in vitest-dev/vitest#11682 and vitest-dev/vitest#11709 (867a5)
• Inherit watch from the root config in projects  -  by @​nstepien and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11724 (77c12)
• Prefix expect.poll message to all errors  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11756 (cab58)
• Support api.port 0  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11641 (3667c)
• Show attempts in test error logs of retried tests  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11696 (77a94)
• Preserve rootDir in project paths  -  by @​btea in vitest-dev/vitest#11816 (bf96d)
• browser:
  • Change default port to 23315  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11640 (a2ec4)
  • Advance fake timers in actions and expect.element  -  by @​julienw, @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11242 (68190)
  • Drop trace view warning without html reporter  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11665 (e6407)
  • Detect shared chunks via the optimizer  -  by @​sheremet-va in vitest-dev/vitest#11661 (e2e9c)
  • Clear screenshot stability timeout  -  by @​sheremet-va in vitest-dev/vitest#11659 (fbe37)
  • Measure prepare duration with one clock  -  by @​sheremet-va in vitest-dev/vitest#11667 (a3ed4)
  • Keep failure screenshot per attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11694 (a5022)
  • Print trace timeline of each attempt  -  by @​hi-ogawa and Claude Opus 5.5 (1M context) in vitest-dev/vitest#11695 (27229)

... (truncated)

Commits

• 7a38449 chore: release v5.1.0 (#11838)
• a5ec316 fix(vm): keep assignable accessor globals writable in node environment (#11834)
• e46c6c1 refactor: share trace types and utils (#11825)
• 9e23ce5 refactor(snapshot): unify review update with SnapshotState update (#11790)
• a0e33cc chore: eliminate lint error (#11822)
• fd145d8 feat(experimental): add message option to vi.waitFor and vi.waitUntil (#11754)
• 4e98551 feat(experimental): add trace timeline for node (#11753)
• bf96dad fix: preserve rootDir in project paths (#11816)
• 54e5b8a feat: interactively review failed snapshots (#11325)
• 4277075 fix(expect): keep soft .resolves/.rejects error location (#11792)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions