OpenClaw release · Latest
2026.10.5
1,623 changes and 0 fixes shipped in OpenClaw 2026.10.5, split across 2 pages. Every entry links back to its upstream PR or issue.
1,623changes
0fixes
2/2page
NewerNone yet Older2026.10.4
Changes1,501–1,623 of 1,623
- 1501Windows SQLite recovery no longer rejects its own protected temporary snapshot directory#169397 Thanks @steipete.
- 1502A separately installed helper can clear a narrowly eligible unfinished publication after verified filesystem device drift while preserving package and evidence#169410 Docs · Docs · Thanks @patrickschiller, @RomneyDa.
- 1503New recovery copies preserve legacy Canvas documents and Memory Core files before migrations change them#169436 Thanks @RomneyDa.
- 1504Git updates clean owned temporary worktrees even when progress reporting fails and retain the original failure for diagnosis and recovery#169454 Docs · Thanks @hannesrudolph.
- 1505Equivalent Windows task account names no longer prevent the Gateway restarting after an update#169481 Docs · Thanks @steipete.
- 1506Update and Doctor checks accept explicitly empty agent rosters and reject unsafe Canvas folder links before reading them#169516 Thanks @RomneyDa.
- 1507Npm-global updates avoid scanning unrelated global tools while retaining dependencies OpenClaw actually needs#169551 Thanks @RomneyDa, @goutamadwant, @holgergruenhagen.
- 1508Doctor can continue an update after a later process-inspection failure once its owning updater was already verified#169563 Thanks @RomneyDa.
- 1509Updates can restart a revalidated preserved Gateway service after refresh safely refuses to rewrite its definition#169658 Docs · Thanks @steipete.
- 1510Update-time Doctor can verify its updater without inspecting higher supervisors and retains command identity when binding fails#169665 Docs · Docs · Thanks @steipete.
- 1511Doctor imports deferred ACP metadata from verified archived legacy sessions once its plugin becomes available#169759 Thanks @RomneyDa.
- 1512Doctor can attempt Gateway restoration after transient resource-close errors settle successfully on retry#169783 Thanks @RomneyDa.
- 1513Mac updates avoid self-lock timeouts when temporary directories have equivalent path spellings#169860 Thanks @steipete.
- 1514Older Node updaters retain valid ownership across the heartbeat clock transition instead of unnecessarily rolling back#169915 Thanks @vincentkoc.
- 1515New or repaired pnpm Gateway service commands survive package replacement, and nested pnpm installs are recognized for updates#170003 Docs · Thanks @steipete, @xilopaint, @k-sekula.
- 1516Background database checkpoints pause during retained offline maintenance to keep Doctor and update recovery captures stable#170022 Docs · Thanks @steipete.
- 1517Configured agents can start despite bogus legacy sentinel registrations, and standalone Doctor can clean invalid registrations#170043 Docs · Thanks @steipete, @ourcoms2018.
- 1518Update repair can reconcile an interrupted installation after filesystem device numbers change and unblock later updates#170046 Docs · Thanks @steipete, @patrickschiller, @SergeiAug.
- 1519Doctor rejects unsupported legacy runtime files before changing the database or stopping the Gateway, preserving the intermediate-upgrade path#170051 Docs · Thanks @steipete, @bautrey.
- 1520Updates requested through chat can finish Doctor cleanup without a false maintenance-permission failure#170070 Thanks @hannesrudolph, @ezimerman, @steipete, @yoyo837, @aia007731-lab, @justinforsound.
- 1521Updates avoid reopening migrated data during configuration saves and can report a recorded schema migration as advisory; same-version wrong-build concerns remain unresolved#170130 Thanks @steipete, @angeliti999.
- 1522Native pnpm 12 updates keep the openclaw command pointing at the installed package after temporary files are removed#170131 Docs · Thanks @steipete, @goutamadwant, @k-sekula.
- 1523Doctor can find abandoned npm updater runtimes that leave later updates blocked by an extra recovery-database link#170170 Thanks @steipete, @sunnyshu0925, @warhangel.
- 1524Managed updates use per-user temporary storage and can recover eligible receipts that point into another user's directory#170174 Docs · Thanks @steipete, @holgergruenhagen.
- 1525Older updaters stop rejecting a validated candidate solely because Doctor changed version or wizard bookkeeping#170195 Thanks @steipete, @maestrokling, @frxiaobei.
- 1526Failed-update reports keep Doctor recovery instructions when a healthy Gateway does not prove Doctor writers have safely finished#170207 Thanks @steipete.
- 1527Update repair loads the target installation's settings before choosing a model instead of stopping with a configuration-not-prepared error#170276 Thanks @steipete.
- 1528Gateways with deferred database preparation can finish startup instead of leaving worker recovery and client readiness waiting on each other#170348 Docs · Thanks @steipete.
- 1529Update snapshot capture stops falsely treating an unchanged agent database as changed by its own read#170351 Docs · Thanks @DonnieFi, @RomneyDa.
- 1530Large configurations can reach the updater intact instead of causing candidate-read failures during Gateway service refresh#170373 Docs · Thanks @RomneyDa, @DonnieFi, @steipete.
- 1531Slow update snapshots stop consuming the next command's inspection time, and genuinely deferred checks get follow-up guidance#170374 Thanks @RomneyDa, @DonnieFi, @steipete.
- 1532Final update summaries and saved history stop calling completed plugin upgrades unfinished and retain actionable warnings for pending ones#170413 Docs · Thanks @RomneyDa, @DonnieFi.
- 1533Stalled transcript indexing gets a five-second grace then cancellation so it does not indefinitely block Gateway shutdown#170493 Docs · Thanks @steipete, @Oldrich333, @O96a.
- 1534Update and Doctor recovery can continue when optional dreaming schedule checks or settled temporary-snapshot cleanup fail#170754 Thanks @RomneyDa, @aniruddhaadak80, @anhnt3.
- 1535Standalone Doctor can repair matching account state when an app-owned Gateway is verified offline#170768 Docs · Thanks @RomneyDa, @shanselman.
- 1536Expected exclusive Doctor maintenance no longer appears as a database checkpoint failure in logs or health#170783 Thanks @steipete.
- 1537Update state inspection continues when an advisory progress message temporarily cannot be written#170955 Thanks @steipete.
- 1538Early checks for 2026Early checks for 2026.9.2 upgrades keep database changes private so a refused update can preserve compatibility with restored code. #171015 Docs · Thanks @steipete, @bamorem.
- 1539Doctor recognizes equivalent imported attachments instead of falsely rejecting healthy legacy session history#171388 Docs · Thanks @he-yufeng, @steipete, @brookpw, @junnie-stack.
- 1540Terminal update progress waits through temporary Doctor maintenance contention and resumes when it clears#171454 Docs · Thanks @RomneyDa, @DonnieFi.
- 1541Update failures during snapshot preparation identify the failed snapshot step and give matching retry guidance#171457 Thanks @RomneyDa, @DonnieFi.
- 1542Linux update and Doctor cleanup can reclaim abandoned updater folders despite inaccessible working directories of narrowly identified user-session processes#171488 Docs · Thanks @RomneyDa, @DonnieFi.
- 1543Gateway worker setup avoids a silent successful exit when Node diagnostic flag checks meet an explicit heap limit#171490 Thanks @RomneyDa.
- 1544A busy updater releases its database write lock while waiting for permission to save status, giving scheduled jobs and cleanup a chance to proceed#171493 Docs · Thanks @RomneyDa, @DonnieFi.
- 1545Doctor and updates allow terminated child processes longer to disappear before reporting a cleanup failure#171497 Thanks @RomneyDa, @steipete.
- 1546Updates that change core and plugins still remind users who choose --no-restart to run the appropriate Gateway restart command#171687 Thanks @steipete.
- 1547Managed updates wait through brief maintenance overlap and preserve recovery permission so an otherwise completed update is less likely to leave the Gateway stopped#171699 Thanks @steipete, @fdovarela.
- 1548State reads can resume after a database-resource cleanup failure, avoiding a Gateway restart solely to restore state-dependent work#171709 Thanks @RomneyDa, @residentb2b, @homeworld520, @sunny251008-debug.
- 1549Doctor avoids silent empty reports when a child closes its input, while completing admitted repairs before exiting if Doctor's own output closes#171780 Thanks @steipete, @dtump, @joshpetras, @cbhawthorne84.
- 1550Updates of standard pnpm installations find the installation's own package manager and bin folder despite the Mac Gateway service's restricted PATH#171936 Thanks @steipete, @AntaresGG, @MoerAI.
- 1551The setup assistant diagnoses problems without applying repairs or migrations to local configuration and state#171960 Thanks @vincentkoc.
- 1552Later updates can settle an unfinished completion record when the already-installed package verifies successfully#171993 Thanks @steipete, @teetee2tone.
- 1553Updates avoid failing after a short Doctor command has already completed successfully#172132 Thanks @steipete.
- 1554If the new version's Doctor fails before database writes, updates can restore the previous package and databases without mistaking preliminary reads for changes#172151 Thanks @RomneyDa.
- 1555Updates can inspect busy agent databases without refusing solely because normal writes reuse old log space#172196 Thanks @RomneyDa.
- 1556A verified update stays installed when Doctor cannot inspect its launching process, with a warning to run openclaw update repair#172247 Thanks @steipete, @homeworld520.
- 1557Read-only-root Kubernetes deployments need XDG_CACHE_HOME=/home/node/Read-only-root Kubernetes deployments need XDG_CACHE_HOME=/home/node/.openclaw/.cache or an equivalent writable cache alongside the image update. #172377 Docs · Thanks @saftall, @steipete.
- 1558Non-interactive setup preserves its actual result and credential-activation instructions when temporary credential files remain locked#172379 Thanks @skyzhao1223, @steipete, @giannis88.
- 1559A verified, ready Gateway update can finish with named channel warnings instead of reporting failure because a messaging channel needs attention#172494 Thanks @steipete, @sbc2016.
- 1560A timed-out optional shell-completion refresh can warn without failing an otherwise successful update after cleanup is confirmed#172502 Thanks @steipete.
- 1561Mac updates can proceed from an external login shell when native checks prove it is outside the Gateway service despite unreadable parent ancestry#172640 Thanks @steipete, @giulianoaccorsi.
- 1562Linux upgrades can regenerate eligible owned legacy service files with private permissions without requiring manual chmod repair#172790 Thanks @obviyus, @wei887-os.
- 1563Doctor avoids repeatedly rescanning migration manifests when stale import records refer to archived transcripts, reducing this cause of stalled repair and update checks#172890 Thanks @steipete, @DongwonGim, @skyzhao1223.
- 1564Updates and Gateway status launched through a remote node avoid mistaking the node service for the Gateway#173304 Thanks @steipete, @Leon-SK668, @davidcittadini.
- 1565Verified updates can continue with a repair warning when follow-up plugin inspection cannot finish, instead of rolling back solely for incomplete checks#173341 Docs · Thanks @steipete, @yoyo837.
- 1566Updates can move past an unhealthy Gateway in the same installation with a warning, leaving time to start and fully verify its replacement#173358 Docs · Docs · Thanks @steipete.
- 1567Gateway startup can follow a replacement model preparation instead of failing when an older preparation is cancelled#173366 Thanks @steipete, @Jackten.
- 1568--no-restart skips the global package updater's restart step, while a running Gateway's package watcher can still restart it after files change#173409 Docs · Thanks @steipete, @mwbroxson.
- 1569Updates wait briefly for a newly started Gateway to publish ownership before reporting restart preparation failure#173588 Docs · Thanks @obviyus.
- 1570Package updates verify the running build as well as its versionPackage updates verify the running build as well as its version; --no-restart still permits a package-watcher restart. #174649 Docs · Thanks @RomneyDa.
- 1571Keep scheduled workspace cleanup and worker-bundle maintenance running on paired nodes#168780 Docs · Thanks @steipete.
- 1572Supporting session integration rechecks access during compaction, membership reads, and downloads and explains unreadable device identity storage. 2770dae
- 1573Suggestions recheck current sharing access and session identity before returning results. 6a42f13
- 1574The first profile read after GitHub sign-in can complete while initial identity verification finishes. 90ad159
- 1575Gateway logs identify later rejected proxy sources while keeping repeated warnings bounded#134404 Thanks @lzhan011, @abacha, @obviyus.
- 1576PluralKit lookup failure diagnostics mask reflected credentials while retaining useful error details#141317 Thanks @hugenshen, @obviyus.
- 1577Plugin hooks must obtain fresh approval before changing trusted inline-approved tool arguments#142700 Docs · Thanks @giodl73-repo, @giodl73.
- 1578Switching approval-policy targets asks before discarding unsaved edits, and Cancel keeps the draft#149181 Docs · Thanks @tommyjoseph, @steipete, @obviyus.
- 1579Truncated or errored replies keep recognized unfinished reasoning hidden and explain empty output-token-limit results#156939 Docs · Thanks @quinszouls, @steipete, @ingenuity2k.
- 1580Configured plugin tool guards run in standalone agent exec and can block commands before execution#159333 Docs · Thanks @joseairosa, @obviyus.
- 1581Built-in credential masking covers secrets across long tool output while avoiding several redaction stalls and crashes#161480 Thanks @eleqtrizit.
- 1582Remote-node commands no longer fail an approval identity check when the prepared plan omitted session metadata#161980 Thanks @Program-123, @steipete, @gaojian125, @enderwillsaveyou, @rozenpl, @daddydubzzz.
- 1583Exec-approval guidance now explains that approved command values replace later command-field edits while changed environment overrides remain rejected#164216 Docs · Thanks @ericcurtin, @cristianoc, @obviyus.
- 1584Agents can ask explicitly approved peers for help and receive the reply without gaining access to their conversation histories#164444 Docs · Thanks @steipete, @prasad-yashdeep, @cipp-ashe.
- 1585Anchored conversation history rejects transcripts whose recorded owner does not match the requested conversation#164512 Thanks @steipete.
- 1586Delayed chat startup stays bound to the current caller and conversation while initial session lookups run through workers#164682 Thanks @steipete, @galiniliev.
- 1587Oversized policy-watch intervals no longer trigger near-continuous evaluations and overflow warnings#164850 Docs · Thanks @KrasimirKralev, @obviyus.
- 1588Scheduled commands retain valid approval through process startup and account for each approved use once, refusing uncertain or stale launches#164864 Docs · Docs · Thanks @steipete.
- 1589Covered scheduled messages and retries recheck permission at delivery handoffCovered scheduled messages and retries recheck permission at delivery handoff; revoked work cannot accept protected read results or commit an internal reply. #164906 Docs · Docs · Thanks @steipete.
- 1590A2A peers with missing environment-backed credentials can no longer authenticate or send reference text as a token#165021 Thanks @eleqtrizit.
- 1591Code Mode cells cannot replace real host tool replies with forged failure results#165071 Docs · Docs · Thanks @steipete.
- 1592Incognito reset safely removes its managed checkout and branch, preserving unsaved-work snapshots or reporting why a checkout was kept#165185 Docs · Docs · Thanks @jayzhou2309, @steipete, @obviyus.
- 1593Localized configuration guidance clarifies outbound agent messaging permissions without implying access to other sessions#165213
- 1594Restricted senders can delegate only to hidden helpers in the same agent and workspace#165418 Thanks @steipete.
- 1595Answering or cancelling an agent question checks the current session before applying the response, refusing stale or replaced callers#165552 Thanks @steipete.
- 1596Queued chat messages retain current sharing checks while repeated permission reads move off the Gateway thread#165600 Thanks @steipete.
- 1597Replies with MCP app or connection buttons retain their original session-writer delivery checks#165760 Thanks @steipete.
- 1598Tlon group-DM author claims can no longer grant owner commands or elevated permissionsPreviously pending DM requests need the sender to resend after approval. #165801 Docs · Thanks @eleqtrizit.
- 1599HTTPS through the secret egress proxy works with strict TLS clients, including modern Python on macOS; restart the Gateway and start new commands after updating#165818 Docs · Thanks @steipete, @vortexopenclaw, @RyanSandoval, @A1fred-AI, @gisk0, @jfk-hue.
- 1600The source-map-js dependency is updated to its patched release to address pathological source-map processing#165902 Thanks @steipete.
- 1601Patched MCP dependencies preserve saved credentials when background refresh encounters a different login issuer and require explicit login to switch#166217 Thanks @Patrick-Erichsen, @vincentkoc, @RomneyDa.
- 1602Previously verified Tailscale GitHub users retain profile and session access through retryable GitHub outages#166254 Docs · Thanks @obviyus.
- 1603Approve and deny actions acknowledge saved decisions before slow notification delivery finishes#166396 Docs · Thanks @steipete.
- 1604Manual history trimming refuses requests whose access or selected session changed while older records were being restored#166506 Thanks @steipete.
- 1605Stops canceled or no-longer-authorized worker requests before further device preparation#166608 Thanks @romneyda.
- 1606Lets operators require a named worker profile and reject local fallback before inference#166611 Thanks @RomneyDa.
- 1607Applies required-worker policy to explicit destinations, moves and recovery while preserving accepted workspace results and Stop#166613 Thanks @RomneyDa.
- 1608Recovers watched child runs under their recorded agent after restart and rejects coordinate actions with stale screenshots even when target references are blank#166691 Thanks @steipete.
- 1609Node commands approved before the deadline can still run when forwarding crosses that deadline within the valid handoff window#166971 Docs · Thanks @steipete.
- 1610Native Codex follow-ups are checked against the sender's permitted conversation tree, and restricted instructions match available tools#167075 Docs · Thanks @vincentkoc.
- 1611Execution-policy edits and cleanup move database writes off the Gateway main thread while current permissions remain enforced#167115 Thanks @steipete.
- 1612Malformed text encoding in configuration files or piped patches is rejected before saved values can change#167118 Thanks @Alix-007, @obviyus.
- 1613LINE and Tlon mask recognizable credentials echoed in failed-request diagnostics#167234 Thanks @xialonglee, @obviyus.
- 1614Failed exec-policy commands requested with JSON return one structured error document and a nonzero exit#167279 Thanks @leon-sk668, @obviyus, @masatohoshino.
- 1615Device commands return structured JSON refusal reasons while preserving nonzero exits and human recovery guidance#167294 Docs · Docs · Thanks @Leon-SK668, @obviyus, @masatohoshino.
- 1616Authorized agent commands avoid spurious launch failures when existing shared-database features initialize again#167486 Thanks @steipete.
- 1617Secrets guidance identifies unsupported command consumers before asking users to enter a protected credential#167976 Docs · Docs · Thanks @romneyda, @markma84.
- 1618Reply permission checks refuse to authorize a prepared response while its database execution remains unfinished#168029 Thanks @steipete.
- 1619Unfinished hidden reasoning stays out of Chat Completions replies when a native tool call is followed by a token limit or content filter#168294 Thanks @steipete.
- 1620Network tool results keep their untrusted-source label through Tool Search and Code Mode and into later replies#169560 Docs · Thanks @RomneyDa, @farisoftfry.
- 1621Gateway exec blocks recognized variable-bearing SQLite file URLs from opening live OpenClaw state#170253 Docs · Thanks @eleqtrizit.
- 1622Doctor preserves saved OAuth profiles when an older auth file is corrupt or unreadable and warns where to inspect it#170256 Docs · Thanks @steipete, @nosmile99.
- 1623Graphical pairing keeps browser credentials out of launcher arguments by using private files; access to those files remains sensitive and cleanup is best effort#170289 Thanks @eleqtrizit.