140 wires and counting

$ follow OpenClaw

Keep up with OpenClaw in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-12
stories 150

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Codex route migration keeps subscription billing, cron script paths stop silently landing on neighbors

By RepoJournal · Filed · About OpenClaw · Composed from the cited sources · methodology

openclaw fixed an upgrade path where users with both ChatGPT OAuth and an OpenAI API key could have heartbeat and subagent traffic silently move onto metered API billing.

The top fix is the Codex route migration [1]. Users upgrading with both ChatGPT OAuth and an OpenAI API key could have heartbeat and subagent traffic silently move onto metered API billing; a custom official Completions adapter in working 7.x subscription configurations is the piece the retired routes now migrate onto. If you run that combination, the billing path is preserved rather than dropped.

Cron does the same kind of quiet wrong-file fix [2]. `cron add` and `cron edit` used to silently read a different script when a quoted filename contains leading or trailing whitespace: passing `"payload.js "` selected `payload.js` if that neighboring file existed, then reported success. All four payload and trigger file-argument producers now use the existing nonblank string reader, which preserves the original filename.

Two more changes landed in the gateway and dependency layer. Streamed assistant text is no longer rescanned on every fragment: the shared text merger records when an event provably appends text, and HTTP adapters reuse that fact only when the merge base matches actual wire progress, retaining prefix validation for corrections and withheld output [3]. Nodemailer security overrides were updated [4], and the CI plugin security inventory was pinned to an exact 9.5 set while preserving the frozen 9.4 optional findings, with future contexts and changed counts kept fail-closed [5].

The docs desk mirrored five upstream commits into openclaw/docs [6][7][8][9][10]. Routine sync churn, no action needed beyond normal review.

Action items

References

  1. [1] fix(update): migrate retired Codex routes without losing the subscription billing path ↗ openclaw/openclaw
  2. [2] fix(cron): preserve literal script file paths ↗ openclaw/openclaw
  3. [3] improve(gateway): avoid rescanning streamed assistant text ↗ openclaw/openclaw
  4. [4] fix(deps): update nodemailer security overrides (#145477) ↗ openclaw/openclaw
  5. [5] fix(ci): register exact 9.5 plugin security inventory (#145670) ↗ openclaw/openclaw
  6. [6] chore(sync): mirror docs from openclaw/openclaw@398e107c5bc04f43f3db94478b82e2df8f8817bb ↗ openclaw/docs
  7. [7] chore(sync): mirror docs from openclaw/openclaw@103bdf8d147c95be35fea4c09f1d1ad182b9c77e ↗ openclaw/docs
  8. [8] chore(sync): mirror docs from openclaw/openclaw@3d7d21166f0962f05937376db16f3861a9b5bc85 ↗ openclaw/docs
  9. [9] chore(sync): mirror docs from openclaw/openclaw@21d7660630aefa0df12cb7f59c11c2bfbc4f12d9 ↗ openclaw/docs
  10. [10] chore(sync): mirror docs from openclaw/openclaw@8b5fa242a2fa2f3c689f3125304a8000807d1ef0 ↗ openclaw/docs

Quick answers

What shipped in OpenClaw on September 12, 2026?
openclaw fixed an upgrade path where users with both ChatGPT OAuth and an OpenAI API key could have heartbeat and subagent traffic silently move onto metered API billing. In total, 100 commits and 50 pull requests landed.
Who contributed to OpenClaw on September 12, 2026?
4 developers shipped this update, including RoboClaw, Dallin Romney, steipete, and openclaw-docs-sync[bot].
What were the notable OpenClaw updates?
fix(update): migrate retired Codex routes without losing the subscription billing path, fix(cron): preserve literal script file paths, and improve(gateway): avoid rescanning streamed assistant text.