$ the-wire · showcase
Codex route migration keeps subscription billing, cron script paths stop silently landing on neighbors
By RepoJournal · Filed · About OpenClaw · Composed from the cited sources · methodology
openclaw fixed an upgrade path where users with both ChatGPT OAuth and an OpenAI API key could have heartbeat and subagent traffic silently move onto metered API billing.
The top fix is the Codex route migration [1]. Users upgrading with both ChatGPT OAuth and an OpenAI API key could have heartbeat and subagent traffic silently move onto metered API billing; a custom official Completions adapter in working 7.x subscription configurations is the piece the retired routes now migrate onto. If you run that combination, the billing path is preserved rather than dropped.
Cron does the same kind of quiet wrong-file fix [2]. `cron add` and `cron edit` used to silently read a different script when a quoted filename contains leading or trailing whitespace: passing `"payload.js "` selected `payload.js` if that neighboring file existed, then reported success. All four payload and trigger file-argument producers now use the existing nonblank string reader, which preserves the original filename.
Two more changes landed in the gateway and dependency layer. Streamed assistant text is no longer rescanned on every fragment: the shared text merger records when an event provably appends text, and HTTP adapters reuse that fact only when the merge base matches actual wire progress, retaining prefix validation for corrections and withheld output [3]. Nodemailer security overrides were updated [4], and the CI plugin security inventory was pinned to an exact 9.5 set while preserving the frozen 9.4 optional findings, with future contexts and changed counts kept fail-closed [5].
The docs desk mirrored five upstream commits into openclaw/docs [6][7][8][9][10]. Routine sync churn, no action needed beyond normal review.
Action items
- → Verify your ChatGPT OAuth plus OpenAI API key config lands on the subscription billing path after upgrading past the retired Codex routes openclaw/openclaw [immediate]
- → Re-check any cron jobs whose script paths are quoted with stray leading or trailing whitespace openclaw/openclaw [plan]
- → Pull in the updated nodemailer security overrides openclaw/openclaw [plan]
References
- [1] fix(update): migrate retired Codex routes without losing the subscription billing path ↗ openclaw/openclaw
- [2] fix(cron): preserve literal script file paths ↗ openclaw/openclaw
- [3] improve(gateway): avoid rescanning streamed assistant text ↗ openclaw/openclaw
- [4] fix(deps): update nodemailer security overrides (#145477) ↗ openclaw/openclaw
- [5] fix(ci): register exact 9.5 plugin security inventory (#145670) ↗ openclaw/openclaw
- [6] chore(sync): mirror docs from openclaw/openclaw@398e107c5bc04f43f3db94478b82e2df8f8817bb ↗ openclaw/docs
- [7] chore(sync): mirror docs from openclaw/openclaw@103bdf8d147c95be35fea4c09f1d1ad182b9c77e ↗ openclaw/docs
- [8] chore(sync): mirror docs from openclaw/openclaw@3d7d21166f0962f05937376db16f3861a9b5bc85 ↗ openclaw/docs
- [9] chore(sync): mirror docs from openclaw/openclaw@21d7660630aefa0df12cb7f59c11c2bfbc4f12d9 ↗ openclaw/docs
- [10] chore(sync): mirror docs from openclaw/openclaw@8b5fa242a2fa2f3c689f3125304a8000807d1ef0 ↗ openclaw/docs