Merge pull request #841 from mnfst/changeset-release/main

brunobuddy · web-flow · commit 58310e052a5a · 2026-02-23T21:24:07.000-08:00
chore: version packages
diff --git a/.changeset/fix-scanner-warnings.md b/.changeset/fix-scanner-warnings.md
diff --git a/packages/openclaw-plugin/CHANGELOG.md b/packages/openclaw-plugin/CHANGELOG.md
@@ -1,5 +1,11 @@
 # manifest
 
+## 5.9.3
+
+### Patch Changes
+
+- 518e89c: Remove fs imports and direct process.env access from backend files that get copied into the plugin dist, eliminating false-positive security scanner warnings about credential harvesting.
+
 ## 5.9.2
 
 ### Patch Changes
diff --git a/packages/openclaw-plugin/package.json b/packages/openclaw-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "manifest",
-  "version": "5.9.2",
+  "version": "5.9.3",
   "description": "Observability plugin for OpenClaw — traces, metrics, and cost tracking for your AI agent",
   "main": "dist/index.js",
   "license": "MIT",

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "manifest",`
`3`		`- "version": "5.9.2",`
	`3`	`+ "version": "5.9.3",`
`4`	`4`	`"description": "Observability plugin for OpenClaw — traces, metrics, and cost tracking for your AI agent",`
`5`	`5`	`"main": "dist/index.js",`
`6`	`6`	`"license": "MIT",`