---
title: v2026.10.8
description: Security remediations and patch fixes for updates, conversations, apps, channels, and model providers.
---

# v2026.10.8

AI agents and tools can read these release notes as [plain Markdown](https://raw.githubusercontent.com/openclaw/openclaw/main/CHANGELOG/2026.10.8.md).

**Security release:** v2026.10.8 adds remediations for the eMudhra certificate compromise in the secret egress proxy and its exported trust bundle. Restart the Gateway to apply the change. Apps with independent trust stores and bypass tunnels need their own updates.

This is a patch release with no new features. It fixes problems that could stop OpenClaw from installing, updating, starting or delivering replies, alongside smaller app, channel and provider fixes.

**Release scale:** 161 pull requests, 28 direct commits, and 163 contributors.

## Installation and Onboarding

- Fixes fresh provider setup accidentally hiding other models in the picker after you select a model.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#175945](https://github.com/openclaw/openclaw/pull/175945). Thanks to [@matthematics1137](https://github.com/matthematics1137), [@obviyus](https://github.com/obviyus), [@jb-dev1](https://github.com/jb-dev1).

  </details>

- Fixes Linux setup being blocked by the permissions on an existing OpenClaw state folder. New installer folders are also created with private permissions.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179538](https://github.com/openclaw/openclaw/pull/179538). Thanks to [@steipete](https://github.com/steipete), [@xiaopan-xydt](https://github.com/xiaopan-xydt), [@XiaoPengYouCode](https://github.com/XiaoPengYouCode).

  </details>

- Fixes the default piped Windows installer failing to start when no optional Node version is supplied.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183145](https://github.com/openclaw/openclaw/pull/183145). Thanks to [@steipete](https://github.com/steipete), [@LiuwqGit](https://github.com/LiuwqGit), [@ryandle](https://github.com/ryandle).

  </details>

## Web UI

- Deleting several conversations in the Control UI no longer repeatedly starts the same background archive process.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#175091](https://github.com/openclaw/openclaw/pull/175091) and [#171156](https://github.com/openclaw/openclaw/pull/171156). Thanks to [@steipete](https://github.com/steipete).

  </details>

- The Control UI now reconnects when a visible tab has lost contact but still shows Connected.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179101](https://github.com/openclaw/openclaw/pull/179101). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes a missing-reply retry failing in the Control UI when the original turn also had permission to create a personal skill.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182219](https://github.com/openclaw/openclaw/pull/182219). Thanks to [@sukhdeepjohar](https://github.com/sukhdeepjohar).

  </details>

- Fixes conversation links opening a 404 page when you reload or restore them.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183148](https://github.com/openclaw/openclaw/pull/183148). Thanks to [@xiaopan-xydt](https://github.com/xiaopan-xydt), [@steipete](https://github.com/steipete), [@2991495215](https://github.com/2991495215).

  </details>

- Fixes settings refusing to save when a plugin's saved secret reference is fully hidden in the editor.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183571](https://github.com/openclaw/openclaw/pull/183571). Thanks to [@lonexreb](https://github.com/lonexreb), [@steipete](https://github.com/steipete), [@Valkster70](https://github.com/Valkster70).

  </details>

- Fixes follow-up messages being rejected in ordinary chats when an agent uses a separate session store alongside older stored sessions.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Landed commit d99892d](https://github.com/openclaw/openclaw/commit/d99892dab47b238e2e761fb1598f65cb71d7d0e6).

  </details>

- Chat recovery notices no longer say a Gateway restart interrupted a turn when another cause is possible.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Landed commit 170ccaa](https://github.com/openclaw/openclaw/commit/170ccaaf531510bb5f550e0210e44f1e656bbedd).

  </details>

## Updates and Maintenance

- Future updates can finish when OpenClaw itself passes verification but a channel is offline, with a warning for the affected channel.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179471](https://github.com/openclaw/openclaw/pull/179471). Thanks to [@steipete](https://github.com/steipete), [@duyufansh2008](https://github.com/duyufansh2008).

  </details>

- Fixes subsequent updates rejecting an unchanged deployment because of its saved policy approval.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180505](https://github.com/openclaw/openclaw/pull/180505). Thanks to [@steipete](https://github.com/steipete), [@waynegault](https://github.com/waynegault).

  </details>

- Fixes subsequent npm updates failing on filesystems that add harmless execute permissions to unchanged package files.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181141](https://github.com/openclaw/openclaw/pull/181141). Thanks to [@steipete](https://github.com/steipete), [@hannesrudolph](https://github.com/hannesrudolph).

  </details>

- Fixes debug logging breaking update validation and Doctor's recovery data capture.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182850](https://github.com/openclaw/openclaw/pull/182850). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes subsequent pnpm 10 updates using the wrong pnpm installation or missing its global commands.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181456](https://github.com/openclaw/openclaw/pull/181456). Thanks to [@steipete](https://github.com/steipete), [@rayluo88](https://github.com/rayluo88).

  </details>

- Fixes subsequent Windows pnpm updates failing on a missing link to an optional platform package.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181596](https://github.com/openclaw/openclaw/pull/181596). Thanks to [@steipete](https://github.com/steipete), [@SMF12138](https://github.com/SMF12138).

  </details>

- Fixes subsequent unattended Windows updates locking themselves out when the temporary folder uses a short-name path.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183622](https://github.com/openclaw/openclaw/pull/183622). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes Doctor refusing retained conversations because their incoming-message headings were repaired.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179089](https://github.com/openclaw/openclaw/pull/179089). Thanks to [@steipete](https://github.com/steipete), [@LiuwqGit](https://github.com/LiuwqGit), [@mrsavingsblogspot-rgb](https://github.com/mrsavingsblogspot-rgb).

  </details>

- Fixes Doctor stack overflows while processing very large retained session histories and recovery diagnostics.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180414](https://github.com/openclaw/openclaw/pull/180414). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Doctor uses less retained memory while checking large fleets of agents.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180792](https://github.com/openclaw/openclaw/pull/180792). Thanks to [@steipete](https://github.com/steipete), [@609NFT](https://github.com/609NFT).

  </details>

- Doctor now repairs stale plugin dependency links that could block a repair or update, including dangling Windows junctions.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179549](https://github.com/openclaw/openclaw/pull/179549). Thanks to [@steipete](https://github.com/steipete), [@JIRBOY](https://github.com/JIRBOY), [@Dembe-agent](https://github.com/Dembe-agent).

  </details>

- A missing legacy OAuth directory alone no longer blocks update readiness. Doctor still warns and offers to repair it.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180174](https://github.com/openclaw/openclaw/pull/180174). Thanks to [@steipete](https://github.com/steipete), [@VN77-77VN](https://github.com/VN77-77VN).

  </details>

- Doctor now keeps the model you chose for summarizing long Codex conversations. If an earlier repair deleted that setting, restore it manually.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179914](https://github.com/openclaw/openclaw/pull/179914). Thanks to [@steipete](https://github.com/steipete), [@scotthuang](https://github.com/scotthuang).

  </details>

- Doctor now moves the configured owner's login into shared storage when that owner is not the main agent and the main store is empty. Conflicting credential stores still need to be consolidated before retrying.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179726](https://github.com/openclaw/openclaw/pull/179726). Thanks to [@steipete](https://github.com/steipete), [@sukhdeepjohar](https://github.com/sukhdeepjohar), [@bdjben](https://github.com/bdjben).

  </details>

- Fixes read-only database checks interrupting a stopped-state backup during a subsequent Update or Doctor run.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180827](https://github.com/openclaw/openclaw/pull/180827). Thanks to [@steipete](https://github.com/steipete).

  </details>

- A subsequent same-version repair can restart the managed Gateway after a post-plugin Doctor failure when it is safe to do so, including restoring Windows autostart. The failed repair is still reported.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180668](https://github.com/openclaw/openclaw/pull/180668). Thanks to [@steipete](https://github.com/steipete), [@alwynispat](https://github.com/alwynispat), [@wilsonthesphere](https://github.com/wilsonthesphere).

  </details>

- On Linux, Doctor can repair a managed Gateway that is using an unsupported Node version when a supported replacement is available. Explicitly pinned runtimes still need manual selection.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181618](https://github.com/openclaw/openclaw/pull/181618). Thanks to [@steipete](https://github.com/steipete), [@samueltardieu](https://github.com/samueltardieu).

  </details>

- Future macOS updates wait for the serving Gateway to exit and release its databases before running Doctor.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182055](https://github.com/openclaw/openclaw/pull/182055). Thanks to [@steipete](https://github.com/steipete), [@RockhopperBot](https://github.com/RockhopperBot).

  </details>

- When a terminal hangup interrupts Doctor repair, Doctor attempts to restore the managed Gateway it stopped before exiting.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182901](https://github.com/openclaw/openclaw/pull/182901). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Standalone Doctor starts cancelling prolonged original-state capture after ten minutes and gives Gateway status and start commands if restoration fails. Work already underway may take longer to settle.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181941](https://github.com/openclaw/openclaw/pull/181941). Thanks to [@steipete](https://github.com/steipete), [@kenrohde](https://github.com/kenrohde), [@kqtxmaster-boop](https://github.com/kqtxmaster-boop).

  </details>

- Fixes an abandoned update or Doctor worker continuing to block CLI commands and Gateway startup after its parent process has died.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181695](https://github.com/openclaw/openclaw/pull/181695). Thanks to [@steipete](https://github.com/steipete), [@PonySlayer28](https://github.com/PonySlayer28).

  </details>

- Gateway startup retries transient agent database locks. If retries are exhausted, close competing processes and restart the Gateway.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182446](https://github.com/openclaw/openclaw/pull/182446). Thanks to [@steipete](https://github.com/steipete), [@Oldrich333](https://github.com/Oldrich333).

  </details>

- Doctor preserves specific recovery errors for agents affected by a missing deletion journal, and can continue other repairs when a memory-index import is deferred.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181804](https://github.com/openclaw/openclaw/pull/181804). Thanks to [@steipete](https://github.com/steipete), [@4140leal-cw](https://github.com/4140leal-cw).

  </details>

- Fixes relative session-store paths creating a second database and breaking follow-up chats. If you already have split stores, stop the Gateway, run `openclaw doctor --fix`, then restart.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182444](https://github.com/openclaw/openclaw/pull/182444). Thanks to [@steipete](https://github.com/steipete), [@erickj92](https://github.com/erickj92), [@kqtxmaster-boop](https://github.com/kqtxmaster-boop).

  </details>

- Fixes trusted reverse proxies receiving a 403 when their own health checks omit forwarded client headers.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182823](https://github.com/openclaw/openclaw/pull/182823). Thanks to [@ericcaiwx-star](https://github.com/ericcaiwx-star), [@steipete](https://github.com/steipete), [@treez-admin](https://github.com/treez-admin).

  </details>

- The background session-archive process now releases its memory after five idle minutes and starts again when needed.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183410](https://github.com/openclaw/openclaw/pull/183410). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes Doctor or a configuration read replacing valid hand-edited or Kubernetes-supplied settings with an older backup. Recovery warnings also point to the saved original.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183703](https://github.com/openclaw/openclaw/pull/183703). Thanks to [@steipete](https://github.com/steipete), [@csabatatrai](https://github.com/csabatatrai), [@yetval](https://github.com/yetval).

  </details>

## Messaging

- Fixes default Slack, Google Chat, X, Nextcloud Talk, Zalo, Mattermost and Telegram accounts going offline after a separately configured account is added when the default uses a secret reference.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#176267](https://github.com/openclaw/openclaw/pull/176267), [#180450](https://github.com/openclaw/openclaw/pull/180450), [#182608](https://github.com/openclaw/openclaw/pull/182608), [#182706](https://github.com/openclaw/openclaw/pull/182706), [#183618](https://github.com/openclaw/openclaw/pull/183618). Thanks to [@555aaditya](https://github.com/555aaditya), [@steipete](https://github.com/steipete), [@progerjkd](https://github.com/progerjkd), [@masatohoshino](https://github.com/masatohoshino), [@wangmiao0668000666](https://github.com/wangmiao0668000666), [@rodricksz4h5](https://github.com/rodricksz4h5).

  </details>

- Feishu quick-action and confirmation cards can be delivered with their buttons again.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#79832](https://github.com/openclaw/openclaw/pull/79832). Thanks to [@xiabee](https://github.com/xiabee), [@fuller-stack-dev](https://github.com/fuller-stack-dev), [@steipete](https://github.com/steipete).

  </details>

- Feishu streaming cards can keep the text written before a tool call when the answer continues afterward.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182438](https://github.com/openclaw/openclaw/pull/182438). Thanks to [@steipete](https://github.com/steipete), [@felirami](https://github.com/felirami), [@kentuscn](https://github.com/kentuscn).

  </details>

- Deeply nested Tlon messages no longer hold up later group messages and DMs. Excessively nested text can be truncated, and events too deeply nested to store are dropped rather than replayed.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#177536](https://github.com/openclaw/openclaw/pull/177536). Thanks to [@eleqtrizit](https://github.com/eleqtrizit).

  </details>

- Tlon can reconnect after a silent stream interruption and replay unacknowledged messages.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178358](https://github.com/openclaw/openclaw/pull/178358). Thanks to [@rodricksz4h5](https://github.com/rodricksz4h5), [@steipete](https://github.com/steipete).

  </details>

- iMessage now attempts to recover a stalled Messages bridge after a send times out. The failed send is not automatically retried, so check delivery before resending.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180900](https://github.com/openclaw/openclaw/pull/180900). Thanks to [@steipete](https://github.com/steipete).

  </details>

- iMessage self-chat replies are less likely to trigger repeated agent turns. A genuine self-chat message with the same text as a pending reply can still be suppressed for up to about three minutes.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183383](https://github.com/openclaw/openclaw/pull/183383). Thanks to [@sukhdeepjohar](https://github.com/sukhdeepjohar), [@steipete](https://github.com/steipete), [@kunalchaudhary82](https://github.com/kunalchaudhary82).

  </details>

- Slack Socket Mode can reconnect after an isolated authentication error, although repeated failures can still block the channel.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181056](https://github.com/openclaw/openclaw/pull/181056). Thanks to [@mushuiyu886](https://github.com/mushuiyu886), [@marns](https://github.com/marns).

  </details>

- An unresponsive Slack relay connection can reconnect so incoming events can resume.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182368](https://github.com/openclaw/openclaw/pull/182368). Thanks to [@steipete](https://github.com/steipete).

  </details>

- An unexpectedly stopped channel can restart even if its previous run is cancelled while waiting to retry.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182433](https://github.com/openclaw/openclaw/pull/182433). Thanks to [@steipete](https://github.com/steipete), [@wuqxuan](https://github.com/wuqxuan), [@JOY](https://github.com/JOY).

  </details>

- Fixes Synology Chat reporting an unconfirmed send even though it returned a valid message ID for the recipient.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#177654](https://github.com/openclaw/openclaw/pull/177654). Thanks to [@HootRock](https://github.com/HootRock), [@steipete](https://github.com/steipete), [@thegrizzliestcat](https://github.com/thegrizzliestcat).

  </details>

- Twitch replies now resolve supported channel address forms to the intended channel.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178480](https://github.com/openclaw/openclaw/pull/178480). Thanks to [@HeZ2z](https://github.com/HeZ2z), [@mweiland23-ux](https://github.com/mweiland23-ux).

  </details>

- Zalo can process text retained in unsupported incoming events, including URL previews. Events without usable text need to be resent.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178938](https://github.com/openclaw/openclaw/pull/178938). Thanks to [@zzrs-xxxr](https://github.com/zzrs-xxxr), [@steipete](https://github.com/steipete), [@namchamvinhcuu](https://github.com/namchamvinhcuu).

  </details>

- Discord realtime voice consultations can reach the agent and return an answer in a fresh session.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179462](https://github.com/openclaw/openclaw/pull/179462). Thanks to [@shoaibulhaque](https://github.com/shoaibulhaque), [@yagizkus](https://github.com/yagizkus).

  </details>

- Fixes authorized Discord slash commands failing because their source conversation was archived; eligible conversations are restored in place with their history.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Commit dcbe91c](https://github.com/openclaw/openclaw/commit/dcbe91c6d70a7ad591eaa0c6c95dbaf42611b7d4). Thanks to [@PollyBot13](https://github.com/PollyBot13).

  </details>

- Ordinary Matrix room messages now follow the configured reply visibility and silence policies.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179506](https://github.com/openclaw/openclaw/pull/179506). Thanks to [@xiaopan-xydt](https://github.com/xiaopan-xydt), [@obviyus](https://github.com/obviyus), [@doomy](https://github.com/doomy).

  </details>

- Fixes CLI-backed group agents losing conversation context when switching between room events and direct mentions with automatic replies enabled.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182273](https://github.com/openclaw/openclaw/pull/182273). Thanks to [@xiaopan-xydt](https://github.com/xiaopan-xydt), [@goslingmanagment](https://github.com/goslingmanagment), [@steipete](https://github.com/steipete).

  </details>

- Incoming messages can now trigger recovery of a failed model runtime without a Gateway restart. If both recovery attempts fail, the input is retained for an operator to inspect and resend after fixing the problem.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181300](https://github.com/openclaw/openclaw/pull/181300). Thanks to [@steipete](https://github.com/steipete), [@handcraftrc-pixel](https://github.com/handcraftrc-pixel).

  </details>

- Google Chat now delivers remote attachments as web links, including replies containing only media. This does not add local-file or native attachment uploads.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182416](https://github.com/openclaw/openclaw/pull/182416). Thanks to [@steipete](https://github.com/steipete), [@jailbirt](https://github.com/jailbirt), [@pbreault](https://github.com/pbreault).

  </details>

- A channel image that was temporarily unreadable can be retried on a later conversation turn once it becomes readable. Images already marked permanently suppressed are not repaired.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183390](https://github.com/openclaw/openclaw/pull/183390). Thanks to [@masatohoshino](https://github.com/masatohoshino), [@steipete](https://github.com/steipete), [@yetval](https://github.com/yetval).

  </details>

- X accounts with capitalized configuration keys can be selected and managed in the Control UI, including their allowlists and guest settings.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183263](https://github.com/openclaw/openclaw/pull/183263). Thanks to [@nxmxbbd](https://github.com/nxmxbbd), [@steipete](https://github.com/steipete).

  </details>

- Fixes GitHub collaborator verification and token refresh for X accounts whose configuration names contain capitals. Affected existing accounts may need to reauthorize X once.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183461](https://github.com/openclaw/openclaw/pull/183461). Thanks to [@nxmxbbd](https://github.com/nxmxbbd), [@steipete](https://github.com/steipete).

  </details>

- Malformed Microsoft Teams message HTML no longer causes the parsing stalls that could delay other Gateway sessions.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183438](https://github.com/openclaw/openclaw/pull/183438). Thanks to [@LeizhenZhang](https://github.com/LeizhenZhang), [@steipete](https://github.com/steipete).

  </details>

## Memory

- Fixes Memory Core's nightly dreaming failing to write diary entries after delayed startup.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179031](https://github.com/openclaw/openclaw/pull/179031). Thanks to [@steipete](https://github.com/steipete), [@rebarshop-24](https://github.com/rebarshop-24).

  </details>

- Memory Wiki now preserves your handwritten Notes when an imported OKF concept disappears from a later import.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179657](https://github.com/openclaw/openclaw/pull/179657). Thanks to [@steipete](https://github.com/steipete), [@YangManBOBO](https://github.com/YangManBOBO).

  </details>

- Fixes overlapping session resets overwriting each other's saved memory files.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181081](https://github.com/openclaw/openclaw/pull/181081). Thanks to [@jason-allen-oneal](https://github.com/jason-allen-oneal), [@steipete](https://github.com/steipete).

  </details>

## Native Apps

- Fixes macOS Gateway service reinstall and uninstall failing after the saved LaunchAgent file has been deleted.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180390](https://github.com/openclaw/openclaw/pull/180390). Thanks to [@steipete](https://github.com/steipete), [@avnishkirnalli](https://github.com/avnishkirnalli).

  </details>

- Fixes the Tauri desktop app crashing while opening a local dashboard on macOS.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183841](https://github.com/openclaw/openclaw/pull/183841). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Talk calls using the Gateway relay on iOS and macOS can stay open through brief recoverable stalls. Audio may be dropped during the stall; iOS asks you to repeat it, while macOS has no matching notice.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180572](https://github.com/openclaw/openclaw/pull/180572). Thanks to [@kybrcore](https://github.com/kybrcore).

  </details>

- GPT-Live Talk sessions can deliver speech or transcripts when the provider responds before microphone input, instead of closing at startup.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182919](https://github.com/openclaw/openclaw/pull/182919). Thanks to [@anmol0b](https://github.com/anmol0b), [@StatsR4Losers](https://github.com/StatsR4Losers), [@ulfschnabel](https://github.com/ulfschnabel), [@siraustin](https://github.com/siraustin), [@steipete](https://github.com/steipete).

  </details>

- iOS Talk recovery guidance is localized in 21 non-English locales when microphone input recovers or realtime audio falls behind.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Commit c36086f](https://github.com/openclaw/openclaw/commit/c36086f8827fbdcbf5d0d86dfeb909b1c6ea19f6).

  </details>

- Oversized macOS camera clips and screen recordings now return an error instead of disconnecting the node. The recording is not delivered, so retry with a shorter duration or, for screen recordings, a lower frame rate.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182593](https://github.com/openclaw/openclaw/pull/182593). Thanks to [@anmol0b](https://github.com/anmol0b), [@steipete](https://github.com/steipete).

  </details>

- Fixes Android Chat failing after restart when your role allows an agent other than the Gateway's default.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182767](https://github.com/openclaw/openclaw/pull/182767). Thanks to [@xiaopan-xydt](https://github.com/xiaopan-xydt), [@steipete](https://github.com/steipete), [@dawidkulpa](https://github.com/dawidkulpa).

  </details>

## Models and Providers

- Fixes Gemini and Vertex requests waiting after a compatible proxy signals the end of a response. Gemini can also try another configured AI Studio key after an eligible initial quota error.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#117194](https://github.com/openclaw/openclaw/pull/117194). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Oversized model-provider responses now report their streaming error promptly instead of leaving the request waiting.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Landed commit](https://github.com/openclaw/openclaw/commit/31e6fe033ecdd65aefb6c7caf77992088efb48ca). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes cases of empty titles and background summaries caused by optional model thinking consuming the reply budget.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#169920](https://github.com/openclaw/openclaw/pull/169920). Thanks to [@jacobtomlinson](https://github.com/jacobtomlinson) and [@dwalthour](https://github.com/dwalthour).

  </details>

- Session titles can complete on affected custom Zhipu and Z.AI GLM endpoints that reject a request to turn thinking off. Title failures also produce a clearer warning.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#172580](https://github.com/openclaw/openclaw/pull/172580). Thanks to [@steipete](https://github.com/steipete) and [@TommyLei666](https://github.com/TommyLei666).

  </details>

- Claude CLI answers no longer wait for stopped tasks, work from an earlier input, or background agents and workflows started inside a subagent. Active top-level work still holds its reply until it finishes.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#170322](https://github.com/openclaw/openclaw/pull/170322) and [#182267](https://github.com/openclaw/openclaw/pull/182267). Thanks to [@cassthebandit](https://github.com/cassthebandit), [@obviyus](https://github.com/obviyus), [@steipete](https://github.com/steipete) and [@goslingmanagment](https://github.com/goslingmanagment).

  </details>

- Fixes GPT-Live Talk and OpenAI realtime voice connections bypassing the configured managed proxy on the affected Gateway-relay and Bun paths. A refused proxy connection does not fall back to a direct connection.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#175886](https://github.com/openclaw/openclaw/pull/175886) and [#176567](https://github.com/openclaw/openclaw/pull/176567). Thanks to [@MertBasar0](https://github.com/MertBasar0), [@jalehman](https://github.com/jalehman), [@steipete](https://github.com/steipete) and [@CheatosBu](https://github.com/CheatosBu).

  </details>

- Fixes ChatGPT subscription sharing being blocked by the default managed proxy's loopback settings.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183232](https://github.com/openclaw/openclaw/pull/183232). Thanks to [@steipete](https://github.com/steipete), [@indra622](https://github.com/indra622) and [@ermaxinc](https://github.com/ermaxinc).

  </details>

- Fixes Anthropic PDF analysis rejecting saved setup-token or OAuth credentials that already work for chat.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178420](https://github.com/openclaw/openclaw/pull/178420). Thanks to [@sunlit-deng](https://github.com/sunlit-deng), [@steipete](https://github.com/steipete) and [@khensthoth](https://github.com/khensthoth).

  </details>

- Configured Claude CLI models remain selectable with eligible saved Anthropic subscription credentials, and model switches keep the configured CLI runtime.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179203](https://github.com/openclaw/openclaw/pull/179203). Thanks to [@steipete](https://github.com/steipete) and [@josh-cornelius](https://github.com/josh-cornelius).

  </details>

- Agents can refresh shared OAuth credentials when a deleted agent left an empty or unrelated credential store behind.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179205](https://github.com/openclaw/openclaw/pull/179205). Thanks to [@steipete](https://github.com/steipete) and [@WG-Mojo](https://github.com/WG-Mojo).

  </details>

- Local session, transcript and MCP cleanup failures now report their own error instead of silently switching the turn to another model or provider.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179347](https://github.com/openclaw/openclaw/pull/179347), [#180042](https://github.com/openclaw/openclaw/pull/180042) and [#180075](https://github.com/openclaw/openclaw/pull/180075). Thanks to [@steipete](https://github.com/steipete), [@davidcittadini](https://github.com/davidcittadini), [@nikolay-bratanov](https://github.com/nikolay-bratanov), [@sunlit-deng](https://github.com/sunlit-deng), [@danielsiemers](https://github.com/danielsiemers) and [@wr-web](https://github.com/wr-web).

  </details>

- Rate-limited profiles now follow the provider's retry timing instead of accumulating long local lockouts. A rate limit without retry timing leaves the profile available for the next turn.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180280](https://github.com/openclaw/openclaw/pull/180280). Thanks to [@fuller-stack-dev](https://github.com/fuller-stack-dev).

  </details>

- Fixes OpenAI models refusing existing credentials because stale catalog data points to a custom endpoint you did not configure.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181356](https://github.com/openclaw/openclaw/pull/181356). Thanks to [@sasan1200](https://github.com/sasan1200).

  </details>

- Fixes temporary environment settings from a running skill making the model catalog unavailable.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182385](https://github.com/openclaw/openclaw/pull/182385). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes a delayed authentication refresh after startup leaving model lists, conversation lists and agent requests unavailable until a restart.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182615](https://github.com/openclaw/openclaw/pull/182615). Thanks to [@steipete](https://github.com/steipete), [@VictorSesma](https://github.com/VictorSesma) and [@hoangtohl](https://github.com/hoangtohl).

  </details>

- Fixes Codex losing its final answer after a delivery retry or a temporary provider error when the completed tool results can be verified. Those tools are not run again.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181779](https://github.com/openclaw/openclaw/pull/181779) and [#183077](https://github.com/openclaw/openclaw/pull/183077). Thanks to [@sukhdeepjohar](https://github.com/sukhdeepjohar), [@dthvt](https://github.com/dthvt), [@steipete](https://github.com/steipete), [@gloss-dandelion-cult](https://github.com/gloss-dandelion-cult) and [@Lidashi1025](https://github.com/Lidashi1025).

  </details>

- Native Codex turns no longer receive a false stall interruption while a host tool call or output handling is still in progress.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181839](https://github.com/openclaw/openclaw/pull/181839). Thanks to [@sunlit-deng](https://github.com/sunlit-deng) and [@robertmsale](https://github.com/robertmsale).

  </details>

- Fixes turns timing out immediately after a core upgrade when an older installed Codex plugin omits its start timestamp.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182995](https://github.com/openclaw/openclaw/pull/182995). Thanks to [@RomneyDa](https://github.com/RomneyDa), [@kip-claw](https://github.com/kip-claw), [@cjn119-ui](https://github.com/cjn119-ui), [@fray-ai](https://github.com/fray-ai) and [@sukhdeepjohar](https://github.com/sukhdeepjohar).

  </details>

- Fixes Kimi K3.1 Pro and Highspeed using the wrong thinking controls for their provider. Thinking remains enabled on Kimi Code; the direct Moonshot route also handles native video and reasoning history for these variants.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181923](https://github.com/openclaw/openclaw/pull/181923). Thanks to [@obviyus](https://github.com/obviyus).

  </details>

- Fixes automatically discovered GPT models on Bedrock Mantle using an incompatible API route.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182437](https://github.com/openclaw/openclaw/pull/182437). Thanks to [@steipete](https://github.com/steipete) and [@rayvader](https://github.com/rayvader).

  </details>

- Stopping the first Claude CLI chat turn can preserve its native conversation for the next turn when its transcript has been saved.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181966](https://github.com/openclaw/openclaw/pull/181966). Thanks to [@holgergruenhagen](https://github.com/holgergruenhagen).

  </details>

- Resumed Claude CLI and Gemini CLI sessions can receive recent conversation updates they missed while cron or Talk added activity to the same conversation.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183059](https://github.com/openclaw/openclaw/pull/183059). Thanks to [@steipete](https://github.com/steipete), [@scarabone](https://github.com/scarabone) and [@atomsmasher81](https://github.com/atomsmasher81).

  </details>

- Fixes a queued Codex chat staying stuck after a plugin reload when another chat still needs the old process.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182104](https://github.com/openclaw/openclaw/pull/182104). Thanks to [@jjjhenriksen](https://github.com/jjjhenriksen) and [@RomneyDa](https://github.com/RomneyDa).

  </details>

- Fixes Codex conversations resetting because their configured tool list changed when a completion arrived.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183286](https://github.com/openclaw/openclaw/pull/183286). Thanks to [@steipete](https://github.com/steipete), [@Marvinthebored](https://github.com/Marvinthebored) and [@RomneyDa](https://github.com/RomneyDa).

  </details>

- Codex now gives submitted follow-ups and child results a short chance to be acknowledged before a tool ends the turn, reducing uncertain delivery. Unconfirmed input is not replayed automatically.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#184062](https://github.com/openclaw/openclaw/pull/184062). Thanks to [@steipete](https://github.com/steipete) and [@aatreya](https://github.com/aatreya).

  </details>

- Long native conversations can use an eligible configured fallback model to summarize their history when the primary summary fails. Sessions locked to one model still refuse cross-model fallback.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#183282](https://github.com/openclaw/openclaw/pull/183282). Thanks to [@pstarkgit](https://github.com/pstarkgit) and [@steipete](https://github.com/steipete).

  </details>

- Claude CLI operators can again opt in to Agent and Workflow native tools for eligible managed turns, including per-agent selection. The default exposes no native tools, and restricted turns remain excluded.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  Set `plugins.entries.anthropic.config.managedNativeTools` to select the tools. [#183765](https://github.com/openclaw/openclaw/pull/183765). Thanks to [@VACInc](https://github.com/VACInc) and [@holgergruenhagen](https://github.com/holgergruenhagen).

  </details>

- Fixes Claude CLI turns waiting about 15 minutes before failing after their output limit is exceeded. The turn now stops promptly with the actual parsing or size error.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Landed commit](https://github.com/openclaw/openclaw/commit/5b9910026089e1e74ba2ae3deac6254d39b19e2f). Thanks to [@Terwox](https://github.com/Terwox).

  </details>

## Automations and Scheduling

- Fixes Agents API scheduled jobs stopping immediately after sending to their own delivery target when the send was not explicitly final.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#177518](https://github.com/openclaw/openclaw/pull/177518). Thanks to [@masatohoshino](https://github.com/masatohoshino).
  </details>

- Cron scripts can use the current plugin hooks on their next run after a plugin is replaced, without restarting the Gateway.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#177825](https://github.com/openclaw/openclaw/pull/177825). Thanks to [@jlapenna](https://github.com/jlapenna), [@obviyus](https://github.com/obviyus), [@superandylin](https://github.com/superandylin).
  </details>

- Fixes scheduled cleanup removing a cron session while it still has active child conversations. This does not restore parents deleted before the fix.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179057](https://github.com/openclaw/openclaw/pull/179057). Thanks to [@Oldrich333](https://github.com/Oldrich333), [@steipete](https://github.com/steipete).
  </details>

- Background command completions now wait for the heartbeat that started them, preventing the completion from interrupting the heartbeat and repeatedly waking the same cron work.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179060](https://github.com/openclaw/openclaw/pull/179060). Thanks to [@AINCHORS](https://github.com/AINCHORS), [@steipete](https://github.com/steipete).
  </details>

- An accepted heartbeat response now ends its tool turn instead of continuing into duplicate calls or a timeout.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [Commit 35bdf391](https://github.com/openclaw/openclaw/commit/35bdf391ecdae5517276d0ba1772ac8e8c99dd62). Thanks to [@teddashh](https://github.com/teddashh).
  </details>

- Conversation history can load after switching providers when a retained Claude CLI binding and a forwarded cron message previously caused it to fail.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181311](https://github.com/openclaw/openclaw/pull/181311), with the original repair proposed in [#166980](https://github.com/openclaw/openclaw/pull/166980). Thanks to [@jaxonparrott](https://github.com/jaxonparrott), [@steipete](https://github.com/steipete).
  </details>

## Browser and Computer Use

- Fixes successful computer actions on older paired Macs being reported as failed, which could cause the agent to repeat an action.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#137755](https://github.com/openclaw/openclaw/pull/137755). Thanks to [@steipete](https://github.com/steipete).
  </details>

- Fixes browser shutdown getting stuck after a navigation or interaction times out during a DNS check.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#154246](https://github.com/openclaw/openclaw/pull/154246). Thanks to [@Ewo8om3](https://github.com/Ewo8om3), [@LLagoon3](https://github.com/LLagoon3), [@obviyus](https://github.com/obviyus).
  </details>

- First browser use with trusted-proxy authentication no longer writes a Gateway password or restarts the Gateway. Out-of-process clients of the optional standalone loopback browser API using trusted-proxy auth need an explicitly configured `gateway.auth.password`.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181620](https://github.com/openclaw/openclaw/pull/181620). Thanks to [@fuller-stack-dev](https://github.com/fuller-stack-dev).
  </details>

## Plugins and Integrations

- Fixes older plugins failing to process incoming messages after an OpenClaw upgrade.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#118011](https://github.com/openclaw/openclaw/pull/118011). Thanks to [@steipete](https://github.com/steipete).
  </details>

- Fixes scheduled plugin work stopping after startup or reload. Changes to external credential files also continue to refresh Gateway authentication.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182207](https://github.com/openclaw/openclaw/pull/182207). Thanks to [@steipete](https://github.com/steipete).
  </details>

- A disconnected FaceTime call releases the bridge so another authorized call can come through without restarting the Gateway.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#154230](https://github.com/openclaw/openclaw/pull/154230). Thanks to [@Solvely-Colin](https://github.com/Solvely-Colin), [@beeven](https://github.com/beeven), [@omarshahine](https://github.com/omarshahine).
  </details>

- Long meeting talk-back replies can play in order when a provider sends audio faster than playback consumes it.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178254](https://github.com/openclaw/openclaw/pull/178254). Thanks to [@steipete](https://github.com/steipete), [@sukhdeepjohar](https://github.com/sukhdeepjohar).
  </details>

- Voice-call consultations and classic responses now use the call agent model when `responseModel` is unset. An explicit override still takes precedence.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181451](https://github.com/openclaw/openclaw/pull/181451). Thanks to [@BeyonceBot](https://github.com/BeyonceBot), [@potoior](https://github.com/potoior).
  </details>

- Fixes temporary Codex check processes being left running after their checks finish or fail.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#167390](https://github.com/openclaw/openclaw/pull/167390). Thanks to [@maxdjohnson](https://github.com/maxdjohnson), [@steipete](https://github.com/steipete).
  </details>

- Fixes repeated tool-list checks loading unchanged npm-installed plugins again and adding to memory use in multi-agent setups.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#178596](https://github.com/openclaw/openclaw/pull/178596). Thanks to [@bguliano](https://github.com/bguliano), [@steipete](https://github.com/steipete).
  </details>

- Fixes undeliverable Codex child results repeatedly returning after a restart. Doctor can also repair existing duplicate or obsolete assignments when it can verify them.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#173018](https://github.com/openclaw/openclaw/pull/173018). Thanks to [@gisk0](https://github.com/gisk0), [@jekmanis](https://github.com/jekmanis), [@steipete](https://github.com/steipete).
  </details>

- Fixes already completed nested Codex work producing the same warning after each Gateway restart.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179050](https://github.com/openclaw/openclaw/pull/179050). Thanks to [@mmartoccia](https://github.com/mmartoccia), [@steipete](https://github.com/steipete).
  </details>

- Codex parent conversations can resume after all native children finish, including their follow-ups, even while their results await delivery.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#175246](https://github.com/openclaw/openclaw/pull/175246) and [#177577](https://github.com/openclaw/openclaw/pull/177577). Thanks to [@Stronggenetics](https://github.com/Stronggenetics), [@linancn](https://github.com/linancn), [@quqi1599](https://github.com/quqi1599), [@steipete](https://github.com/steipete).
  </details>

- A Codex parent conversation can continue after an interrupted native child stops, without discarding the resumable assignment.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179099](https://github.com/openclaw/openclaw/pull/179099). Thanks to [@obviyus](https://github.com/obviyus), [@wtfichigo](https://github.com/wtfichigo).
  </details>

- Fixes Codex child agents receiving an authorization error on model requests after startup.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#176311](https://github.com/openclaw/openclaw/pull/176311). Thanks to [@enki](https://github.com/enki).
  </details>

- Doctor can load affected native plugins when the plugin files and OpenClaw state are on different filesystems.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179445](https://github.com/openclaw/openclaw/pull/179445), following the earlier proposal in [#177968](https://github.com/openclaw/openclaw/pull/177968). Thanks to [@ceckert](https://github.com/ceckert), [@steipete](https://github.com/steipete).
  </details>

- Fixes native plugins failing to load on Windows when endpoint security changes file metadata without changing the verified contents.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179949](https://github.com/openclaw/openclaw/pull/179949). Thanks to [@coaiMax](https://github.com/coaiMax), [@paulcam206](https://github.com/paulcam206).
  </details>

- Gateway startup repairs stale managed plugin links after an external OpenClaw reinstall, allowing affected plugins to load again.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181140](https://github.com/openclaw/openclaw/pull/181140). Thanks to [@rybing7](https://github.com/rybing7), [@steipete](https://github.com/steipete).
  </details>

- Agents sharing a valid MCP OAuth login can make concurrent tool requests instead of waiting for another agent's credential lock.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#179997](https://github.com/openclaw/openclaw/pull/179997). Thanks to [@danielsiemers](https://github.com/danielsiemers), [@maliv2](https://github.com/maliv2), [@steipete](https://github.com/steipete).
  </details>

- A failed remote MCP session deletion no longer blocks the next CLI-backend turn when local cleanup succeeds.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#182189](https://github.com/openclaw/openclaw/pull/182189). Thanks to [@aniketkrs](https://github.com/aniketkrs), [@goslingmanagment](https://github.com/goslingmanagment), [@steipete](https://github.com/steipete).
  </details>

- Tailscale Serve and Funnel access can recover automatically after the managed route is lost, including after a Tailscale restart.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#180081](https://github.com/openclaw/openclaw/pull/180081), adapting [#137454](https://github.com/openclaw/openclaw/pull/137454). Thanks to [@Nachx639](https://github.com/Nachx639), [@enki](https://github.com/enki), [@saariuslystoned](https://github.com/saariuslystoned), [@steipete](https://github.com/steipete).
  </details>

- Fixes 1Password-backed credentials being rejected on group-writable OpenClaw installations. World-writable resolver paths remain refused.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181127](https://github.com/openclaw/openclaw/pull/181127). Thanks to [@jalehman](https://github.com/jalehman).
  </details>

- Gateway shutdown can finish after a timed-out plugin retirement once the plugin work and cleanup have settled.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [#181270](https://github.com/openclaw/openclaw/pull/181270). Thanks to [@0xtc23](https://github.com/0xtc23), [@steipete](https://github.com/steipete).
  </details>

## Security and Privacy

- Adds remediations for the eMudhra certificate compromise in the secret egress proxy and its exported trust bundle. Restart the Gateway to apply the change. Connections relying only on the excluded root will fail; apps with independent trust stores and bypass tunnels need their own updates.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #179249](https://github.com/openclaw/openclaw/pull/179249). Thanks to [@joshavant](https://github.com/joshavant).

  </details>

- Fixes sandboxed child agents being able to launch a CLI model outside their sandbox. Use an API-backed child model, or explicitly change the sandbox policy if you need a host CLI.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #178742](https://github.com/openclaw/openclaw/pull/178742). Thanks to [@eleqtrizit](https://github.com/eleqtrizit).

  </details>

- Fixes agents bypassing browser-tool restrictions by invoking the paired node's browser proxy through the generic Nodes tool.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #179880](https://github.com/openclaw/openclaw/pull/179880). Thanks to [@eleqtrizit](https://github.com/eleqtrizit).

  </details>

- POSIX exec allowlists no longer automatically trust `test -v` or `[ -v` predicates. Legitimate uses may need an allowlist entry or approval, and an approved external `test` may behave differently from the Bash builtin.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #180880](https://github.com/openclaw/openclaw/pull/180880). Thanks to [@eleqtrizit](https://github.com/eleqtrizit).

  </details>

- Fixes Fish Audio and Gradium errors exposing an active API key when the provider echoes it back.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #178877](https://github.com/openclaw/openclaw/pull/178877). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Silent maintenance turns now suppress attachments and other rich content as well as text, while still delivering errors, voice messages and notices marked for delivery.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #129244](https://github.com/openclaw/openclaw/pull/129244). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes some cases where a model's thinking appeared in streamed answers despite reasoning visibility being turned off.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #182454](https://github.com/openclaw/openclaw/pull/182454). Thanks to [@steipete](https://github.com/steipete), and to [@zax0rz](https://github.com/zax0rz) for the report.

  </details>

## Other Bug Fixes

- Fixes replies failing in an already configured workspace because packaged templates are missing. Your existing files are left unchanged.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #120943](https://github.com/openclaw/openclaw/pull/120943). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes accepted messages failing before the agent starts while their conversation history is being rebuilt.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #164843](https://github.com/openclaw/openclaw/pull/164843). Thanks to [@PollyBot13](https://github.com/PollyBot13) and [@steipete](https://github.com/steipete).

  </details>

- Fixes recovered turns disappearing from conversation context after oversized tool results are shortened.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #182666](https://github.com/openclaw/openclaw/pull/182666). Thanks to [@MSNexploder](https://github.com/MSNexploder) and [@foiegrastyle](https://github.com/foiegrastyle).

  </details>

- Fixes parent agents being stopped as idle while they are still waiting for active delegated work.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #172959](https://github.com/openclaw/openclaw/pull/172959). Thanks to [@johan-eilertsen](https://github.com/johan-eilertsen) and [@steipete](https://github.com/steipete).

  </details>

- Delayed `sessions_send` replies can recover the full available answer instead of silently delivering only a preview. If the full answer is unavailable, the preview includes guidance for getting the rest.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #178271](https://github.com/openclaw/openclaw/pull/178271). Thanks to [@rjdotdev](https://github.com/rjdotdev), [@steipete](https://github.com/steipete) and [@seriouslysean](https://github.com/seriouslysean).

  </details>

- Fixes tool calls losing their results when they are batched with a handoff to wait for child agents.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #184021](https://github.com/openclaw/openclaw/pull/184021). Thanks to [@steipete](https://github.com/steipete), and to [@jailbirt](https://github.com/jailbirt) for the report.

  </details>

- Fixes long streamed HTML and JSX answers stalling OpenClaw and delaying unrelated conversations.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #175472](https://github.com/openclaw/openclaw/pull/175472). Thanks to [@JasonBuildAI](https://github.com/JasonBuildAI).

  </details>

- Fixes malformed replies that look like tool calls stalling the Gateway.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #183252](https://github.com/openclaw/openclaw/pull/183252). Thanks to [@LeizhenZhang](https://github.com/LeizhenZhang) and [@steipete](https://github.com/steipete).

  </details>

- A new human message can continue an eligible interrupted child session after a Gateway restart. The interrupted task is not automatically replayed.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #178888](https://github.com/openclaw/openclaw/pull/178888). Thanks to [@jalehman](https://github.com/jalehman).

  </details>

- Conversations blocked by a stale restart-recovery source can accept new messages without a reset, while retaining their history and showing an interruption notice.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #180853](https://github.com/openclaw/openclaw/pull/180853). Thanks to [@steipete](https://github.com/steipete), and to [@Cloud-Ocean](https://github.com/Cloud-Ocean) for the report.

  </details>

- A stopped conversation blocked by an orphaned restart-recovery record can accept another message without losing its transcript.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #181992](https://github.com/openclaw/openclaw/pull/181992). Thanks to [@steipete](https://github.com/steipete), and to [@najef1979-code](https://github.com/najef1979-code) for the report.

  </details>

- Fixes a child agent accepted just before a restart remaining stuck as running even though it never started.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #181871](https://github.com/openclaw/openclaw/pull/181871). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Fixes private child-agent results repeatedly retrying after restart recovery had already processed them.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #184041](https://github.com/openclaw/openclaw/pull/184041). Thanks to [@steipete](https://github.com/steipete), and to [@aounakram](https://github.com/aounakram) for the related report.

  </details>

- After a restart, parent agents can receive saved child results even if that child conversation has since been reused.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #184069](https://github.com/openclaw/openclaw/pull/184069). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Session deletion, transcript archiving and retained cron history work through symlinked state directories with SQLite and PostgreSQL.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #181554](https://github.com/openclaw/openclaw/pull/181554). Thanks to [@steipete](https://github.com/steipete).

  </details>

- Agent commands can run under an unattended Windows S4U Gateway when a Store PowerShell alias is inaccessible. If native PowerShell 7 is unavailable, OpenClaw falls back to Windows PowerShell 5.1. Install PowerShell 7 using its MSI or ZIP if your commands need PowerShell 7 syntax.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #182898](https://github.com/openclaw/openclaw/pull/182898). Thanks to [@RomneyDa](https://github.com/RomneyDa), and to [@tre1d](https://github.com/tre1d) for the report.

  </details>

- Fixes workspace synchronization failing to start on older Windows shared-host nodes.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #183064](https://github.com/openclaw/openclaw/pull/183064). Thanks to [@shakkernerd](https://github.com/shakkernerd).

  </details>

- Fixes session objects staying in memory after agent and child-agent attempts finish.

  <details class="release-source-toggle release-source-inline">
  <summary>More details</summary>

  [PR #183884](https://github.com/openclaw/openclaw/pull/183884). Thanks to [@steipete](https://github.com/steipete).

  </details>