RepoJournal
OpenClaw @openclaw
77 wires and counting

$ follow OpenClaw

Keep up with OpenClaw in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-13
stories 205
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Gateway fixes protected path refusals

By RepoJournal · Filed · About OpenClaw

Vincent Koc Peter Steinberger Ayaan Zaidi openclaw-docs-sync[bot]
4 people shipped this
Vincent Koc @vincentkoc 4 cited Peter Steinberger @steipete 2 cited Ayaan Zaidi @obviyus 1 cited openclaw-docs-sync[bot] @openclaw-docs-sync[bot]

OpenClaw gateway now lets agents configure default-model settings and explains why protected paths were refused.

OpenClaw's gateway fix [1] now allowlists agents.defaults.model edits, reversing an earlier restriction where agents.list[].model was agent-tunable but agents.defaults.model was refused. The bare refusal string, which agents misread as an authorization failure, has been replaced with a message that states the contract and remedy, though token/auth/exec paths remain protected. This changes the error handling for agents that attempted to edit defaults.

Security work in openclaw [2] centralizes timing-safe secret comparisons across plugins and security modules, reusing a single safe comparator. In a separate cleanup [3], dead exports from the browser and codex plugins were removed, collapsing Playwright export paths and privatizing helpers. Both are internal refactors that reduce surface area but likely won't affect public APIs.

Clawsweeper ledger fixes [4][5] accept package-manager command separators and allow proven no-op router finalization. These address edge cases in command publication and router handling, making the ledger more robust for routine operations. The autoreview skill sync in docs [6] ensures that canonical skill updates are applied correctly, with a CI fix [7] keeping updates on the canonical target.

Action items

References

  1. [1] fix(gateway): allowlist default-model config edits and explain protected-path refusals ↗ openclaw/openclaw
  2. [2] refactor(security): centralize timing-safe secret comparisons (#105989) ↗ openclaw/openclaw
  3. [3] refactor: remove browser and codex dead exports (#105867) ↗ openclaw/openclaw
  4. [4] fix(ledger): accept package-manager command separator (#529) ↗ openclaw/clawsweeper
  5. [5] fix(ledger): allow proven no-op router finalization (#531) ↗ openclaw/clawsweeper
  6. [6] chore(autoreview): sync canonical skill ↗ openclaw/docs
  7. [7] fix(ci): keep skill updates on canonical target ↗ openclaw/docs
Topics: AI Agents AI / ML Full archive →

Quick answers

What shipped in OpenClaw on July 13, 2026?
OpenClaw gateway now lets agents configure default-model settings and explains why protected paths were refused. In total, 181 commits and 24 pull requests landed.
Who contributed to OpenClaw on July 13, 2026?
4 developers shipped this update, including Ayaan Zaidi, Peter Steinberger, Vincent Koc, and openclaw-docs-sync[bot].
What were the notable OpenClaw updates?
fix(gateway): allowlist default-model config edits and explain protected-path refusals, refactor(security): centralize timing-safe secret comparisons (#105989), and refactor: remove browser and codex dead exports (#105867).
♥

$ log @openclaw --recent

Gesture update rollback guard fixed; Slack slackens redundant work 150 shipped Fixes for stale DashScope downloads and Telegram forward origins 117 shipped Plugin approvals now push to iOS devices; uploads and checks stop hanging 116 shipped Smarter CI reuse, tighter Copilot OAuth checks 210 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.