Release v0.7.3 · openclaw/clawpatch

Highlights: Broader Rust module coverage and bounded timeouts for Go discovery and pull-request publishing.

Added bounded Rust source-group slices under each Cargo package's src/, keeping command, library, and binary entrypoints on their existing features, thanks @joshuaboys.
Fixed clawpatch open-pr so a stalled git push or gh pr create times out instead of hanging the command, thanks @SebTardif.
Fixed Windows command timeouts so a hung taskkill cannot keep the CLI or its direct child running after the cleanup deadline, thanks @SebTardif.
Fixed Windows shell validation commands with quoted executable paths.
Fixed clawpatch map so a wedged go list times out and falls back to repository files, thanks @SebTardif.
Reworked the README around a verified install and quickstart path, with deeper command, mapper, provider, and safety details linked to the existing docs.
Updated Zod to 4.5.4 for lower-memory runtime schema validation.
Updated pnpm, Node typings, formatter and linter tooling, Vitest 5/Vite, GitHub Actions dependencies, and the release workflow's npm CLI.
Bound npm trusted publishing to the npm-release GitHub environment and restored canonical package repository metadata.

Package

npm: https://www.npmjs.com/package/clawpatch/v/0.7.3
Registry tarball: https://registry.npmjs.org/clawpatch/-/clawpatch-0.7.3.tgz
Integrity: sha512-JkLEYex6C5WCDK5RO/jWh8wxxKANWcmZ8enOj++8oYNxSBe6Y4DAGs4VybrjUdlRSkRrRQDldLGIqAbGv0VpyQ==
Published: 2026-09-05T18:53:07.454Z

Release commit: 734f81bc1514b52a0627edb0c24ebe1a18b36105.
CI and CodeQL passed on the release commit, including the full Linux suite, Windows execution tests, build, and packaged CLI smoke.
Trusted publishing workflow passed release validation on Node 24, published npm with provenance through the npm-release environment, and created this release.
Local pnpm typecheck, pnpm lint, pnpm format:check, pnpm build, and pnpm pack:smoke passed with the declared pnpm 11.25.0 toolchain. The installed package smoke mapped 13 features, including three CUDA features.
Downloaded the published npm tarball (369837 bytes), verified its SHA-512 against registry integrity, installed it into a clean directory, and ran the installed CLI: --version returned 0.7.3; init and heuristic map produced 4 synthetic fixture features.