📡 Upstream Digest — 2026-05-01 06:31 UTC

[github-actions]

📡 2026-05-01 06:31 UTC

📝 Commits to main (12 new)

⚠️ Relevant to our work

• ⚠️ 1c300cec fix(auto-reply): keep group visible replies deliverable (#75382) (#75382)

• ⚠️ 76930da7 feat(bluebubbles): add reply-context API fallback for cache misses (#71820) (#71820)

• be918636 fix: tighten webhook exposure host checks (#75465) (#75465)

• be14820b fix: resolve voice-call SecretRef inputs (#73632) (#73632)

• 84920fad security(logging): redact payment credential fields (#75230) (#75230)

• e8f9c3e6 fix(voice-call): stabilize Twilio STT startup (#75257) (#75257)

• 214b3d33 fix(pairing): don't silently swallow unexpected stat errors (#63324) (#63324)

• eabab1f6 fix(active-memory): expose memory tools to recall runs (#74592) (#74592)

• 77890210 fix(agents): release embedded-run scope on hung provider abort + heap-leak harness (#75008) (#75008)

• e8258fd4 fix(docker): restore python3 in runtime image (#75417) (#75417)

• 0260903f fix(logging): add redaction patterns for Tencent Cloud, Alibaba Cloud, HuggingFace and Replicate API keys (#58162) (#58162)

• 8989ceee fix(auto-reply): move visible reply warnings to doctor (#75367) (#75367)

📁 Areas touched

• extensions/ (39 files)
• src/ (34 files)
• CHANGELOG.md/ (12 files)
• docs/ (10 files)
• qa/ (2 files)
• .agents/ (1 files)
• Dockerfile/ (1 files)
• package.json/ (1 files)
• scripts/ (1 files)

⚠️ Capped at 50 commits (total: 59)