Starstruk Logo MarkStarstruk

v0.3.9

Netw0rkNoob/VulnClawv0.3.9Sep 5, 2026by github-actions[bot]

AI Summary

This release focuses on security hardening and usability improvements for the VulnClaw framework. It introduces execution approval workflows, restores TUI navigation commands, and adds support for OpenRouter API providers.

Key Highlights

  • Added execution approval and TUI confirmation workflow for enhanced security.
  • Restored TUI commands (/run, /recon, /scan, /exploit, /persistent, /codescan).
  • Introduced OpenRouter provider preset and scoped API key management.
  • Improved CI/CD stability with coverage uploads and repository URL updates.

New Features

  • Execution approval and TUI confirmation workflow.
  • OpenRouter provider preset and scoped API key support.
  • Restoration of TUI commands (/run, /recon, /scan, /exploit, /persistent, /codescan).
  • Web UI usability improvements including action rail and first-run state.
  • Refactored TUI to share structured task protocol for better integration.

Full Release Notes

## What's Changed
* fix(ci): point release preflight at tests/meta/test_release.py by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/199
* Dev by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/201
* Unclecheng li patch 2 by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/202
* Unclecheng li patch 1 by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/204
* Dev by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/205
* chore: update repo URLs to Netw0rkNoob/VulnClaw after transfer by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/206
* CI: Several CI fixes by @LamentXU123 in https://github.com/Netw0rkNoob/VulnClaw/pull/208
* Update classifiers in pyproject.toml by @LamentXU123 in https://github.com/Netw0rkNoob/VulnClaw/pull/211
* CI: Upload coverage to Codecov by @LamentXU123 in https://github.com/Netw0rkNoob/VulnClaw/pull/213
* refactor(tui): share structured task protocol by @FarStar-CN in https://github.com/Netw0rkNoob/VulnClaw/pull/210
* test(tui): complete Rust integration coverage by @FarStar-CN in https://github.com/Netw0rkNoob/VulnClaw/pull/216
* Feature/unclec by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/220
* test: spawn the running interpreter instead of a bare `python` (fixes #218) by @SidiEyel in https://github.com/Netw0rkNoob/VulnClaw/pull/221
* fix(mcp): bound session reads locally instead of via SDK timeout type by @JMAN730 in https://github.com/Netw0rkNoob/VulnClaw/pull/225
* docs: add Discord community link to both READMEs by @JMAN730 in https://github.com/Netw0rkNoob/VulnClaw/pull/242
* feat(config): add OpenRouter provider preset and scope the saved API key to its provider by @JMAN730 in https://github.com/Netw0rkNoob/VulnClaw/pull/229
* fix(web): usability pass on the web UI action rail and first-run state by @JMAN730 in https://github.com/Netw0rkNoob/VulnClaw/pull/237
* Delete docs/research/hackerone-scope-structure.md by @JMAN730 in https://github.com/Netw0rkNoob/VulnClaw/pull/240
* feat(security): 增加执行审批和 TUI 确认流程 by @FarStar-CN in https://github.com/Netw0rkNoob/VulnClaw/pull/245
* feat(tui): restore /run /recon /scan /exploit /persistent /codescan s… by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/253
* chore(release): bump version to 0.3.9 by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/254
* Release 0.3.9: execution approval, TUI v1 protocol, config wizard, and cross-session learning by @Unclecheng-li in https://github.com/Netw0rkNoob/VulnClaw/pull/255

## New Contributors
* @SidiEyel made their first contribution in https://github.com/Netw0rkNoob/VulnClaw/pull/221

**Full Changelog**: https://github.com/Netw0rkNoob/VulnClaw/compare/v0.3.8...v0.3.9