Stay up to date with the latest OpenClaw versions, changelogs and downloads.
2026.6.6 Highlights Security boundaries are substantially tighter across transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender...
Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf. MCP tool...
Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf. MCP tool...
Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf. MCP tool...
2026.6.5 Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf....
Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf. MCP tool...
2026.6.5 Highlights QQBot now strips model reasoning/thinking scaffolding before native delivery, preventing raw <thinkingcontent from leaking into channel replies. (#89913, #90132) Thanks @openperf....
2026.6.2 Highlights Plugin and skill installs now use an operator install policy instead of the old dangerous-code scanner path, with clearer doctor, CLI, ClawHub, and troubleshooting surfaces for...
Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162,...
Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162,...
Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162,...
Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162,...
2026.5.31 Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141,...
2026.5.31 Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141,...
2026.5.31 Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141,...
2026.5.31 Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141,...
Highlights Agents and CLI-backed runtimes recover more cleanly from interrupted tool calls, stale session bindings, compaction handoffs, and media delivery retries. (#88129, #88136, #88141, #88162,...
Highlights Agent and Codex runtime recovery is steadier: subagents keep cwd/workspace separation, hook context stays prompt-local, session locks release on timeout abort while live OpenClaw locks...
Highlights Agent and Codex runtime recovery is steadier: subagents keep cwd/workspace separation, hook context stays prompt-local, session locks release on timeout abort, stale restart continuations...
Highlights Agent and Codex runtime recovery is steadier: subagents keep cwd/workspace separation, hook context stays prompt-local, session locks release on timeout abort, stale restart continuations...
2026.5.28 Highlights Agent and Codex runtime recovery is steadier: subagents keep cwd/workspace separation, hook context stays prompt-local, session locks release on timeout abort, stale restart...
2026.5.28 Highlights Agent and Codex runtime recovery is steadier: subagents keep cwd/workspace separation, hook context stays prompt-local, session locks release on timeout abort, stale restart...
Highlights Stronger security and content boundaries: group prompt text is kept out of the system prompt, repeated-dot hostnames are normalized, side-effecting command wrappers and unsafe Node runtime...
Highlights Stronger security and content boundaries: group prompt text is kept out of the system prompt, repeated-dot hostnames are normalized, side-effecting command wrappers and unsafe Node runtime...
Highlights Faster Gateway and replies: startup avoids repeated plugin, channel, session, usage-cost, warning, scheduled-service, and filesystem scans; visible replies separate user-facing sends from...
Highlights Faster Gateway and replies: startup avoids repeated plugin, channel, session, usage-cost, warning, scheduled-service, and filesystem scans; visible replies separate user-facing sends from...
2026.5.26 Highlights Faster replies and startup: visible reply delivery now separates user-facing sends from slower follow-up work, command/model/plugin metadata is reused on hot paths, and Gateway...
2026.5.25-beta.1 Beta 1 late fixes iMessage: thread current channel/account inbound attachment roots into the image tool so iMessage-saved attachments under ~/Library/Messages/Attachments (including...
Changes iMessage: support thumb-approval reactions — 👍 (Like tapback) resolves an approval as allow-once and 👎 resolves as deny, with the explicit-approver allowlist read from...
Changes Gateway/perf: reuse process-stable channel catalog reads, avoid repeated bundled-channel boundary checks, and rotate gateway watch CPU profiles so benchmark runs do not accumulate unbounded...