OpenClaw — full archive
159 daily briefings.
- Unified secret redaction and SSRF policy ownership, plus queue fixes to stop the DLQ bleed
- Clawsweeper acknowledges PRs at webhook receipt, cuts first-feedback latency
- MCP login now listens on the loopback redirect
- Clawsweeper shields against forged reviews, process crash fix
- ClawSweeper quarantine throttled GitHub reads, OpenClaw fixes false compaction
- Gateway drain-loop deadlock fixed, QA lease leaks closed
- Crabbox hardens provisioning recovery, OpenClaw proves QA coverage
- Delayed chat commands no longer survive gateway reconnects
- Tests, providers, and UI drift cleaned across OpenClaw
- Dev preflight and final checkout share build cache; Google signing and Talk transcripts hardened
- OpenClaw fixes OOM on oversized attachments, Telegram tap-to-copy login codes
- OpenClaw fixes delegated routing and tool schemas
- Healthy accounts keep actions despite failed credential
- External web search providers now detected on fresh installs
- ClawSweeper goes Codex-only and adds Cerebras, OpenClaw fallback
- OpenClaw drops implicit-main fallback, Clawsweeper bounds exact-review retries
- Auth migration now preserves credentials, CI watcher trusts live runs
- OpenClaw prunes dead tooling, doubles down on test consolidation
- Chat startup status visible, orphan transcripts fixed
- Exec approval hardening, Hyper-V provisioning hangs
- OpenClaw unifies Apple offline databases, drops media placeholders
- Sessions stop persisting media caption placeholder
- Gateway drain race fix, Tailscale Serve for WSL, setup fails closed
- Fixes for stale DashScope downloads and Telegram forward origins
- Plugin approvals now push to iOS devices; uploads and checks stop hanging
- Smarter CI reuse, tighter Copilot OAuth checks
- WebKit hosts silently ignored device cleanup; new in-page confirm lands
- Gateway fixes protected path refusals
- Fail-closed task registry, real Google Meet leaves
- Gateway suspension opens to plugin HTTP, STT acceleration gated on real local evidence
- Queue drop policy skips in-flight items; iOS renders Markdown headings natively
- Surrogate-safe truncation lands across OpenClaw security paths
- Workboard drawer actions restored, Matrix stream errors handled
- Security fixes in gateway PATH and temp workspaces
- Reply recovery and Android PTT lifecycle fixes land in OpenClaw
- OpenClaw extracts reusable @openclaw/ai runtime package
- Fix config-health migration warning, session drift hard invalidations, MCP stderr crash
- Ambient transcript watermark now scoped per session, DeepSeek V4 reasoning fixed on OpenRouter
- Telegram webhook durability and reply-target RPC calls land
- ClawSweeper passes security fix for agent skill MCP boundary drift
- OpenClaw ships seven security fixes across HTTP, Browser, and Exec surfaces
- OpenClaw bounds provider response reads against memory exhaustion
- OpenClaw doctor exposes plugin registry findings; fixes AbortError misclassification
- Bounded SSE and Google Chat reads prevent OOM; Codex waits for native tool completion
- Exec workdir checks fail early, Telegram reply loops capped
- HTTP agent traffic now emits model.usage diagnostics, auth failures surface in channels
- Heartbeat hook now fires on harness prompts
- Gateway install warns on wrapper overwrite, status hints for missing-secret diagnostics
- Telegram lane recovery fixes stuck inbound events
- Crabbox hardens secret redaction, redirect guards, and artifact validation
- Crabbox revokes Code viewer sessions on logout, adds Scaleway SSH leases
- CLI typo suggestions, iOS notification fix, axios internals cleanup
- OpenClaw prunes stale agent APIs, Clownfish tightens security review routing
- Docs translation CI throttled, queue fixes prioritize fresh canaries
- Authenticated adapter ingress, release hardening across OpenClaw
- Apple container inspect parsing hardened, QA scenarios move to YAML
- Copilot replay thinking blocks stripped, WhatsApp login persistence fixed
- Gateway mirrors commentary events, docs builder reusable for ClawHub
- Crabbox gains Hyper-V and OpenComputer providers, Islo adds Tailscale egress
- ClickClack explicit enable, durable auto-reply summaries
Never miss a OpenClaw briefing.
Get OpenClaw's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.
One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →