113 wires and counting

$ follow OpenClaw

Keep up with OpenClaw in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-19
stories 117

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

OpenClaw ships crabbox v0.44.0, fixes UI credential leak

By RepoJournal · Filed · About OpenClaw

OpenClaw's gateway now loads workspace icons without sharing secrets, while crabbox v0.44.0 adds credential-free provider discovery and a Telegram Desktop recorder.

crabbox v0.44.0 adds credential-free `crabbox providers describe` discovery for canonical provider-scoped run flags and compiled defaults, versioned `go install` as a CLI-only installation channel, and an opt-in Linux/WSL2 `raw_socket` preflight probe [1]. The `--class` standard, fast, large, and beast intent labels now resolve to concrete instance types in `crabbox providers --json`, reporting primary instance type, nominal vCPU, and RAM per provider [2].

OpenClaw changes how the dashboard authenticates device credentials. Paired Control UI device credentials now share the canonical same-origin read authorizer, while session-derived routes retain read+owner policy. Fresh dashboard handoffs and reloads can therefore render workspace, channel, and plugin icons without exposing or persisting the shared Gateway secret, which the release notes call "Remove the old shared-secret-first UI workaround" [3].

Gateway performance work removes repeated logging and delivery scans: exact session-delivery retries no longer scan the full queue, and uninterested projections are skipped during logging and diagnostics. Outbound WebSocket summaries are built only after recipient admission [4]. A standalone Telegram Desktop recorder now starts from a digest-pinned prebaked image, providing a ready desktop in about 12 seconds with no per-lease apt installs, and removing dpkg-lock failures; it is not yet invoked by anything in the repository [5].

Quick answers

What shipped in OpenClaw on August 19, 2026?
OpenClaw's gateway now loads workspace icons without sharing secrets, while crabbox v0.44.0 adds credential-free provider discovery and a Telegram Desktop recorder. In total, 85 commits, 31 pull requests, and 1 releases landed.
Who contributed to OpenClaw on August 19, 2026?
3 developers shipped this update, including Peter Steinberger, Ayaan Zaidi, and openclaw-docs-sync[bot].
What were the notable OpenClaw updates?
v0.44.0, feat(providers): report machine class shapes in the provider matrix, and fix(ui): load workspace icons after dashboard bootstrap (#126200).