OpenClaw

Adds Claude Haiku 5.5 support, along with fixes that stop valid Gateway startups with large plugins from capturing and discarding plugin Doctor modules on every config read. Windows plugin captures use the fast pinned-descriptor copy again so Gateways with large plugins start without multi-minute stalls, and security fixes reject NUL execution arguments before startup and fail closed on unresolved peer credentials.

Nine plugin SDK aliases began warning — including session-manager, extension-session, provider-replay, and memory-session sync-persistence, gateway placement readers, and workspace mutation guards — with the async replacements documented in the SDK migration guide; a further sixteen aliases hit their removal targets and stay removal-pending. Alongside these, Doctor now keeps repairs working with read-only managed config and reports a still-starting Gateway as a warning, webhook config migrations were left to Doctor, and fixes landed for queued-turn stalls, local video playback, and Windows worktree creation.

A reliability and recovery hotfix: local-plugin configuration is preserved through recovery, unsafe Windows 2026.9.4 schema transitions are refused, and Codex session discovery no longer exhausts Gateway memory across large agent fleets. Also fixes stuck Anthropic background-command turns, duplicate container Gateways, Windows cron setup under case-insensitive environment proxies, and stale queued Telegram previews.

2026.9.7

Extended-stable line gains support for Meta Muse Spark 1.3, Anthropic Fable 5.1, OpenAI GPT-6 Astra, and OpenAI/fal GPT Image 2.5, alongside full GPT-5.6 Sol/Terra/Luna catalog and routing behavior. Also includes a security rollup reconciling advisories from 2026.8.2, hardening Prometheus metrics authorization and Discord asset and voice ownership, and overriding the IMAP dependency graph to Nodemailer 9.1.1 to clear address-parser denial-of-service advisories.

⚠️ macOS app: do not update to 2026.9.6 yet. The 2026.9.6 macOS app can crash on every launch after the in-app update (#156861). It has been withdrawn from the Sparkle update feed; a 2026.9.7 Mac hotfix is in progress. If your app no longer launches, reinstall the 2026.9.5…

Doctor now preserves the complete bundled plugin inventory when creating or repairing registry state, keeping default Browser, Canvas, pairing, file-transfer, phone-control, Talk voice, and Bonjour plugins available after restart, and state-migration discovery recovers from the partial registry written by 2026.7.34. The release also backports the unpublished 2026.7.33 and 2026.7.34 changelogs, including hardenings for command parsing, Git install argument injection, browser origin checks, and UTF-16-safe truncation across channels.

The July 2026 extended-stable release tightens security boundaries by requiring approval for escaped-newline shell words and rejecting injected git clone options, exact-origin mismatches, and inherited secret-response ids, while preserving queued, imported, and tool-result messages across retries and channel lifecycle transitions. Resource waits and history queries are now bounded, and Discord, Matrix, Telegram, Slack, and WhatsApp delivery edge cases that could lose or stall messages are repaired.

2026.9.4

2026.6.35

This is the final June 2026 Extended Stable (LTS) release.

Highlights

• Safer provider and channel boundaries: bundled providers and channel adapters now bound untrusted response bodies, reject oversized inputs before expensive work, and preserve…

2026.9.3

2026.9.2

2026.9.1

Open Home in a docked panel beside your work with Cmd/Ctrl+Shift+H, preview or remove its work-context snapshot, and start background sessions without leaving New Session. A new Linux desktop app offers .deb or AppImage installs with Gateway connection and Quick Chat. Unsandboxed sessions now work with other sessions of the same agent by default; shared-agent operators should set tools.sessions.visibility to tree or self for narrower access.