OpenClaw

Align Dreaming/Cron integration expectations with stopped-job preservation while retaining the enabled-by-default creation control.

openclaw 2026.10.8

2026.10.10-beta.4 Highlights Changes Fixes Automations: preserve authenticated operator authority for explicit same-conversation scheduled follow-ups, including one-shot next_check rearming, while retaining role, session, cancellation, target, and tool-policy revocation boundaries. ( #176422 ) Thanks @RomneyDa . Gateway security: keep an environment-referenced hooks.token out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. ( #179199 ) Thanks @VACInc and @RomneyDa . Memory Wiki: preserve human-authored Notes wh...

perf(gateway): reuse session store identities per config generation (…

This is a gateway-only extended-stable release, which is our current equivalent to LTS. This release is OpenClaw from the end of September 2026, plus critical security updates, reliability and performance fixes, and features like new model support. The latest version of OpenClaw at the time of this release is 2026.10.7 2026.9.35 Highlights Steadier memory under service managers: worker heap caps now apply even when the Gateway service passes a process-wide --max-old-space-size , idle Codex app-server clients retire after 30 seconds, and archive workers are reused between session deletes, so lo...

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

refactor: keep one-use callbacks with their owners refactor: withdraw unqualified CI-linked runtime slice

test(ui): align boot stress fixture with sharing permissions ( #181798 )

perf(plugins): restore invocation and recovery scopes together Remove one native context-map restore and the per-entry recovery resolver. Preserve mutable Gateway views, exact recovery-source identity, and all instance and delegated authority fences. Add paired plugin RPC measurement with optional pacing. fix(plugins): preserve optional recovery owner in scope type test(perf): support settled run history in team fixtures test(perf): verify plugin scope against installed source test(plugins): migrate remaining recovery context callers test(plugins): account for recovery store in scope entry cou...

fix(update): keep the in-Gateway refusal code for update repair runs …

fix: show chat color swatches before hex values fix(ui): space and emphasize chat hex colors

fix(release): isolate trusted ClawHub pack tooling from candidate dep…

fix(ui): skip precompressed sidecars for small non-startup Control UI…

This is a gateway-only extended-stable release, which is our current equivalent to LTS. This release is OpenClaw from the end of September 2026, plus critical security updates, reliability and performance fixes, and features like new model support. The latest version of OpenClaw at the time of this release is 2026.10.6 2026.9.34 Highlights Safer agent file edits: apply_patch now validates an ordered envelope before mutating the workspace, so a later invalid hunk cannot delete files changed by an earlier operation. ( #160409 ) Thanks @masatohoshino , @obviyus , and @RomneyDa . More reliable man...

2026.10.7 Highlights Replay-safe session recovery: interrupted sessions now retain recovery provenance and unfinished tool outcomes, stopped conversations retire terminal recovery residue before accepting the next message, rejected Claude CLI drafts stay out of final replies, large child-completion batches stay within requester context, and Codex previews no longer block replies after a context refresh. ( #153728 , #168764 , #172068 , #177716 , #176682 , #176783 , #176675 , #159715 , #181801 ) Thanks @zhangguiping-xydt , @ruel225 , @Oliver4Spot , @jjjhenriksen , @enki , [ 查看原始出处 → ]

fix: settle side chat resource acquisition test: retain pending palette RPC ownership

Reuse the first iterator row for native SQLite runtime qualification, removing one redundant statement per new process while retaining both iterator behavior observations and all admission facts. SQLite-only; source attribution forecasts 10 fewer statements and 2 fewer main-thread statements per census workload, with requests unchanged. Native owner regression and related suites: 97 passed. CI types, lint and PostgreSQL conformance passed; the two unrelated quiet-child restart failures were reproduced identically on the base and candidate. Release-note context: reduce native SQLite startup qua...

2026.10.6 Highlights Patched Node runtime required: OpenClaw now requires Node 24.22.1+ on the 24 line or 26.12.1+ on the 26 line, which reject TLS chains signed with the compromised certificate keys addressed in the October 2026 Node.js security releases. Docker images ship Node 24.22.1, installers select the patched runtimes, and openclaw update refuses with recovery guidance before installing on an older Node instead of breaking the running install. Source builds now pin pnpm 12.15.0. ( #179992 ) Thanks @joshavant . Safer updates and recovery: package swaps now refuse unsafe service states,...

Isolates the full-Gateway managed model-reload shutdown test from unrelated post-ready maintenance while preserving its cancellation, join, cleanup, and no-late-import assertions.

Let direct ephemeral setup-code replay reach the existing node-host saved-token recovery owner after bootstrap expiry. Keep manual enrollment, join URLs, endpoint matching, and token revocation checks intact. Replace the regression fixture polling deadline with connection publication and early-failure propagation. Six reconnect and refusal cases pass in CI. Co-authored-by: jalehman [email protected]

fix(release): accept the readable SDK diff summary in publish preflig…

feat(ui): organize pull request details and check controls fix(ui): defer pull request views with guarded recovery fix(ui): complete pull request details integration checks test(ui): exercise retained pull request surfaces test(ui): exercise archived publication through its current entry build(ui): refresh boot modules after deferring pull request views test(ui): open progress checks through the pull request menu test(ui): verify PR reader lifetime through compact native actions chore(ui): regenerate boot module manifest

openclaw 2026.10.10-beta.3

refactor(ui): simplify non-chat page reactive lifecycles chore(ui): satisfy page refactor lint checks

2026.10.10-beta.2 Highlights Changes Fixes Workspace safety: reject a multi-file apply_patch before changing files when a later update target is missing or its context does not match, preserving the original workspace for the next attempt. Commit-time I/O failures can still leave partial effects. ( #160409 ; related #117742 and #127496 ) Thanks @masatohoshino , @obviyus , and @yetval . Tool policy: run plugin before_tool_call hooks in standalone openclaw agent exec sessions so plugin tool guards take effect. ( #159333 ; fixes #158824 ) Thanks @joseairosa and @obviyus . Buzz: reconnect when a r...

OpenClaw v2026.10.5 2,704 commits · 2,250 pull requests · 638 contributors Changes included in this release The release notes and changelog contain the same content, presented in two formats: Release notes — formatted for people. Changelog — plain Markdown for AI agents and tools. Thanks @609nft @67-luck @9fw2pq8sgb-art @a1fred-ai @a6xa3 @aaajiao @aacodex401 @aatreya @abacha @absol89 @adamamzalag @adamjgmiller @adele-with-a-b @adenzhou1350 @adlbas26 @aia007731-lab @aikohoshinoai-prog @ajmtrz @akshatshahh @aldiz1711 @aleps001 @alexph-dev @alexsimeonoww @alfred429 @alfredjbclaw @alix-007 @alkor2...

Keep legacy Matrix dedupe retention private and preserve the tests independent 30-day expectation. Durable ingress continues to own live replay retention. Delete the superseded event fixture and register the documented presence benchmark entry. Validated 62 Matrix tests, the shared retention case, targeted types/lint/format, and P2 review. All three deadcode scans ran; only the unrelated CopilotToolBridgeInput test type from #177267 remains.

Retain mock Responses exceptions with the request scenario, advertised tools, and input identities so a silent reporter does not hide an incomplete stream's cause. On missing revisions, include selected pins, Gateway revision inventory, publication and placement receipts, node logs, and observed bundle hashes. Expand catalog paths against the actual Gateway or worker fixture home. This is diagnostic-only: all 75 assertions, deadlines, and runtime behavior are unchanged. No worker resource path is inferred when the turn never reaches the provider. Proof: controlled incomplete-stream and missing...

test(agents,skills,migrations,suites,telegram,scripts): remove low-va…

fix(release): plugin asset hooks inherit release tooling's tsconfig (…

openclaw 2026.10.4

test: reproduce hidden agent avatar roster dependency fix: hidden agent avatars delay the visible roster

fix(release): plugin npm preview scans load candidate workspace packa…

OpenClaw 2026.10.10-beta.1

Retire activation markers classified inside settled Markdown block code, sharing the existing XML predicate and retaining canonical filtering for real leaks and mutable inline code. Preserve replacement resets and add deterministic work-count and text-equivalence regressions. Fixes #172663 .

This is a gateway-only extended-stable release, which is our current equivalent to LTS. This release is OpenClaw from the end of September 2026, plus critical security updates, reliability and performance fixes, and features like new model support. The latest version of OpenClaw at the time of this release is 2026.10.3 2026.9.33 Highlights Safer September upgrades: updates on the 2026.9 line keep state, plugin data, service ownership, and Windows state paths intact, and refuse automatic restore over unattributed Doctor writes. ( #160167 , #166755 ) Thanks @RomneyDa , @vyctorbrzezowski , @jaleh...

OpenClaw 2026.10.5-beta.4

fix(update): Doctor lint deferred with 0ms left after a slow state sn…

The worker-access reference still said placement read preparation joins an overlapping publication's settlement and rereads fresh facts. #168747 removed that loop and accepted the tradeoff that an ordinary placement read racing a same-session mutation reports authority changed. Describe the current fail-closed contract and why rereading only the preparation read would not remove the window.

OpenClaw v2026.10.3 90 commits · 79 pull requests · 99 contributors Changes included in this release The release notes and changelog contain the same content, presented in two formats: Release notes — formatted for people. Changelog — plain Markdown for AI agents and tools. Thanks @aaajiao @adenzhou1350 @aia007731-lab @aleps001 @alexph-dev @an2in @arifarai @bluet @ceckert @chedong @clawdgawd @Claynetic @CodeForcer @creanet-64 @davidevelyn @davidmackrory-byte @destinedenergy @DonnieFi @eduherranz @ericcurtin @ezimerman @frxiaobei @fuller-stack-dev @georgenaz @gisk0 @GoldenrodScript @goutamadwan...

fix(feishu): give each monitor start its own binding adapter registra…

2026.10.5-beta.3 Highlights Updates leave the Gateway running: pnpm 12 installs keep their Gateway service and openclaw launcher on the durable install path, Windows updates accept qualified Scheduled Task accounts and their own verified driver, macOS accepts protected Bun service commands, and clean service-install refusals no longer leave the Gateway stopped. ( #170003 , #169059 , #170131 , #169244 , #169481 , #169563 , #170006 , #169662 , #169658 , #169915 ) Thanks @xilopaint , @k-sekula , @RomneyDa , [ 查看原始出处 → ]

Preserve the shared fallback owner's model-routing provenance in cron candidate parameters. Dispatched fallbacks continue the original user turn with the existing recorder, user key, and session/run identity; undispatched fallbacks retain fresh-prompt classification. Transcript integrity assertions are unchanged. The two dispatch-state regressions pass in exact-head CI run 38346632523. The coordinator's reviewed scope and two clean autoreviews are retained; ClawSweeper reported no code findings. Its proof-only hold is covered by the maintainer's explicit CI-proof override. Related: #168456 The...

2026.10.5-beta.2 Highlights Updates finish and recover: openclaw update settles stale handoff leases, completed receipts, and legacy 2026.9.8 recovery records instead of stopping on update-recovery-pending , keeps the service heap limit and webhook listeners, handles Windows short-name paths, and no longer reports accepted handoffs or successful updates as failures. ( #169038 , #169027 , #168388 , #168889 , #169035 , #169292 , #168927 , #168993 , #169037 , #169454 , #168905 ) Thanks @mkdelta221 , @waynegault ,

perf(sessions): reuse config-owned roster and projection facts Retain roster facts for the published config revision and model facts across row-only publications. Let selection and facts publications retire list caches while preserving materialization-scoped weak presentations. Keep independent mutable inputs batch-scoped and invalidate same-object config republication. Exercise configuration refresh through the actual publisher. fix(sessions): keep roster publication reads import-light Publish config identity and revision before observers through an import-free leaf so roster reads do not int...

2026.10.2 Highlights Updates from 2026.10.1: the first upgrade from stable 2026.10.1 now completes cleanly, successful in-place updates no longer end in errors, and Windows, cloned-filesystem, and private-Node update paths finish instead of stalling or rolling back. ( #168849 , #169031 , #165233 , #166530 , #168968 , #164677 , #165257 ) Thanks @RomneyDa , @jarvisnextgeneration20-lang , and @MrJanvar . Doctor and update recovery: Doctor no longer stops on residual legacy imports, stale Gateway locks, slow state inspection, memory reindex locks, or allowlists for removed channel accounts, and st...

fix(update): recover SQLite rollback journals on Windows docs: keep immutable recovery platform scope unchanged

refactor(plugin-sdk): share legacy persistence warning budgets refactor(plugin-sdk): await native exec and placement preparation Move bundled node policy preparation, approval methods that expire rows, placement retirement, and restart clearing through their existing workers. Preserve released native signatures and callback ordering with shared deprecation warnings, and retain effect-time authority checks. Storage format and update behavior are unchanged. test: repair approval authority fixture and inventory native compatibility test: reflect retained native placement calls in worker inventory...

fix(release): size the plugin publication manifest cap for its file-e…

2026.10.5-beta.1 Highlights Safer updates: updates finish across devices, filesystems, Windows elevation, and interrupted activations, and recover from stale leases or changed evidence instead of stranding the install or blocking future updates. ( #164636 , #164769 , #165257 , #165863 , #166548 , #166695 , #168043 , #166394 , #167302 ) Thanks @hrp6vv9mwr-glitch , @MrJanvar , @Shirleyyyhk , @farisoftfry , @neilofneils404 , and