feat: update openclaw version

Author: zhengkunwang223

.github/workflows/openclaw-release.yml

@@ -1,5 +1,5 @@
 name: Build OpenClaw Image
-run-name: Build OpenClaw Image ${{ github.event.inputs.openclawTag || github.ref_name }}
+run-name: Build OpenClaw Image ${{ github.event.inputs.dockerTag || github.event.inputs.openclawTag || github.ref_name }}
 
 on:
   push:
@@ -8,12 +8,16 @@ on:
   workflow_dispatch:
     inputs:
       openclawTag:
-        default: "2026.10.5"
-        description: "OpenClaw release and Docker Hub tag, for example 2026.10.5"
+        default: "2026.10.7"
+        description: "Upstream OpenClaw release without v, for example 2026.10.7"
         required: true
+      dockerTag:
+        description: "Docker Hub tag; leave empty to use the release (test example: 2026.10.7-feishu-test.1)"
+        required: false
       pushLatest:
-        description: "Push latest tag"
-        default: "true"
+        description: "Also push latest tag"
+        type: boolean
+        default: false
         required: true
 
 env:
@@ -36,21 +40,33 @@ jobs:
         env:
           EVENT_NAME: ${{ github.event_name }}
           INPUT_OPENCLAW_TAG: ${{ github.event.inputs.openclawTag }}
+          INPUT_DOCKER_TAG: ${{ github.event.inputs.dockerTag }}
           INPUT_PUSH_LATEST: ${{ github.event.inputs.pushLatest }}
           REF_NAME: ${{ github.ref_name }}
         run: |
           set -euo pipefail
 
           if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
             openclaw_tag="${INPUT_OPENCLAW_TAG}"
-            push_latest="${INPUT_PUSH_LATEST:-true}"
+            dockerhub_tag="${INPUT_DOCKER_TAG:-$openclaw_tag}"
+            push_latest="${INPUT_PUSH_LATEST:-false}"
           else
             openclaw_tag="${REF_NAME#v}"
+            dockerhub_tag="$openclaw_tag"
             push_latest="true"
           fi
 
-          if [ -z "$openclaw_tag" ]; then
-            echo "::error::Failed to resolve OpenClaw tag"
+          if [[ ! "$openclaw_tag" =~ ^[0-9]+\.[0-9]+\.[0-9]+([.-][A-Za-z0-9]+)*$ ]]; then
+            echo "::error::Invalid OpenClaw release; use a version without the v prefix"
+            exit 1
+          fi
+          # Leave room for the -amd64 and -arm64 suffixes within Docker's 128-character limit.
+          if [[ ! "$dockerhub_tag" =~ ^[A-Za-z0-9_][A-Za-z0-9_.-]{0,121}$ ]] || [ "$dockerhub_tag" = "latest" ]; then
+            echo "::error::Invalid Docker Hub tag; use a versioned tag and pushLatest for latest"
+            exit 1
+          fi
+          if [ "$push_latest" != "true" ] && [ "$push_latest" != "false" ]; then
+            echo "::error::pushLatest must be true or false"
             exit 1
           fi
 
@@ -66,7 +82,7 @@ jobs:
 
           {
             echo "openclaw_tag=$openclaw_tag"
-            echo "dockerhub_tag=$openclaw_tag"
+            echo "dockerhub_tag=$dockerhub_tag"
             echo "push_latest=$push_latest"
             echo "source_sha=$source_sha"
             echo "built_at=$built_at"
@@ -118,7 +134,7 @@ jobs:
             GIT_COMMIT=${{ needs.resolve.outputs.source_sha }}
             OPENCLAW_BUILD_TIMESTAMP=${{ needs.resolve.outputs.built_at }}
             OPENCLAW_DOCKER_BUILD_VERSION=${{ needs.resolve.outputs.openclaw_tag }}
-            OPENCLAW_EXTENSIONS=diagnostics-otel,codex
+            OPENCLAW_EXTENSIONS=diagnostics-otel,codex,feishu
             OPENCLAW_INSTALL_BROWSER=true
           tags: |
             ${{ env.IMAGE_NAME }}:${{ needs.resolve.outputs.dockerhub_tag }}-amd64
@@ -171,7 +187,7 @@ jobs:
             GIT_COMMIT=${{ needs.resolve.outputs.source_sha }}
             OPENCLAW_BUILD_TIMESTAMP=${{ needs.resolve.outputs.built_at }}
             OPENCLAW_DOCKER_BUILD_VERSION=${{ needs.resolve.outputs.openclaw_tag }}
-            OPENCLAW_EXTENSIONS=diagnostics-otel,codex
+            OPENCLAW_EXTENSIONS=diagnostics-otel,codex,feishu
             OPENCLAW_INSTALL_BROWSER=true
           tags: |
             ${{ env.IMAGE_NAME }}:${{ needs.resolve.outputs.dockerhub_tag }}-arm64

openclaw/Dockerfile

@@ -10,15 +10,15 @@
 # build layer is not invalidated by unrelated source changes.
 #
 # Build stages use full bookworm; the runtime image is always bookworm-slim.
-ARG OPENCLAW_EXTENSIONS=""
+ARG OPENCLAW_EXTENSIONS="feishu"
 ARG OPENCLAW_BUNDLED_PLUGIN_DIR=extensions
 ARG OPENCLAW_DOCKER_BUILD_NODE_OPTIONS="--max-old-space-size=8192"
 ARG OPENCLAW_DOCKER_BUILD_TSDOWN_MAX_OLD_SPACE_MB=""
 ARG OPENCLAW_DOCKER_BUILD_SKIP_DTS=1
-ARG OPENCLAW_EXCLUDE_BUNDLED_PLUGINS="qqbot feishu"
-ARG OPENCLAW_NODE_BOOKWORM_IMAGE="docker.io/library/node:24-bookworm@sha256:64af3819f9275802414d7cdc38c27e9d82bd564dec4d4da87d008255d36c63b4"
-ARG OPENCLAW_NODE_BOOKWORM_SLIM_IMAGE="docker.io/library/node:24-bookworm-slim@sha256:0e0ff40c39bc087845bfb27465a0df4ea419520094bc35842ff83dd8cbe6f9b6"
-ARG OPENCLAW_NODE_BOOKWORM_SLIM_DIGEST="sha256:0e0ff40c39bc087845bfb27465a0df4ea419520094bc35842ff83dd8cbe6f9b6"
+ARG OPENCLAW_EXCLUDE_BUNDLED_PLUGINS="qqbot"
+ARG OPENCLAW_NODE_BOOKWORM_IMAGE="docker.io/library/node:24.22.1-bookworm@sha256:6449e19d8184d84062525b6a7524def03146c2cb04a7f08b076680d0e8e4240a"
+ARG OPENCLAW_NODE_BOOKWORM_SLIM_IMAGE="docker.io/library/node:24.22.1-bookworm-slim@sha256:55fb5f5a527ea2c5c4a95f963e48ef90aa38c7b346054fdc8ee9957a2b55d205"
+ARG OPENCLAW_NODE_BOOKWORM_SLIM_DIGEST="sha256:55fb5f5a527ea2c5c4a95f963e48ef90aa38c7b346054fdc8ee9957a2b55d205"
 # Keep in sync with .github/actions/setup-node-env/action.yml bun-version.
 # To update: docker buildx imagetools inspect docker.io/oven/bun:<version> and use the manifest-list digest.
 ARG OPENCLAW_BUN_IMAGE="docker.io/oven/bun:1.4.2@sha256:9114c058aeae42162ee16dd5084b95fe9473970bb6bcb5b232ab1630f0546895"
@@ -211,6 +211,8 @@ RUN node scripts/postinstall-bundled-plugins.mjs && \
         rm -rf "dist/${OPENCLAW_BUNDLED_PLUGIN_DIR}/$plugin"; \
       fi; \
     done && \
+    test -f dist/extensions/feishu/openclaw.plugin.json && \
+    touch /app/.1panel-feishu-bundled-v1 && \
     find dist -type f \( -name '*.d.ts' -o -name '*.d.mts' -o -name '*.d.cts' -o -name '*.map' \) -delete && \
     if [ -L /app/node_modules/@openclaw/ai ]; then \
       ai_runtime_target="$(readlink -f /app/node_modules/@openclaw/ai)" && \
@@ -234,7 +236,7 @@ RUN node scripts/postinstall-bundled-plugins.mjs && \
 
 FROM ${OPENCLAW_NODE_BOOKWORM_SLIM_IMAGE} AS base-runtime
 ARG OPENCLAW_NODE_BOOKWORM_SLIM_DIGEST
-LABEL org.opencontainers.image.base.name="docker.io/library/node:24-bookworm-slim" \
+LABEL org.opencontainers.image.base.name="docker.io/library/node:24.22.1-bookworm-slim" \
   org.opencontainers.image.base.digest="${OPENCLAW_NODE_BOOKWORM_SLIM_DIGEST}"
 
 FROM base-runtime
@@ -276,6 +278,7 @@ RUN chown node:node /app
 
 COPY --from=runtime-assets --chown=node:node /app/dist ./dist
 COPY --from=runtime-assets --chown=node:node /app/node_modules ./node_modules
+COPY --from=runtime-assets --chown=node:node /app/.1panel-feishu-bundled-v1 .
 COPY --from=runtime-assets --chown=node:node /app/package.json .
 COPY --from=runtime-assets --chown=node:node /app/pnpm-lock.yaml .
 COPY --from=runtime-assets --chown=node:node /app/pnpm-workspace.yaml .