chore(deps): bump openclaw from 2026.2.17 to 2026.2.19 in the npm_and_yarn group across 1 directory#17
Conversation
Bumps the npm_and_yarn group with 1 update in the / directory: [openclaw](https://github.com/openclaw/openclaw). Updates `openclaw` from 2026.2.17 to 2026.2.19 - [Release notes](https://github.com/openclaw/openclaw/releases) - [Changelog](https://github.com/openclaw/openclaw/blob/main/CHANGELOG.md) - [Commits](openclaw/openclaw@v2026.2.17...v2026.2.19) --- updated-dependencies: - dependency-name: openclaw dependency-version: 2026.2.19 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![gitsniff[bot]](https://avatars.githubusercontent.com/in/2666815?s=60&v=4){kind=small}
There was a problem hiding this comment.
Score: Excellent ✅
This pull request updates the openclaw dependency from version 2026.2.17 to 2026.2.19. The change primarily affects the package-lock.json file, reflecting the version bump and an associated update in @aws-sdk/client-bedrock. A thorough review of the release notes for openclaw indicates numerous fixes and changes, including several security-related updates.
1 finding posted as inline comments below.
Review completed in 26s | Basic Plan | Gemini 2.5 Flash
| "dependencies": { | ||
| "@agentclientprotocol/sdk": "0.14.1", | ||
| "@aws-sdk/client-bedrock": "^3.992.0", | ||
| "@aws-sdk/client-bedrock": "^3.993.0", |
There was a problem hiding this comment.
ℹ️ Info
The package-lock.json file shows a minor version bump for @aws-sdk/client-bedrock from ^3.992.0 to ^3.993.0 within the openclaw dependency. While this is a minor update, it's not explicitly mentioned in the PR description or the openclaw release notes. It is good practice to explicitly mention all direct and indirect dependency updates in the PR description for full transparency and to aid in debugging potential issues.
Fix: Update the PR description to explicitly mention the update of @aws-sdk/client-bedrock to ^3.993.0 as part of this dependency bump.
🤖 Prompt for AI Agents
In package-lock.json around line 8968:
Issue: The `package-lock.json` file shows a minor version bump for `@aws-sdk/client-bedrock` from `^3.992.0` to `^3.993.0` within the `openclaw` dependency. While this is a minor update, it's not explicitly mentioned in the PR description or the `openclaw` release notes. It is good practice to explicitly mention all direct and indirect dependency updates in the PR description for full transparency and to aid in debugging potential issues.
Update the PR description to explicitly mention the update of `@aws-sdk/client-bedrock` to `^3.993.0` as part of this dependency bump.
evansantos
deleted the
dependabot/npm_and_yarn/npm_and_yarn-2051eb21d0
branch
1 participant
Bumps the npm_and_yarn group with 1 update in the / directory: openclaw.
Updates
openclawfrom 2026.2.17 to 2026.2.19Release notes
Sourced from openclaw's releases.
... (truncated)
Changelog
Sourced from openclaw's changelog.
... (truncated)
Commits
2c05cbbfix(ci): use versioned actionlint checksum asset2435499ci: move blacksmith runners to 8 vcpu9f5429edocs: trim refactor-only and duplicate changelog entries869ebbcfix(ci): verify actionlint release checksum before install3077c35fix(ui): unblock docker onboarding build30e36c3fix(ci): tighten test typing for browser and cron cli018370efix(ci): normalize path assertions across platforms035832brefactor(daemon): extract windows cmd argv helpersa1cb700test: dedupe and optimize test suitesb0e5528chore: bump release metadata to 2026.2.19Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
🐕 GitSniff Summary
What this PR does
This pull request updates the
openclawdependency to its latest version, 2026.2.19, incorporating various bug fixes and new features from the upstream project. This ensures the SlimClaw plugin benefits from the most recent improvements in the OpenClaw framework, including critical security hardening and stability enhancements. The update also includes a minor version bump for@aws-sdk/client-bedrock, ensuring compatibility and access to the latest AWS SDK features.Key Changes
openclawdependency from 2026.2.17 to 2026.2.19 inpackage-lock.json.@aws-sdk/client-bedrockfrom^3.992.0to^3.993.0as a sub-dependency ofopenclaw.openclawupstream.Review Score: Excellent 🟢
Tip
No major issues found. Safe to merge.
🐕 Reviewed by GitSniff