chore(deps): refresh validation and container dependencies

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 ### Fixed
 
+- Refresh bundled Chromium through Playwright 1.62.1, align the Kubernetes MLflow server with client 3.15.2, and require Pydantic 2.13.5 bug fixes.
 - Apply planned native reasoning effort to all four harnesses and resolve proxy, runner, and manifest precedence before proxy startup (#53, thanks @vincentkoc).
 - Rehydrate replacement native fleet leases instead of trusting stale bootstrap timestamps (#58, thanks @vincentkoc).
 - Separate native execution validity from diagnostic rewards, reject wholly invalid runs, and preserve terminal exit status in recovery archives (#63, thanks @vincentkoc).

Dockerfile

@@ -14,7 +14,7 @@ RUN apt-get update && \
 RUN ln -s /app /openclaw
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
-RUN cd /tmp && npx -y playwright@1.59.1 install --with-deps chromium && \
+RUN cd /tmp && npx -y playwright@1.62.1 install --with-deps chromium && \
     CHROME_PATH="$(find /ms-playwright -path '*/chrome' -type f | sort | head -n 1)" && \
     test -x "$CHROME_PATH" && \
     ln -sf "$CHROME_PATH" /usr/bin/chromium

Dockerfile.main

@@ -17,7 +17,7 @@ RUN apt-get update && \
 RUN ln -s /app /openclaw
 
 ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
-RUN npx -y playwright@1.59.1 install --with-deps chromium && \
+RUN npx -y playwright@1.62.1 install --with-deps chromium && \
     CHROME_PATH="$(find /ms-playwright -path '*/chrome' -type f | sort | head -n 1)" && \
     test -x "$CHROME_PATH" && \
     ln -sf "$CHROME_PATH" /usr/bin/chromium

docs/kubernetes.md

@@ -62,7 +62,7 @@ Set these **before** running `deploy.sh`.
 | `MLFLOW_TRACKING_URI` | *(deployed by script)* | External MLflow URI — skips MLflow deploy if set |
 | `MLFLOW_EXPERIMENT_ID` | | MLflow experiment ID |
 | `MLFLOW_EXPERIMENT_NAME` | `clawbench` | MLflow experiment name |
-| `MLFLOW_IMAGE` | `ghcr.io/mlflow/mlflow:v3.14.0` | MLflow server image |
+| `MLFLOW_IMAGE` | `ghcr.io/mlflow/mlflow:v3.15.2` | MLflow server image |
 | `ANTHROPIC_API_KEY` | | Added to K8s secret if set |
 | `OPENROUTER_API_KEY` | | Added to K8s secret if set |
 | `GEMINI_API_KEY` | | Added to K8s secret if set |

pyproject.toml

@@ -7,7 +7,7 @@ license = "MIT"
 requires-python = ">=3.11"
 dependencies = [
     "websockets>=17.1,<18",
-    "pydantic>=2.13.4,<3",
+    "pydantic>=2.13.5,<3",
     "pyyaml>=6.0.3,<7",
     "datasets>=5.0.1,<6",
     "gradio>=6.26.0,<7",

scripts/k8s/deploy.sh

@@ -29,7 +29,7 @@
 #   MLFLOW_TRACKING_URI            External MLflow URI (skips MLflow deploy if set)
 #   MLFLOW_EXPERIMENT_ID           MLflow experiment ID
 #   MLFLOW_EXPERIMENT_NAME         MLflow experiment name
-#   MLFLOW_IMAGE                   MLflow image (default: ghcr.io/mlflow/mlflow:v3.14.0)
+#   MLFLOW_IMAGE                   MLflow image (default: ghcr.io/mlflow/mlflow:v3.15.2)
 #   ANTHROPIC_API_KEY              Anthropic key (added to secret if set)
 #   OPENROUTER_API_KEY             OpenRouter key (added to secret if set)
 #   GEMINI_API_KEY                 Gemini key (added to secret if set)
@@ -40,7 +40,7 @@ NS="${CLAWBENCH_NAMESPACE:-}"
 MLFLOW_NS="${MLFLOW_NAMESPACE:-mlflow}"
 CLAWBENCH_IMG="${CLAWBENCH_IMAGE:-quay.io/sallyom/clawbench:latest}"
 OPENCLAW_IMG="${OPENCLAW_IMAGE:-ghcr.io/openclaw/openclaw:latest}"
-MLFLOW_IMG="${MLFLOW_IMAGE:-ghcr.io/mlflow/mlflow:v3.14.0}"
+MLFLOW_IMG="${MLFLOW_IMAGE:-ghcr.io/mlflow/mlflow:v3.15.2}"
 
 # ---------------------------------------------------------------------------
 if [[ "${1:-}" == "-h" || "${1:-}" == "--help" ]]; then
@@ -80,7 +80,7 @@ Optional environment:
   MLFLOW_TRACKING_URI          External MLflow URI (skips MLflow deploy)
   MLFLOW_EXPERIMENT_ID         MLflow experiment ID
   MLFLOW_EXPERIMENT_NAME       MLflow experiment name
-  MLFLOW_IMAGE                 MLflow image (default: ghcr.io/mlflow/mlflow:v3.14.0)
+  MLFLOW_IMAGE                 MLflow image (default: ghcr.io/mlflow/mlflow:v3.15.2)
   ANTHROPIC_API_KEY            Anthropic key (added to secret if set)
   OPENROUTER_API_KEY           OpenRouter key (added to secret if set)
   GEMINI_API_KEY               Gemini key (added to secret if set)
@@ -254,7 +254,7 @@ deploy_mlflow() {
   kubectl apply -f "$SCRIPT_DIR/mlflow/pvc.yaml" -n "$MLFLOW_NS"
   kubectl apply -f "$SCRIPT_DIR/mlflow/service.yaml" -n "$MLFLOW_NS"
 
-  if [[ "$MLFLOW_IMG" != "ghcr.io/mlflow/mlflow:v3.14.0" ]]; then
+  if [[ "$MLFLOW_IMG" != "ghcr.io/mlflow/mlflow:v3.15.2" ]]; then
     kubectl apply -f "$SCRIPT_DIR/mlflow/deployment.yaml" -n "$MLFLOW_NS"
     kubectl set image "deploy/mlflow" "mlflow=$MLFLOW_IMG" -n "$MLFLOW_NS"
   else

scripts/k8s/mlflow/deployment.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: mlflow
-          image: ghcr.io/mlflow/mlflow:v3.14.0
+          image: ghcr.io/mlflow/mlflow:v3.15.2
           command:
             - mlflow
             - server