Appearance
OpenClaw release · Latest

2026.10.5

1,623 changes and 0 fixes shipped in OpenClaw 2026.10.5, split across 2 pages. Every entry links back to its upstream PR or issue.

1,623changes
0fixes
2/2page
NewerNone yet

Showing 1,501–1,623 of 1,623

Changes1,501–1,623 of 1,623

  1. 1501Windows SQLite recovery no longer rejects its own protected temporary snapshot directory#169397 Thanks @steipete.
  2. 1502A separately installed helper can clear a narrowly eligible unfinished publication after verified filesystem device drift while preserving package and evidence#169410 Docs · Docs · Thanks @patrickschiller, @RomneyDa.
  3. 1503New recovery copies preserve legacy Canvas documents and Memory Core files before migrations change them#169436 Thanks @RomneyDa.
  4. 1504Git updates clean owned temporary worktrees even when progress reporting fails and retain the original failure for diagnosis and recovery#169454 Docs · Thanks @hannesrudolph.
  5. 1505Equivalent Windows task account names no longer prevent the Gateway restarting after an update#169481 Docs · Thanks @steipete.
  6. 1506Update and Doctor checks accept explicitly empty agent rosters and reject unsafe Canvas folder links before reading them#169516 Thanks @RomneyDa.
  7. 1507Npm-global updates avoid scanning unrelated global tools while retaining dependencies OpenClaw actually needs#169551 Thanks @RomneyDa, @goutamadwant, @holgergruenhagen.
  8. 1508Doctor can continue an update after a later process-inspection failure once its owning updater was already verified#169563 Thanks @RomneyDa.
  9. 1509Updates can restart a revalidated preserved Gateway service after refresh safely refuses to rewrite its definition#169658 Docs · Thanks @steipete.
  10. 1510Update-time Doctor can verify its updater without inspecting higher supervisors and retains command identity when binding fails#169665 Docs · Docs · Thanks @steipete.
  11. 1511Doctor imports deferred ACP metadata from verified archived legacy sessions once its plugin becomes available#169759 Thanks @RomneyDa.
  12. 1512Doctor can attempt Gateway restoration after transient resource-close errors settle successfully on retry#169783 Thanks @RomneyDa.
  13. 1513Mac updates avoid self-lock timeouts when temporary directories have equivalent path spellings#169860 Thanks @steipete.
  14. 1514Older Node updaters retain valid ownership across the heartbeat clock transition instead of unnecessarily rolling back#169915 Thanks @vincentkoc.
  15. 1515New or repaired pnpm Gateway service commands survive package replacement, and nested pnpm installs are recognized for updates#170003 Docs · Thanks @steipete, @xilopaint, @k-sekula.
  16. 1516Background database checkpoints pause during retained offline maintenance to keep Doctor and update recovery captures stable#170022 Docs · Thanks @steipete.
  17. 1517Configured agents can start despite bogus legacy sentinel registrations, and standalone Doctor can clean invalid registrations#170043 Docs · Thanks @steipete, @ourcoms2018.
  18. 1518Update repair can reconcile an interrupted installation after filesystem device numbers change and unblock later updates#170046 Docs · Thanks @steipete, @patrickschiller, @SergeiAug.
  19. 1519Doctor rejects unsupported legacy runtime files before changing the database or stopping the Gateway, preserving the intermediate-upgrade path#170051 Docs · Thanks @steipete, @bautrey.
  20. 1520Updates requested through chat can finish Doctor cleanup without a false maintenance-permission failure#170070 Thanks @hannesrudolph, @ezimerman, @steipete, @yoyo837, @aia007731-lab, @justinforsound.
  21. 1521Updates avoid reopening migrated data during configuration saves and can report a recorded schema migration as advisory; same-version wrong-build concerns remain unresolved#170130 Thanks @steipete, @angeliti999.
  22. 1522Native pnpm 12 updates keep the openclaw command pointing at the installed package after temporary files are removed#170131 Docs · Thanks @steipete, @goutamadwant, @k-sekula.
  23. 1523Doctor can find abandoned npm updater runtimes that leave later updates blocked by an extra recovery-database link#170170 Thanks @steipete, @sunnyshu0925, @warhangel.
  24. 1524Managed updates use per-user temporary storage and can recover eligible receipts that point into another user's directory#170174 Docs · Thanks @steipete, @holgergruenhagen.
  25. 1525Older updaters stop rejecting a validated candidate solely because Doctor changed version or wizard bookkeeping#170195 Thanks @steipete, @maestrokling, @frxiaobei.
  26. 1526Failed-update reports keep Doctor recovery instructions when a healthy Gateway does not prove Doctor writers have safely finished#170207 Thanks @steipete.
  27. 1527Update repair loads the target installation's settings before choosing a model instead of stopping with a configuration-not-prepared error#170276 Thanks @steipete.
  28. 1528Gateways with deferred database preparation can finish startup instead of leaving worker recovery and client readiness waiting on each other#170348 Docs · Thanks @steipete.
  29. 1529Update snapshot capture stops falsely treating an unchanged agent database as changed by its own read#170351 Docs · Thanks @DonnieFi, @RomneyDa.
  30. 1530Large configurations can reach the updater intact instead of causing candidate-read failures during Gateway service refresh#170373 Docs · Thanks @RomneyDa, @DonnieFi, @steipete.
  31. 1531Slow update snapshots stop consuming the next command's inspection time, and genuinely deferred checks get follow-up guidance#170374 Thanks @RomneyDa, @DonnieFi, @steipete.
  32. 1532Final update summaries and saved history stop calling completed plugin upgrades unfinished and retain actionable warnings for pending ones#170413 Docs · Thanks @RomneyDa, @DonnieFi.
  33. 1533Stalled transcript indexing gets a five-second grace then cancellation so it does not indefinitely block Gateway shutdown#170493 Docs · Thanks @steipete, @Oldrich333, @O96a.
  34. 1534Update and Doctor recovery can continue when optional dreaming schedule checks or settled temporary-snapshot cleanup fail#170754 Thanks @RomneyDa, @aniruddhaadak80, @anhnt3.
  35. 1535Standalone Doctor can repair matching account state when an app-owned Gateway is verified offline#170768 Docs · Thanks @RomneyDa, @shanselman.
  36. 1536Expected exclusive Doctor maintenance no longer appears as a database checkpoint failure in logs or health#170783 Thanks @steipete.
  37. 1537Update state inspection continues when an advisory progress message temporarily cannot be written#170955 Thanks @steipete.
  38. 1538Early checks for 2026Early checks for 2026.9.2 upgrades keep database changes private so a refused update can preserve compatibility with restored code. #171015 Docs · Thanks @steipete, @bamorem.
  39. 1539Doctor recognizes equivalent imported attachments instead of falsely rejecting healthy legacy session history#171388 Docs · Thanks @he-yufeng, @steipete, @brookpw, @junnie-stack.
  40. 1540Terminal update progress waits through temporary Doctor maintenance contention and resumes when it clears#171454 Docs · Thanks @RomneyDa, @DonnieFi.
  41. 1541Update failures during snapshot preparation identify the failed snapshot step and give matching retry guidance#171457 Thanks @RomneyDa, @DonnieFi.
  42. 1542Linux update and Doctor cleanup can reclaim abandoned updater folders despite inaccessible working directories of narrowly identified user-session processes#171488 Docs · Thanks @RomneyDa, @DonnieFi.
  43. 1543Gateway worker setup avoids a silent successful exit when Node diagnostic flag checks meet an explicit heap limit#171490 Thanks @RomneyDa.
  44. 1544A busy updater releases its database write lock while waiting for permission to save status, giving scheduled jobs and cleanup a chance to proceed#171493 Docs · Thanks @RomneyDa, @DonnieFi.
  45. 1545Doctor and updates allow terminated child processes longer to disappear before reporting a cleanup failure#171497 Thanks @RomneyDa, @steipete.
  46. 1546Updates that change core and plugins still remind users who choose --no-restart to run the appropriate Gateway restart command#171687 Thanks @steipete.
  47. 1547Managed updates wait through brief maintenance overlap and preserve recovery permission so an otherwise completed update is less likely to leave the Gateway stopped#171699 Thanks @steipete, @fdovarela.
  48. 1548State reads can resume after a database-resource cleanup failure, avoiding a Gateway restart solely to restore state-dependent work#171709 Thanks @RomneyDa, @residentb2b, @homeworld520, @sunny251008-debug.
  49. 1549Doctor avoids silent empty reports when a child closes its input, while completing admitted repairs before exiting if Doctor's own output closes#171780 Thanks @steipete, @dtump, @joshpetras, @cbhawthorne84.
  50. 1550Updates of standard pnpm installations find the installation's own package manager and bin folder despite the Mac Gateway service's restricted PATH#171936 Thanks @steipete, @AntaresGG, @MoerAI.
  51. 1551The setup assistant diagnoses problems without applying repairs or migrations to local configuration and state#171960 Thanks @vincentkoc.
  52. 1552Later updates can settle an unfinished completion record when the already-installed package verifies successfully#171993 Thanks @steipete, @teetee2tone.
  53. 1553Updates avoid failing after a short Doctor command has already completed successfully#172132 Thanks @steipete.
  54. 1554If the new version's Doctor fails before database writes, updates can restore the previous package and databases without mistaking preliminary reads for changes#172151 Thanks @RomneyDa.
  55. 1555Updates can inspect busy agent databases without refusing solely because normal writes reuse old log space#172196 Thanks @RomneyDa.
  56. 1556A verified update stays installed when Doctor cannot inspect its launching process, with a warning to run openclaw update repair#172247 Thanks @steipete, @homeworld520.
  57. 1557Read-only-root Kubernetes deployments need XDG_CACHE_HOME=/home/node/Read-only-root Kubernetes deployments need XDG_CACHE_HOME=/home/node/.openclaw/.cache or an equivalent writable cache alongside the image update. #172377 Docs · Thanks @saftall, @steipete.
  58. 1558Non-interactive setup preserves its actual result and credential-activation instructions when temporary credential files remain locked#172379 Thanks @skyzhao1223, @steipete, @giannis88.
  59. 1559A verified, ready Gateway update can finish with named channel warnings instead of reporting failure because a messaging channel needs attention#172494 Thanks @steipete, @sbc2016.
  60. 1560A timed-out optional shell-completion refresh can warn without failing an otherwise successful update after cleanup is confirmed#172502 Thanks @steipete.
  61. 1561Mac updates can proceed from an external login shell when native checks prove it is outside the Gateway service despite unreadable parent ancestry#172640 Thanks @steipete, @giulianoaccorsi.
  62. 1562Linux upgrades can regenerate eligible owned legacy service files with private permissions without requiring manual chmod repair#172790 Thanks @obviyus, @wei887-os.
  63. 1563Doctor avoids repeatedly rescanning migration manifests when stale import records refer to archived transcripts, reducing this cause of stalled repair and update checks#172890 Thanks @steipete, @DongwonGim, @skyzhao1223.
  64. 1564Updates and Gateway status launched through a remote node avoid mistaking the node service for the Gateway#173304 Thanks @steipete, @Leon-SK668, @davidcittadini.
  65. 1565Verified updates can continue with a repair warning when follow-up plugin inspection cannot finish, instead of rolling back solely for incomplete checks#173341 Docs · Thanks @steipete, @yoyo837.
  66. 1566Updates can move past an unhealthy Gateway in the same installation with a warning, leaving time to start and fully verify its replacement#173358 Docs · Docs · Thanks @steipete.
  67. 1567Gateway startup can follow a replacement model preparation instead of failing when an older preparation is cancelled#173366 Thanks @steipete, @Jackten.
  68. 1568--no-restart skips the global package updater's restart step, while a running Gateway's package watcher can still restart it after files change#173409 Docs · Thanks @steipete, @mwbroxson.
  69. 1569Updates wait briefly for a newly started Gateway to publish ownership before reporting restart preparation failure#173588 Docs · Thanks @obviyus.
  70. 1570Package updates verify the running build as well as its versionPackage updates verify the running build as well as its version; --no-restart still permits a package-watcher restart. #174649 Docs · Thanks @RomneyDa.
  71. 1571Keep scheduled workspace cleanup and worker-bundle maintenance running on paired nodes#168780 Docs · Thanks @steipete.
  72. 1572Supporting session integration rechecks access during compaction, membership reads, and downloads and explains unreadable device identity storage. 2770dae
  73. 1573Suggestions recheck current sharing access and session identity before returning results. 6a42f13
  74. 1574The first profile read after GitHub sign-in can complete while initial identity verification finishes. 90ad159
  75. 1575Gateway logs identify later rejected proxy sources while keeping repeated warnings bounded#134404 Thanks @lzhan011, @abacha, @obviyus.
  76. 1576PluralKit lookup failure diagnostics mask reflected credentials while retaining useful error details#141317 Thanks @hugenshen, @obviyus.
  77. 1577Plugin hooks must obtain fresh approval before changing trusted inline-approved tool arguments#142700 Docs · Thanks @giodl73-repo, @giodl73.
  78. 1578Switching approval-policy targets asks before discarding unsaved edits, and Cancel keeps the draft#149181 Docs · Thanks @tommyjoseph, @steipete, @obviyus.
  79. 1579Truncated or errored replies keep recognized unfinished reasoning hidden and explain empty output-token-limit results#156939 Docs · Thanks @quinszouls, @steipete, @ingenuity2k.
  80. 1580Configured plugin tool guards run in standalone agent exec and can block commands before execution#159333 Docs · Thanks @joseairosa, @obviyus.
  81. 1581Built-in credential masking covers secrets across long tool output while avoiding several redaction stalls and crashes#161480 Thanks @eleqtrizit.
  82. 1582Remote-node commands no longer fail an approval identity check when the prepared plan omitted session metadata#161980 Thanks @Program-123, @steipete, @gaojian125, @enderwillsaveyou, @rozenpl, @daddydubzzz.
  83. 1583Exec-approval guidance now explains that approved command values replace later command-field edits while changed environment overrides remain rejected#164216 Docs · Thanks @ericcurtin, @cristianoc, @obviyus.
  84. 1584Agents can ask explicitly approved peers for help and receive the reply without gaining access to their conversation histories#164444 Docs · Thanks @steipete, @prasad-yashdeep, @cipp-ashe.
  85. 1585Anchored conversation history rejects transcripts whose recorded owner does not match the requested conversation#164512 Thanks @steipete.
  86. 1586Delayed chat startup stays bound to the current caller and conversation while initial session lookups run through workers#164682 Thanks @steipete, @galiniliev.
  87. 1587Oversized policy-watch intervals no longer trigger near-continuous evaluations and overflow warnings#164850 Docs · Thanks @KrasimirKralev, @obviyus.
  88. 1588Scheduled commands retain valid approval through process startup and account for each approved use once, refusing uncertain or stale launches#164864 Docs · Docs · Thanks @steipete.
  89. 1589Covered scheduled messages and retries recheck permission at delivery handoffCovered scheduled messages and retries recheck permission at delivery handoff; revoked work cannot accept protected read results or commit an internal reply. #164906 Docs · Docs · Thanks @steipete.
  90. 1590A2A peers with missing environment-backed credentials can no longer authenticate or send reference text as a token#165021 Thanks @eleqtrizit.
  91. 1591Code Mode cells cannot replace real host tool replies with forged failure results#165071 Docs · Docs · Thanks @steipete.
  92. 1592Incognito reset safely removes its managed checkout and branch, preserving unsaved-work snapshots or reporting why a checkout was kept#165185 Docs · Docs · Thanks @jayzhou2309, @steipete, @obviyus.
  93. 1593Localized configuration guidance clarifies outbound agent messaging permissions without implying access to other sessions#165213
  94. 1594Restricted senders can delegate only to hidden helpers in the same agent and workspace#165418 Thanks @steipete.
  95. 1595Answering or cancelling an agent question checks the current session before applying the response, refusing stale or replaced callers#165552 Thanks @steipete.
  96. 1596Queued chat messages retain current sharing checks while repeated permission reads move off the Gateway thread#165600 Thanks @steipete.
  97. 1597Replies with MCP app or connection buttons retain their original session-writer delivery checks#165760 Thanks @steipete.
  98. 1598Tlon group-DM author claims can no longer grant owner commands or elevated permissionsPreviously pending DM requests need the sender to resend after approval. #165801 Docs · Thanks @eleqtrizit.
  99. 1599HTTPS through the secret egress proxy works with strict TLS clients, including modern Python on macOS; restart the Gateway and start new commands after updating#165818 Docs · Thanks @steipete, @vortexopenclaw, @RyanSandoval, @A1fred-AI, @gisk0, @jfk-hue.
  100. 1600The source-map-js dependency is updated to its patched release to address pathological source-map processing#165902 Thanks @steipete.
  101. 1601Patched MCP dependencies preserve saved credentials when background refresh encounters a different login issuer and require explicit login to switch#166217 Thanks @Patrick-Erichsen, @vincentkoc, @RomneyDa.
  102. 1602Previously verified Tailscale GitHub users retain profile and session access through retryable GitHub outages#166254 Docs · Thanks @obviyus.
  103. 1603Approve and deny actions acknowledge saved decisions before slow notification delivery finishes#166396 Docs · Thanks @steipete.
  104. 1604Manual history trimming refuses requests whose access or selected session changed while older records were being restored#166506 Thanks @steipete.
  105. 1605Stops canceled or no-longer-authorized worker requests before further device preparation#166608 Thanks @romneyda.
  106. 1606Lets operators require a named worker profile and reject local fallback before inference#166611 Thanks @RomneyDa.
  107. 1607Applies required-worker policy to explicit destinations, moves and recovery while preserving accepted workspace results and Stop#166613 Thanks @RomneyDa.
  108. 1608Recovers watched child runs under their recorded agent after restart and rejects coordinate actions with stale screenshots even when target references are blank#166691 Thanks @steipete.
  109. 1609Node commands approved before the deadline can still run when forwarding crosses that deadline within the valid handoff window#166971 Docs · Thanks @steipete.
  110. 1610Native Codex follow-ups are checked against the sender's permitted conversation tree, and restricted instructions match available tools#167075 Docs · Thanks @vincentkoc.
  111. 1611Execution-policy edits and cleanup move database writes off the Gateway main thread while current permissions remain enforced#167115 Thanks @steipete.
  112. 1612Malformed text encoding in configuration files or piped patches is rejected before saved values can change#167118 Thanks @Alix-007, @obviyus.
  113. 1613LINE and Tlon mask recognizable credentials echoed in failed-request diagnostics#167234 Thanks @xialonglee, @obviyus.
  114. 1614Failed exec-policy commands requested with JSON return one structured error document and a nonzero exit#167279 Thanks @leon-sk668, @obviyus, @masatohoshino.
  115. 1615Device commands return structured JSON refusal reasons while preserving nonzero exits and human recovery guidance#167294 Docs · Docs · Thanks @Leon-SK668, @obviyus, @masatohoshino.
  116. 1616Authorized agent commands avoid spurious launch failures when existing shared-database features initialize again#167486 Thanks @steipete.
  117. 1617Secrets guidance identifies unsupported command consumers before asking users to enter a protected credential#167976 Docs · Docs · Thanks @romneyda, @markma84.
  118. 1618Reply permission checks refuse to authorize a prepared response while its database execution remains unfinished#168029 Thanks @steipete.
  119. 1619Unfinished hidden reasoning stays out of Chat Completions replies when a native tool call is followed by a token limit or content filter#168294 Thanks @steipete.
  120. 1620Network tool results keep their untrusted-source label through Tool Search and Code Mode and into later replies#169560 Docs · Thanks @RomneyDa, @farisoftfry.
  121. 1621Gateway exec blocks recognized variable-bearing SQLite file URLs from opening live OpenClaw state#170253 Docs · Thanks @eleqtrizit.
  122. 1622Doctor preserves saved OAuth profiles when an older auth file is corrupt or unreadable and warns where to inspect it#170256 Docs · Thanks @steipete, @nosmile99.
  123. 1623Graphical pairing keeps browser credentials out of launcher arguments by using private files; access to those files remains sensitive and cleanup is best effort#170289 Thanks @eleqtrizit.