[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps openclaw/openclaw from 2026.10.7 to 2026.10.8.

Release notes

Sourced from openclaw/openclaw's releases.

openclaw 2026.10.8

2026.10.8

Highlights

• Updates that finish and recover: an ordinary post-update Doctor failure restarts the Gateway instead of leaving it stopped, an orphaned maintenance worker no longer blocks every CLI command and Gateway start, and updates no longer abort on ACL filesystems, Windows pnpm optional-dependency links, pnpm 10 global installs, debug console logging, or a missing legacy OAuth directory. (#180668, #181695, #181141, #181596, #181456, #182850, #180174) Thanks @​hannesrudolph, @​SMF12138, @​rayluo88, @​PonySlayer28, and @​VN77-77VN.
• Gateway service installs on every desktop: macOS recovers a loaded launchd registration whose plist was deleted, Linux installs under the Ubuntu default umask create a private state directory instead of being refused, and the macOS updater waits for the serving Gateway to release its databases before Doctor runs. (#180390, #179538, #182055) Thanks @​avnishkirnalli and @​XiaoPengYouCode.
• Conversations keep accepting messages: killed runs release their restart-recovery fence, interrupted and just-accepted child sessions recover after a Gateway restart, inbound messages stop retrying forever when the reply runtime cannot publish, and the Control UI forgotten-send retry delivers the reply instead of an authoring error. (#181992, #178888, #181871, #181300, #182219) Thanks @​najef1979-code, @​handcraftrc-pixel, @​sukhdeepjohar, and @​teddashh.
• Startup and database resilience: startup work no longer inherits a closed SQLite reader scope, so models, chat metadata and channel replies stay available; transient lock contention during agent database startup is retried; and model catalogs stay available during skill runs. (#182615, #182446, #182385)
• Security hardening: exec allowlist mode requires approval for test -v operand expansion, generic node invoke refuses browser proxy commands, sandboxed spawned children cannot run host CLI backends, the secret egress proxy rejects distrusted eMudhra chains, Fish Audio and Gradium errors no longer expose API keys, and deeply nested Tlon content can no longer stall the channel. (#180880, #179880, #178742, #179249, #178877, #177536) Thanks @​eleqtrizit and @​joshavant.
• Windows exec and plugins: agent exec works under S4U scheduled tasks while Store PowerShell is installed, native plugins load on machines with Endpoint DLP, and Doctor recovers dangling dependency junctions and plugins on another filesystem. (#182898, #179949, #179549, #179445) Fixes #182652 Thanks @​RomneyDa, @​tre1d, @​coaiMax, @​paulcam206, @​JIRBOY, and @​ceckert.
• Provider and model continuity: Codex turns keep their budget with older runtime plugins instead of silently falling back, Codex native child inference works after startup, OpenAI OAuth works with stale catalogs, Anthropic PDF analysis works with setup-token OAuth, a timed-out MCP session close no longer fails the next turn, and CLI history owner changes stop instead of silently replaying on another provider. (#182995, #176311, #181356, #178420, #182189, #180075) Fixes #181619 Thanks @​RomneyDa, @​kip-claw, @​enki, @​sasan1200, @​sunlit-deng, @​khensthoth, @​aniketkrs, @​goslingmanagment, @​wr-web, and @​teddashh.

Changes

• Fresh OpenAI setup: first-run model metadata no longer restricts the model picker to one model. (#175945) Thanks @​matthematics1137 and @​jb-dev1.

Fixes

• Channel accounts: default Slack, Google Chat, X, Nextcloud Talk and Zalo accounts keep starting and keep their secrets after a named account is added. (#176267, #180450, #182608) Thanks @​555aaditya, @​progerjkd, and @​masatohoshino.
• Slack: an isolated invalid_auth is retried before a socket-mode channel is disabled, and silent relay network drops reconnect. (#181056, #182368) Thanks @​mushuiyu886 and @​marns.
• Matrix, Twitch, Zalo, iMessage and Feishu delivery: ordinary Matrix messages are no longer treated as text commands, Twitch sends normalize channel targets, Zalo DMs with URLs are handled, iMessage recovers after the Messages bridge dies, and Feishu quick-action cards send again. (#179506, #178480, #178938, #180900, #79832) Thanks @​xiaopan-xydt, @​doomy, @​HeZ2z, @​Takhoffman, @​zzrs-xxxr, @​namchamvinhcuu, and @​xiabee.
• Agent runs and providers: heartbeat loops stop when background commands finish, temporary Codex probe workers no longer accumulate, Codex native turns stay alive during host work, Claude CLI turns no longer stall 15 minutes when stream output hits its limit, provider stream errors surface immediately, and session admission races no longer trigger model fallback. (#179060, #167390, #181839, #159931, #117397, #179347) Fixes #178937, #181805, and #178000 Thanks @​maxdjohnson, @​sunlit-deng, @​Terwox, @​AINCHORS, @​robertmsale, and @​davidcittadini.
• Voice and meetings: Discord realtime voice consults initialize their runtime, voice calls use the configured agent model, and long meeting talk-back replies keep their audio. (#179462, #181451, #178254) Thanks @​shoaibulhaque, @​yagizkus, @​potoior, @​BeyonceBot, and @​sukhdeepjohar.
• Remote access and history: Tailscale Serve and Funnel recover after tailscaled restarts, and cron history stays readable after provider changes. (#180081, #181311) Thanks @​enki, @​saariuslystoned, and @​xtimor.
• Doctor repairs: retained transcripts verify after heading repairs, and repair keeps the Codex host compaction model. (#179089, #179914) Thanks @​mrsavingsblogspot-rgb and @​LiuwqGit.
• Plugins and nodes: older plugin debounce callbacks keep working, computer use accepts input results from older Mac nodes, and Memory Wiki keeps user Notes when OKF concepts disappear. (#118011, #137755, #179657)
• Secrets and hooks: the 1Password secret provider accepts group-writable OpenClaw files, and concurrent session-memory captures no longer overwrite each other. (#181127, #181081) Thanks @​jalehman, @​jason-allen-oneal, and @​yetval.
• Doctor recovery messages: when Doctor cannot restore a Gateway it stopped, it prints the failure and how to start the Gateway. (#181941)
• Codex native children and replies: completed or undeliverable child completions no longer replay or wedge parents, replies unblock after native children finish, are interrupted, or complete follow-ups, final answers survive transient retries, settled turns without a mirrored prompt finalize, native tool declarations stay stable, queued chats recover after plugin reloads, submitted steering commits before terminal release, and Codex accepts managed loopback proxy defaults. (#173018, #175246, #177577, #179099, #179050, #183286, #181779, #183077, #182104, #184062, #183232) Thanks @​quqi1599, @​Stronggenetics, @​linancn, @​wtfichigo, @​mmartoccia, @​Marvinthebored, @​sukhdeepjohar, @​jjjhenriksen, @​aatreya, @​ermaxinc, and @​RomneyDa.
• Claude CLI sessions: unrelated native tasks no longer hold the final answer, parent replies finish after nested background agents, a stopped first turn keeps its conversation, room events no longer reset sessions, operators can keep native Agent and Workflow tools, resumed sessions see conversation updates, and Claude CLI models stay available with saved subscriptions. (#170322, #182267, #181966, #182273, #183765, #183059, #179203) Thanks @​cassthebandit, @​VACInc, @​goslingmanagment, @​holgergruenhagen, @​xiaopan-xydt, @​Marvinthebored, @​scarabone, @​atomsmasher81, @​josh-cornelius, and @​teddashh.
• Subagents and agent turns: model fallback stops after local runtime faults, recovered child results deliver after session reuse, private completion receipts reconcile after a restart, parents keep waiting for active collectors, batched tool calls settle before sessions_yield, delayed sessions_send replies are no longer cut at 4,096 characters, turns finish after tool-result recovery, messages sent during transcript rebuilds are recovered, and completed attempt callbacks are released. (#180042, #184069, #184041, #172959, #184021, #178271, #175685, #182666, #164843, #183884) Thanks @​sunlit-deng, @​danielsiemers, @​johan-eilertsen, @​jailbirt, @​rjdotdev, @​wr-web, @​seriouslysean, @​MSNexploder, and @​PollyBot13.
• Gateway stability and streaming: long HTML and JSX answers, crafted Teams HTML, and replies that look like tool calls no longer stall the Gateway; reasoning tags are withheld before streaming; silent turns no longer send rich payloads; channel restarts survive exited-run cancellation; the Gateway closes after forced plugin retirement; plugin service schedules outlive the scope that created them; and cold tool inventories no longer grow memory. (#175472, #183438, #183252, #182454, #129244, #182433, #181270, #182207, #178596) Thanks @​JasonBuildAI, @​LeizhenZhang, @​zax0rz, @​JOY, @​0xtc23, @​bguliano, @​obviyus, and @​wuqxuan.
• Updates, installs and Doctor: Windows managed updates no longer lock themselves on TEMP aliases, the Windows installer runs through iex, updates complete during channel outages and keep accepted policy pins, stopped database backups allow readers, Doctor restores the Gateway after SIGHUP, keeps valid reseeded configs and inherited logins, repairs unsupported Node runtimes, recovers agents after deletion journal loss, restores plugin host links, handles very large retained histories, and uses less memory on large fleets. (#183622, #183145, #179471, #180505, #180827, #182901, #183703, #179726, #181618, #181804, #181140, #180414, #180792, #181465) Thanks @​ryandle, @​duyufansh2008, @​waynegault, @​csabatatrai, @​samueltardieu, @​4140leal-cw, @​rybing7, @​RomneyDa, @​LiuwqGit, @​sukhdeepjohar, and @​teddashh.
• Sessions and storage: relative session stores resolve against the state directory, sessions archive through symlinked state paths, stale restart-recovery sources no longer wedge sessions, cron cleanup keeps live child sessions, archived Discord slash-command sessions restore in place, background plugin work keeps its SQLite reader, and session deletes reuse warm archive workers. (#182444, #181554, #180853, #179057, #168596, #179031, #171156, #175091, #183410) Thanks @​erickj92, @​Cloud-Ocean, @​Oldrich333, and @​PollyBot13.
• Auth and providers: rate-limited profiles cool down only as long as the provider asks, shared OAuth refreshes past deleted peers, concurrent agents keep MCP tool access while an OAuth credential is leased, utility models no longer return thinking-only replies, custom GLM providers generate session titles, Kimi K3.1 Pro gets the K3 thinking and video controls, Bedrock Mantle GPT models route through Responses, Google streams recover, and native conversations survive a compaction fallback model. (#180280, #179205, #179997, #169920, #172580, #181923, #182437, #117194, #183282) Thanks @​fuller-stack-dev, @​WG-Mojo, @​maliv2, @​danielsiemers, @​jacobtomlinson, @​TommyLei666, @​obviyus, @​rayvader, and @​pstarkgit.
• Channels: Telegram and Mattermost default accounts keep their tokens after a named account is added, X accounts with capitalized keys can be managed and synced, iMessage stops answering its own self-chat replies, Feishu keeps streamed text across tool calls, Google Chat delivers remote attachments as links, Synology Chat stops reporting false delivery failures, Tlon recovers after network drops, and channel images a turn could not read are retried. (#183618, #182706, #183263, #183461, #183383, #182438, #182416, #177654, #178358, #183390) Thanks @​555aaditya, @​rodricksz4h5, @​wangmiao0668000666, @​nxmxbbd, @​sukhdeepjohar, @​felirami, @​kentuscn, @​jailbirt, @​HootRock, @​masatohoshino, @​yetval, and @​teddashh.
• Voice, apps and browser: realtime Talk survives early output and brief Gateway stalls, GPT-Live Talk and Bun realtime voice use the managed proxy, oversized macOS recordings error instead of disconnecting the node, Android chat binds to an allowed agent, the Tauri app no longer crashes before the dashboard is ready, FaceTime accepts new calls after a disconnect, the Control UI detects dead Gateway links, and browser control no longer rewrites trusted-proxy Gateway auth or holds profile leases after timeouts. (#182919, #180572, #175886, #176567, #182593, #182767, #183841, #154230, #179101, #181620, #154246) Thanks @​anmol0b, @​StatsR4Losers, @​kybrcore, @​MertBasar0, @​jalehman, @​CheatosBu, @​xiaopan-xydt, @​dawidkulpa, @​Solvely-Colin, @​fuller-stack-dev, and @​LLagoon3.
• Config, cron and workspaces: Control UI saves accept fully masked SecretRefs, short session URLs with navigation hints load, cron jobs keep running after sending to their own target and after a hook plugin is replaced, provisioned workspaces work without templates, Windows workspace sync no longer fails before lease acquisition, trusted-proxy readiness probes succeed without forwarded headers, and restart-recovery notices no longer claim a Gateway restart. (#183571, #183148, #177518, #177825, #120943, #183064, #182823, #172843) Thanks @​lonexreb, @​Valkster70, @​xiaopan-xydt, @​2991495215, @​masatohoshino, @​jlapenna, @​shakkernerd, @​ericcaiwx-star, @​treez-admin, and @​obviyus.

Complete contribution record

This audited record covers the complete v2026.10.7..fdd5997b8fa1c0b69159adcadd1d6ca191416e09 history: 162 in-range PRs + 0 retained seed-only PRs = 162 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Shipped baseline exclusions: v2026.10.7 (5 PRs: #147085, #164823, #165982, #167459, #181801).

Pull requests

• PR #181465 Thanks @​RomneyDa.
• PR #182898 Related #182652. Thanks @​RomneyDa and @​tre1d.

... (truncated)

Changelog

Sourced from openclaw/openclaw's changelog.

Changelog

Release notes: https://docs.openclaw.ai/releases

Each release has its complete changelog below. Audited contribution records are retained separately when available.

• Unreleased · Raw
• 2026.10.8 · Raw
• 2026.10.7 · Raw
• 2026.10.6 · Raw
• 2026.10.5 · Raw
• 2026.10.5-beta.4 · Raw
• 2026.10.5-beta.3 · Raw
• 2026.10.5-beta.2 · Raw
• 2026.10.5-beta.1 · Raw
• 2026.9.9 · Raw
• 2026.9.8 · Raw
• 2026.9.7 · Raw
• 2026.9.6 · Raw
• 2026.9.5 · Raw
• 2026.9.4 · Raw
• 2026.9.3 · Raw
• 2026.9.2 · Raw
• 2026.9.1 · Raw
• 2026.8.2 · Raw
• 2026.8.1 · Raw
• 2026.7.1 · Raw
• 2026.6.11 · Raw
• 2026.6.10 · Raw
• 2026.6.9 · Raw
• 2026.6.8 · Raw
• 2026.6.7 · Raw
• 2026.6.6 · Raw
• 2026.6.5 · Raw
• 2026.6.2 · Raw
• 2026.6.1 · Raw
• 2026.5.31 · Raw
• 2026.5.28 · Raw
• 2026.5.27 · Raw
• 2026.5.26 · Raw
• 2026.5.22 · Raw
• 2026.5.20 · Raw
• 2026.5.19 · Raw
• 2026.5.17 · Raw
• 2026.5.14 · Raw
• 2026.5.12 · Raw
• 2026.5.7 · Raw
• 2026.5.6 · Raw

... (truncated)

Commits

• dc2523e docs(changelog): prepare 2026.10.8 notes
• 4e38411 test(qa): await cancelled worker history before replacement
• c36086f fix(i18n): sync native locale artifacts with backported Talk mode strings
• fdd5997 test(release): expect the reported host-link repair for copied host packages
• 5e64146 test(release): align canonical descendant owner gating with stable tool autho...
• 6859763 test(release): align FRV-failing tests with backported semantics
• 6583727 test(qa-lab): assert the pinned credential on the quota read only
• 1f6f429 test(daemon): drop stale run-node dist-fence launchd case
• 2197780 test(release): align backported tests with stable harnesses and shipped seman...
• 5c40b47 fix(agents): complete #164843 stable adaptation
• Additional commits viewable in compare view