Skip to content

docs: prepare v0.0.73 release notes - #6217

Merged
cv merged 2 commits into
mainfrom
codex/docs-v0.0.73-release-notes
Jul 2, 2026
Merged

docs: prepare v0.0.73 release notes#6217
cv merged 2 commits into
mainfrom
codex/docs-v0.0.73-release-notes

Conversation

@cv

@cv cv commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR prepares the user-facing documentation for v0.0.73 before the release plan is frozen.
It adds release notes for the merged runtime changes and closes documentation gaps around DNS-backed HTTPS endpoint validation and LangChain Deep Agents Code proxy recovery.

Changes

  • Add the v0.0.73 release-note section with links to the detailed command, inference, recovery, lifecycle, platform, and setup documentation.
  • Correct the custom endpoint guidance so DNS-backed HTTPS rejection and the supported alternatives match the fail-closed runtime behavior.
  • Document the managed inference.local proxy boundary and rebuild requirement for existing LangChain Deep Agents Code sandboxes.
  • Add troubleshooting guidance for the DNS-backed HTTPS validation error.
  • Validate with npm run docs:sync-agent-variants and npm run docs; Fern completed with 0 errors and 2 existing warnings.
  • Source summary:
    • #6139 -> docs/about/release-notes.mdx, docs/inference/inference-options.mdx, docs/reference/commands.mdx, docs/reference/commands-nemohermes.mdx, and docs/reference/troubleshooting.mdx: Document fail-closed DNS-backed HTTPS endpoint handling and recovery options.
    • #6142 -> docs/about/release-notes.mdx: Summarize native OpenShell GPU injection and compatibility-path diagnostics.
    • #6197 -> docs/about/release-notes.mdx: Summarize agent-aware messaging preset rejection.
    • #6199 -> docs/about/release-notes.mdx: Summarize the unreachable-sandbox backup opt-in, restore behavior, and data-loss boundary.
    • #6204 and #6206 -> docs/about/release-notes.mdx and docs/get-started/quickstart-langchain-deepagents-code.mdx: Document the corrected managed proxy contract and required sandbox rebuild.
    • #6213 -> docs/about/release-notes.mdx: Summarize the merged setup, recovery, and host-state documentation.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification: documentation-only release preparation; the Fern docs build validates the changed pages and routes.
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification:
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

  • PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
  • Git hooks passed during commit and push, or npx prek run --from-ref main --to-ref HEAD passes
  • Targeted tests pass for changed behavior
  • Full npm test passes (broad runtime changes only)
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only)
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Carlos Villela cvillela@nvidia.com

Summary by CodeRabbit

  • Documentation
    • Added a new v0.0.73 release notes section with six highlights at the top of the changelog.
    • Expanded Custom Endpoint URL Validation guidance in inference option docs, including explicit acceptance/rejection rules for HTTP vs DNS-backed HTTPS and how validated IPs are stored.
    • Updated command references (nemohermes inference set, $$nemoclaw inference set) to match the new validation behavior.
    • Added troubleshooting documentation for unsupported DNS-backed HTTPS endpoints, plus clarified Deep Agents Code routing and post-upgrade sandbox rebuild guidance.

Signed-off-by: Carlos Villela <cvillela@nvidia.com>
@cv cv added area: docs Documentation, examples, guides, or docs build v0.0.73 labels Jul 2, 2026
@cv cv self-assigned this Jul 2, 2026
@coderabbitai

coderabbitai Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: bf62d873-3a8e-4967-980c-543431cc7498

📥 Commits

Reviewing files that changed from the base of the PR and between ae94192 and 485e854.

📒 Files selected for processing (1)
  • docs/inference/inference-options.mdx
✅ Files skipped from review due to trivial changes (1)
  • docs/inference/inference-options.mdx

📝 Walkthrough

Walkthrough

This PR updates documentation only, adding v0.0.73 release notes, Deep Agents Code proxy routing and upgrade guidance, and custom endpoint URL validation rules across inference options, command reference, and troubleshooting pages.

Changes

Documentation updates

Layer / File(s) Summary
Release notes update
docs/about/release-notes.mdx
Adds a new v0.0.73 section with a summary and six bullets above the existing v0.0.72 content.
Deep Agents Code proxy routing docs
docs/get-started/quickstart-langchain-deepagents-code.mdx
Documents that inference.local routes through the managed OpenShell L7 proxy, normalizes proxy environment handling, and adds sandbox rebuild guidance after upgrades.
Custom endpoint URL validation documentation
docs/inference/inference-options.mdx, docs/reference/commands-nemohermes.mdx, docs/reference/commands.mdx, docs/reference/troubleshooting.mdx
Documents host-side validation for custom endpoints, IP pinning for public HTTP URLs, rejection of DNS-backed HTTPS URLs, continued support for HTTPS IP-literal URLs, and troubleshooting guidance for the HTTPS endpoint restriction.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested labels: chore

Suggested reviewers: ericksoa, jyaunches

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: preparing the v0.0.73 release notes and related docs updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/docs-v0.0.73-release-notes

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

E2E Advisor Recommendation

Required E2E: None
Optional E2E: None

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E

  • None. Docs-only PR. The changed files do not affect installer/onboarding code, sandbox lifecycle, credentials, security boundaries, network policy assets, inference routing implementation, deployment, or real assistant runtime flows.

Optional E2E

  • None.

New E2E recommendations

  • None.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

E2E Target Recommendation

Required E2E targets: None
Optional E2E targets: None

Workflow run

Full E2E target advisor summary

E2E Target Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E targets

  • None. Docs-only changes; no E2E target behavior, registry, workflow, fixtures, runtime support, live tests, manifests, or target-relevant implementation paths were changed.

Optional E2E targets

  • None.

Relevant changed files

  • None.

@cv
cv requested a review from miyoungc July 2, 2026 23:40
@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: Add or justify PRA-T1 and any related test follow-ups.
Open items: 0 required · 0 warnings · 0 suggestions · 1 test follow-up
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Action checklist

  • PRA-T1 Add or justify test follow-up: Acceptance clause
Test follow-ups to resolve or justify

If these cover changed behavior, prefer adding them in this PR; otherwise state why existing coverage is enough or link the follow-up.

  • PRA-T1 Acceptance clause — Validate with `npm run docs:sync-agent-variants` and `npm run docs`; Fern completed with 0 errors and 2 existing warnings. — add test evidence or identify existing coverage. This is PR-body evidence only. I did not execute package-manager or docs-build commands during this read-only review.

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor (Nemotron Ultra) — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: Consider PRA-1: Documentation accurately describes DNS pinning and HTTPS fail-closed behavior.
Open items: 0 required · 0 warnings · 1 suggestion · 0 test follow-ups
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Action checklist

  • PRA-1 In-scope improvement: Documentation accurately describes DNS pinning and HTTPS fail-closed behavior in docs/inference/inference-options.mdx:170

Findings index

ID Severity Category Location Required action
PRA-1 Improvement docs docs/inference/inference-options.mdx:170 No action needed — documentation is accurate. Keep release notes and reference pages in sync if endpoint validation logic evolves.
Review findings by urgency: 0 required fixes, 0 items to resolve/justify, 1 in-scope improvement

⚠️ Resolve or justify before merge

Investigate these in the current review; either fix them, explain why they are not applicable, or document the accepted risk.

  • None.

💡 In-scope improvements

These are lower-risk, not throwaway. Prefer fixing them in this PR when they are local to changed code; defer only with rationale or a linked follow-up.

PRA-1 Improvement — Documentation accurately describes DNS pinning and HTTPS fail-closed behavior

  • Location: docs/inference/inference-options.mdx:170
  • Category: docs
  • Problem: The new 'Custom Endpoint URL Validation' section correctly documents the implemented security controls: HTTP endpoints get DNS-pinned to validated IPs, DNS-backed HTTPS URLs are rejected (cannot pin peer while preserving TLS SNI across OpenShell runtime boundary), HTTPS IP-literals are accepted, and the host.openshell.internal bridge exemption is narrowly scoped (HTTP only, explicit port 1024-65535). Implementation in src/lib/sandbox/config.ts (validateUrlValueWithDnsResult) and src/lib/actions/inference-set.ts (normalizeCustomEndpointUrl) matches the docs.
  • Impact: Operators and auditors can rely on documentation matching runtime behavior for custom endpoint validation.
  • Suggested action: No action needed — documentation is accurate. Keep release notes and reference pages in sync if endpoint validation logic evolves.
  • Expected follow-up: Prefer a current-PR fix when local to changed code; defer only with rationale or linked follow-up.
  • Verification: Read src/lib/sandbox/config.ts:659-720 (validateUrlValueWithDnsResult) and src/lib/actions/inference-set.ts:405-440 (normalizeCustomEndpointUrl) to confirm DNS pinning logic and HTTPS fail-closed behavior
  • Missing regression test: Test coverage exists in test/config-set.test.ts:519-528 and test/actions/inference-set-endpoint-security.test.ts:45-56
  • Done when: The local improvement is applied, or the PR notes why it should be deferred.
  • Evidence: src/lib/sandbox/config.ts:760-775 returns pinned IP for HTTP, preserves original for HTTPS IP literals; throws 'DNS-backed HTTPS URLs are not supported' when pinnedUrl !== originalUrl for HTTPS
Since last review details

Current findings, using the urgency labels above:

PRA-1 Improvement — Documentation accurately describes DNS pinning and HTTPS fail-closed behavior

  • Location: docs/inference/inference-options.mdx:170
  • Category: docs
  • Problem: The new 'Custom Endpoint URL Validation' section correctly documents the implemented security controls: HTTP endpoints get DNS-pinned to validated IPs, DNS-backed HTTPS URLs are rejected (cannot pin peer while preserving TLS SNI across OpenShell runtime boundary), HTTPS IP-literals are accepted, and the host.openshell.internal bridge exemption is narrowly scoped (HTTP only, explicit port 1024-65535). Implementation in src/lib/sandbox/config.ts (validateUrlValueWithDnsResult) and src/lib/actions/inference-set.ts (normalizeCustomEndpointUrl) matches the docs.
  • Impact: Operators and auditors can rely on documentation matching runtime behavior for custom endpoint validation.
  • Suggested action: No action needed — documentation is accurate. Keep release notes and reference pages in sync if endpoint validation logic evolves.
  • Expected follow-up: Prefer a current-PR fix when local to changed code; defer only with rationale or linked follow-up.
  • Verification: Read src/lib/sandbox/config.ts:659-720 (validateUrlValueWithDnsResult) and src/lib/actions/inference-set.ts:405-440 (normalizeCustomEndpointUrl) to confirm DNS pinning logic and HTTPS fail-closed behavior
  • Missing regression test: Test coverage exists in test/config-set.test.ts:519-528 and test/actions/inference-set-endpoint-security.test.ts:45-56
  • Done when: The local improvement is applied, or the PR notes why it should be deferred.
  • Evidence: src/lib/sandbox/config.ts:760-775 returns pinned IP for HTTP, preserves original for HTTPS IP literals; throws 'DNS-backed HTTPS URLs are not supported' when pinnedUrl !== originalUrl for HTTPS

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@cv

cv commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator Author

PRA-T1 justification: npm run docs:sync-agent-variants and npm run docs both passed locally. The remote docs-only-checks job also passed. Fern reported 0 errors and the same 2 existing warnings documented in the PR body; no runtime tests are applicable to this docs-only diff.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (1)
docs/inference/inference-options.mdx (1)

84-92: 🗄️ Data Integrity & Integration | 🔵 Trivial | ⚡ Quick win

Missing host.openshell.internal exception in "full endpoint rules" section.

troubleshooting.mdx (Line 1391) points readers here for "the full endpoint rules," but this section doesn't mention the http://host.openshell.internal:<port> bridge exception that commands.mdx (Line 2073) and commands-nemohermes.mdx (Line 1686) both document. Readers following the troubleshooting link won't learn about this narrow allowed exception.

📝 Suggested addition
 Use an HTTPS IP-literal endpoint with a certificate valid for that address, or a public HTTP endpoint only when your deployment permits non-TLS traffic.
 Managed provider defaults that do not supply an explicit custom endpoint through these paths are unaffected.
+NemoClaw accepts `http://host.openshell.internal:<port>` only with an explicit port from `1024` through `65535`; this narrow exception supports NemoClaw's sandbox-to-host inference routes and is not a general private-endpoint bypass.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/inference/inference-options.mdx` around lines 84 - 92, The “Custom
Endpoint URL Validation” section in inference-options.mdx is missing the
documented host.openshell.internal bridge exception. Update this section to
explicitly mention that http://host.openshell.internal:<port> is allowed as a
narrow exception alongside the existing SSRF rules, and align the wording with
the guidance already documented in commands.mdx and commands-nemohermes.mdx so
readers following the troubleshooting link see the full set of endpoint rules.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/about/release-notes.mdx`:
- Line 39: The Quickstart link in the release notes points to the wrong route;
update the markdown link in the release-notes content so it targets the actual
quickstart page path instead of the openclaw route. Use the existing link text
near the Troubleshooting reference and replace the current relative target with
the correct `../get-started/quickstart-langchain-deepagents-code` destination.

---

Nitpick comments:
In `@docs/inference/inference-options.mdx`:
- Around line 84-92: The “Custom Endpoint URL Validation” section in
inference-options.mdx is missing the documented host.openshell.internal bridge
exception. Update this section to explicitly mention that
http://host.openshell.internal:<port> is allowed as a narrow exception alongside
the existing SSRF rules, and align the wording with the guidance already
documented in commands.mdx and commands-nemohermes.mdx so readers following the
troubleshooting link see the full set of endpoint rules.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: dfa732f5-001f-477f-9ac9-99cacb65a7cb

📥 Commits

Reviewing files that changed from the base of the PR and between e33c093 and ae94192.

📒 Files selected for processing (6)
  • docs/about/release-notes.mdx
  • docs/get-started/quickstart-langchain-deepagents-code.mdx
  • docs/inference/inference-options.mdx
  • docs/reference/commands-nemohermes.mdx
  • docs/reference/commands.mdx
  • docs/reference/troubleshooting.mdx

- LangChain Deep Agents Code now reaches `inference.local` through the managed OpenShell proxy across interactive, login-shell, direct-exec, and connect-probe paths.
The runtime normalizes proxy environment state, clears inherited bypass settings, and keeps credential-shaped values out of persisted proxy configuration.
Rebuild existing LangChain Deep Agents Code sandboxes after upgrading so they receive the corrected image scripts.
For more information, refer to [Quickstart with LangChain Deep Agents Code](../../openclaw/get-started/quickstart-langchain-deepagents-code) and [Troubleshooting](../reference/troubleshooting).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick win

Fix the quickstart link target.

The quickstart page is listed in the PR stack as docs/get-started/quickstart-langchain-deepagents-code.mdx, so ../../openclaw/get-started/... points at the wrong route. Link this to ../get-started/quickstart-langchain-deepagents-code instead.

♻️ Proposed fix
- For more information, refer to [Quickstart with LangChain Deep Agents Code](../../openclaw/get-started/quickstart-langchain-deepagents-code) and [Troubleshooting](../reference/troubleshooting).
+ For more information, refer to [Quickstart with LangChain Deep Agents Code](../get-started/quickstart-langchain-deepagents-code) and [Troubleshooting](../reference/troubleshooting).
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
For more information, refer to [Quickstart with LangChain Deep Agents Code](../../openclaw/get-started/quickstart-langchain-deepagents-code) and [Troubleshooting](../reference/troubleshooting).
For more information, refer to [Quickstart with LangChain Deep Agents Code](../get-started/quickstart-langchain-deepagents-code) and [Troubleshooting](../reference/troubleshooting).
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/about/release-notes.mdx` at line 39, The Quickstart link in the release
notes points to the wrong route; update the markdown link in the release-notes
content so it targets the actual quickstart page path instead of the openclaw
route. Use the existing link text near the Troubleshooting reference and replace
the current relative target with the correct
`../get-started/quickstart-langchain-deepagents-code` destination.

Signed-off-by: Carlos Villela <cvillela@nvidia.com>
@cv

cv commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator Author

CodeRabbit follow-up: added the valid host.openshell.internal exception to the full endpoint-rules section in 485e854db. I kept the release-note quickstart target as ../../openclaw/get-started/quickstart-langchain-deepagents-code: the release-notes source is published in both OpenClaw and Hermes variants, while this quickstart exists only in the OpenClaw variant. The OpenClaw-qualified route is intentional, matches the existing v0.0.68/v0.0.69 entries, and avoids a broken /hermes/get-started/... target. npm run docs:sync-agent-variants and npm run docs pass after the update.

@cv
cv merged commit c15086c into main Jul 2, 2026
37 checks passed
@cv
cv deleted the codex/docs-v0.0.73-release-notes branch July 2, 2026 23:47
Hadar301 pushed a commit to Hadar301/NemoClaw-OpenShift that referenced this pull request Jul 12, 2026
<!-- markdownlint-disable MD041 -->
## Summary
This PR prepares the user-facing documentation for v0.0.73 before the
release plan is frozen.
It adds release notes for the merged runtime changes and closes
documentation gaps around DNS-backed HTTPS endpoint validation and
LangChain Deep Agents Code proxy recovery.

## Changes
- Add the `v0.0.73` release-note section with links to the detailed
command, inference, recovery, lifecycle, platform, and setup
documentation.
- Correct the custom endpoint guidance so DNS-backed HTTPS rejection and
the supported alternatives match the fail-closed runtime behavior.
- Document the managed `inference.local` proxy boundary and rebuild
requirement for existing LangChain Deep Agents Code sandboxes.
- Add troubleshooting guidance for the DNS-backed HTTPS validation
error.
- Validate with `npm run docs:sync-agent-variants` and `npm run docs`;
Fern completed with 0 errors and 2 existing warnings.
- Source summary:
- [NVIDIA#6139](NVIDIA#6139) ->
`docs/about/release-notes.mdx`, `docs/inference/inference-options.mdx`,
`docs/reference/commands.mdx`, `docs/reference/commands-nemohermes.mdx`,
and `docs/reference/troubleshooting.mdx`: Document fail-closed
DNS-backed HTTPS endpoint handling and recovery options.
- [NVIDIA#6142](NVIDIA#6142) ->
`docs/about/release-notes.mdx`: Summarize native OpenShell GPU injection
and compatibility-path diagnostics.
- [NVIDIA#6197](NVIDIA#6197) ->
`docs/about/release-notes.mdx`: Summarize agent-aware messaging preset
rejection.
- [NVIDIA#6199](NVIDIA#6199) ->
`docs/about/release-notes.mdx`: Summarize the unreachable-sandbox backup
opt-in, restore behavior, and data-loss boundary.
- [NVIDIA#6204](NVIDIA#6204) and
[NVIDIA#6206](NVIDIA#6206) ->
`docs/about/release-notes.mdx` and
`docs/get-started/quickstart-langchain-deepagents-code.mdx`: Document
the corrected managed proxy contract and required sandbox rebuild.
- [NVIDIA#6213](NVIDIA#6213) ->
`docs/about/release-notes.mdx`: Summarize the merged setup, recovery,
and host-state documentation.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [x] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates
<!-- Check all that apply. For any "covered by existing tests", "not
applicable", or waiver entry, add a brief justification on the same line
or in the Changes section. -->
- [ ] Tests added or updated for changed behavior
- [ ] Existing tests cover changed behavior — justification:
- [x] Tests not applicable — justification: documentation-only release
preparation; the Fern docs build validates the changed pages and routes.
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [ ] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [ ] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification:
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each item you ran and confirmed. Leave unchecked items you
skipped. Doc-only changes do not require npm test unless you ran it. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Git hooks passed during commit and push, or `npx prek run
--from-ref main --to-ref HEAD` passes
- [ ] Targeted tests pass for changed behavior
- [ ] Full `npm test` passes (broad runtime changes only)
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only)
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Carlos Villela <cvillela@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Documentation**
* Added a new **v0.0.73** release notes section with six highlights at
the top of the changelog.
* Expanded **Custom Endpoint URL Validation** guidance in inference
option docs, including explicit acceptance/rejection rules for HTTP vs
DNS-backed HTTPS and how validated IPs are stored.
* Updated command references (`nemohermes inference set`, `$$nemoclaw
inference set`) to match the new validation behavior.
* Added troubleshooting documentation for unsupported **DNS-backed HTTPS
endpoints**, plus clarified Deep Agents Code routing and post-upgrade
sandbox rebuild guidance.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: Carlos Villela <cvillela@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants