$ the-wire · showcase
OpenClaw and OCM harden upgrades: atomic commits, macOS signing, deduplicated doc builds
By RepoJournal · Filed · About OpenClaw
Coordinated fixes across OpenClaw's runtime and OCM land today: signal-to-commit races closed, macOS permissions survive updates, and docs builds no longer render every locale twice.
OCM's upgrade path gets two reliability fixes. The signal-to-commit race identified in #140, where a signal handler could set the interruption flag between checking `interrupted()` and calling `commit()`, is now closed by combining critical depth and pending-interrupt state into one atomic value [1]. Separately, upgrades that receive SIGINT or SIGTERM now defer those signals while rollback-backed state is in flight and restore the original managed-service state before exit, fixing a bug where `service_running=false` was persisted during quiescing [2].
macOS users will stop re-granting file-access permissions after every OCM update, as the release workflow now signs both architectures with a Developer ID identity and the stable identifier `com.openclaw.ocm`, replacing linker-generated ad-hoc signatures [3]. Release tooling also switches from `spctl --assess --type execute`, which rejects standalone Mach-O binaries, to `codesign --verify --strict --verbose=2 --check-notarization --test-requirement '=notarized'` [4].
In OpenClaw's runtime, gateway shutdown now waits for prewarm work, and AI request handling skips redundant normalization of matching Responses inputs [5][6]. Docs site work localizes the Discord card and table of contents, centers the article, and resolves section links, but the notable fix is that full docs builds rendered every translated page twice: "a build reported 29,122 pages while Pagefind indexed 14,953 unique documents" [7]. That's now fixed by excluding locale-owned roots at the English collection boundary [7].
Action items
- → Upgrade to OCM builds containing #141 and #140 to prevent signal-race data loss and improper service state after interrupted upgrades openclaw/ocm [immediate]
- → Inspect docs site builds to confirm page counts now match Pagefind's unique document index openclaw/docs [plan]
- → For macOS users, verify the new signing fingerprint works before rolling out further releases openclaw/ocm [monitor]
References
- [1] Close the upgrade signal-to-commit race ↗ openclaw/ocm
- [2] Restore services after interrupted upgrades ↗ openclaw/ocm
- [3] fix: macOS permissions persist across OCM updates ↗ openclaw/ocm
- [4] fix: validate notarized macOS CLI without an app bundle ↗ openclaw/ocm
- [5] fix(gateway): wait for prewarm work during shutdown (#137794) ↗ openclaw/openclaw
- [6] perf(ai): avoid duplicate normalization of matching Responses inputs (#137617) ↗ openclaw/openclaw
- [7] fix: render each documentation locale only once ↗ openclaw/docs
