openclaw 2026.2.6

Changes

• Models: support Anthropic Opus 4.6 and OpenAI Codex gpt-5.3-codex (forward-compat fallbacks). (#9853, #10720, #9995) Thanks @TinyTb, @calvin-hpnet, @tyler6204.
• Providers: add xAI (Grok) support. (#9885) Thanks @grp06.
• Web UI: add token usage dashboard. (#10072) Thanks @Takhoffman.
• Memory: native Voyage AI support. (#7078) Thanks @mcinteerj.
• Sessions: cap sessions_history payloads to reduce context overflow. (#10000) Thanks @gut-puncture.
• CLI: sort commands alphabetically in help output. (#8068) Thanks @deepsoumya617.
• Agents: bump pi-mono to 0.52.7; add embedded forward-compat fallback for Opus 4.6 model ids.

Fixes

• Telegram: auto-inject DM topic threadId in message tool + subagent announce. (#7235) Thanks @Lukavyi.
• Security: require auth for Gateway canvas host and A2UI assets. (#9518) Thanks @coygeek.
• Cron: fix scheduling and reminder delivery regressions; harden next-run recompute + timer re-arming + legacy schedule fields. (#9733, #9823, #9948, #9932) Thanks @tyler6204, @pycckuu, @j2h4u, @fujiwara-tofu-shop.
• Update: harden Control UI asset handling in update flow. (#10146) Thanks @gumadeiras.
• Security: add skill/plugin code safety scanner; redact credentials from config.get gateway responses. (#9806, #9858) Thanks @abdelsfane.
• Exec approvals: coerce bare string allowlist entries to objects. (#9903) Thanks @mcaxtr.
• Slack: add mention stripPatterns for /new and /reset. (#9971) Thanks @ironbyte-rgb.
• Chrome extension: fix bundled path resolution. (#8914) Thanks @kelvinCB.
• Compaction/errors: allow multiple compaction retries on context overflow; show clear billing errors. (#8928, #8391) Thanks @Glucksberg.