Files
openclaw-mattermost-extension/CHANGELOG.md
T

2.8 KiB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

Added

Changed

Deprecated

Removed

Fixed

Security

1.0.0 - 2026-04-10

Added

  • PAT (Personal Access Token) Support: Dual token authentication with bot token for reads and PAT for writes
  • Message Editing: Edit bot messages with permission controls via editMessage() action
  • Message Deletion: Delete bot messages with safety checks via deleteMessage() action
  • File Download: Secure file download with MIME type validation, executable blocking, and size limits
  • Interactive Directives: Support for [[mattermost_buttons: ...]] and [[mattermost_select: ...]] syntax
  • Security Audit: Automated security configuration scanning with collectMattermostSecurityAuditFindings()
  • Structured Error Handling: Comprehensive error classes with context, retry logic, and user-friendly messages
  • Automatic Retry Logic: Exponential backoff with jitter for transient failures
  • Rate Limit Handling: Full support for Mattermost rate limiting with Retry-After header parsing
  • SSRF Protection: Guarded outbound requests with fetchWithSsrFGuard
  • Multi-Account Support: Configure multiple Mattermost accounts with accounts and defaultAccount
  • Advanced Slash Commands: Native and skill-based commands with callback configuration
  • DM Channel Retry: Configurable retry logic for DM channel creation
  • Error Boundary: Global error handling with globalErrorBoundary
  • Group-Specific Settings: Per-channel configuration via groups object

Security

  • HTTPS enforcement warnings for insecure configurations
  • IP allowlisting for interaction callbacks
  • Private network access controls
  • Hardcoded token detection in security audit
  • Mutable allowlist entry detection
  • Executable file blocking in downloads
  • Input validation for all user-provided parameters

Changed

  • Improved error messages with context and remediation hints
  • Enhanced configuration validation with Zod schemas
  • Better separation of concerns in client architecture
  • More comprehensive logging without exposing secrets

0.1.0 - 2026-04-10

Added

  • Initial release of open-source
  • TypeScript support
  • Basic filtering functionality for OpenCode
  • Mattermost integration support
  • Development tooling (Vitest, TypeScript)