/breaking

Safer update activation and recovery: verified activations remain successful through later maintenance or ledger errors, interrupted package update... | Database and worker continuity: maintenance refusals preserve peer readers and borrowers, incompatible retained agent databases stay isolated, empt...

#53794 Retain rollout migration locks across worker cancellation @jif-oai | #55388 Mark transcript_v2 as removed @etraut-openai | #55524 Make the startup migration contention test deterministic @jif-oai

fix(cli): preserve ${VAR} placeholders during deprecated settings migration by @villahernandez-coder in https://github.com/google-gemini/gemini-cli...

Fixed plugins and skills synced from claude.ai being removed, sometimes mid-session, after a disk read error

Patched Node runtime required: OpenClaw now requires Node 24.22.1+ on the 24 line or 26.12.1+ on the 26 line, which reject TLS chains signed with t... | Data-preserving migrations and backups: Doctor and migration paths now refuse malformed or lossy workspace imports, preserve malformed Notes bytes,... | Doctor and managed plugins: repair empty retired-plugin metadata, clear resolved migration warnings, and converge app-managed plugins onto the inst...

Removed the notes from claude plugin validate that predicted where a mod's hooks would run | Removed the "(research preview)" label from the /fast dialog title on Opus 5.5

Plugins now run only in worker threads (the default, CLINE_PLUGIN_MODE=worker) or in the subprocess sandbox (sandbox). The in_process mode is remov... | setHubDaemonLauncher lets an embedding host start the hub daemon through a bundled Cline CLI, and ensureDetachedHubServer gains a beforeSpawn hook ...

Clear MCP sign-in state when the server is removed.

Experimental PostgreSQL: add an experimental PostgreSQL engine for the Workboard store, select the shared-state engine at its owner, generate Postg... | Plugins and SDK: allow per-run model fallback overrides, fork a session's live context for background side questions, let plugins steer a session's... | More: expose wrapped browser observations to Code Mode, allow pausing automatic team-report collection, and add scoped startup migration backups. (... | State ownership: keep secret, catalog, config, agent, plugin, backup, device, Memory, Matrix, and Workboard writes with the running Gateway, protec... | Update diagnostics: show canary, Doctor, and handoff timings, explain retention, journal, and migration coverage, report LaunchAgent and snapshot f...

Updating from 2026.8.35: cron jobs approved with "allow always" keep running unattended after the update, pnpm 12 Gateway services left on a delete...

Desktop): drop pool-limit notification wiring main added after the pool subsystem was removed (c3632fcc) | Retain explicit verified deletion after read-only export migration (23456236) | Preserve ordinary native retry fingerprints through callback migration (6083e9ed) | Retain legacy session writers during reader migration (82dfb85d) | Record isolated worker inference proof and remaining migration gates (b762d80c)

Fixed claude --help naming a removed tool in its description of --restricted | Removed the --sandbox and --no-sandbox flags from claude remote-control, which had no effect; passing either now exits with an error. Set sandbox.e...

Plugin authors: the old plugin compatibility import layer is gone (#126164), hermes sync (Skill Sync) was removed (#132465), and the bundled tirith... | Prompt caching — opt-in cache_ttl: auto (1h interactive, 5m subagents/cron); big sessions confirm a cache-breaking /model; compaction keeps the pre... | Moved out of core — Spotify and Langfuse became official plugins (auto-migrated); tirith was removed, its key checks built in. (#135389, #133832) | Collective Wisdom V1 (an in-tree org skill marketplace) was merged and then removed; there is no wisdom code in this release. (#94266 — @shannonsands)

Added size, weight, mono and tabular to a mod's Text and named spacing steps (xs to xl) to its Box; bold is deprecated in favor of weight | Fixed Cowork cloud sessions running the old version of an account plugin changed, removed or disabled from another device until the session restarted | Fixed mods' hooks being handed values with __proto__ keys silently removed, which could skip a tool.check guard on a tool call another mod made

Stuck updates recover: updates settle package-activation journals after filesystem remounts or device-number drift, ride out a briefly locked state... | Plugin SDK compatibility: createSessionHeaderLink is restored in openclaw/plugin-sdk/control-ui as a deprecated export for plugins built against 20... | Update outcomes: updates with a running Gateway no longer record false post-install failures after migration, unsafe Doctor recovery guidance is ke...

Doctor keeps your plugins and data: Doctor preserves installed plugins' configuration when path safety checks block them, leaves malformed UTF-8 ro... | Tool approval hooks: ordinary hooks can no longer rewrite trusted-inline-approved tool arguments without another approval, and transforming plugins... | Codex runtime compatibility: plugin admission rejects official Codex runtimes below 2026.9.7 with update and repair guidance, and incompatible plug... | Update outcomes: accepted Gateway update handoffs are not reported as failures, recorded successes stay successful with a warning about stopped cha...

Doctor and update recovery: Doctor no longer stops on residual legacy imports, stale Gateway locks, slow state inspection, memory reindex locks, or...

Security boundaries: fail closed on unresolved A2A peer token references and when the process census cannot prove a temp root is unused, and reject... | Status and diagnostics: stop deep status blaming config for an unreadable state database, report startup migrations and channel logouts accurately,... | Channel security: stop removed X allowlist senders from reaching dispatch mid-authorization, redact credentials in Discord PluralKit, LINE, and Tlo... | Exec and tools: preserve channel context in node exec, prevent NUL commands from breaking shutdown, stop stalled sandbox finalization loops, advert... | Talk and voice calls: keep restored calls and receipts honest, stop sharing answers across consults, preserve Talk completion status, settle voice ...

Fixed $.agent.register succeeding from a mod's hook that was still running after the mod was reloaded or removed; the call is now refused | [Claude Tag] Fixed links to URLs that contain parentheses breaking in some of Claude's Slack replies and task checklists, which showed stray bracke...

Fixed --tools and --restricted not applying to built-in tools that register after launch, and deprecated tool names reaching tools outside the call... | Fixed temporary files left under ~/.claude/seed-admin by an interrupted /ultrareview upload never being removed by the retention cleanup | Fixed Desktop and SDK sessions refusing to switch back to auto mode until restart after disableAutoMode was removed from settings | Fixed the prompt sent after a /rewind being lost, and the removed turns coming back, when the session was moved to the background or resumed after ...

Options that were accepted but never did anything are removed and now fail with "unknown option": cline history --page, and cline schedule create/u...

Fixed Claude being told to continue or message subagents with SendMessage in sessions, including resumed ones, where a host, a permission rule or a...

#14813 8b144bb - Show to-do progress in the session dock above the prompt. A small progress chip shows how many items are done and the current item... | #14721 b299b97 - Keep pre-warmed Agent Manager worktrees outside the project folder. .kilo/worktrees/ is now only created when you create a worktre... | #14798 b8d0cf1 - Scroll wide MCP tool input and output horizontally instead of clipping it, and keep words in MCP output tables from breaking into ...

#14813 8b144bb - Show to-do progress in the session dock above the prompt. A small progress chip shows how many items are done and the current item... | #14721 b299b97 - Keep pre-warmed Agent Manager worktrees outside the project folder. .kilo/worktrees/ is now only created when you create a worktre... | #14798 b8d0cf1 - Scroll wide MCP tool input and output horizontally instead of clipping it, and keep words in MCP output tables from breaking into ...

Existing agents can be migrated to local Claws with the explicit, consented openclaw claws migrate <agent-id> workflow, preserving their workspace ... | Breaking change: third-party plugins importing retired compatibility facades or whole-session-store helpers must migrate before upgrading. Use focu... | Awaited session persistence APIs commit through the writer. Deprecated synchronous adapters remain until the next major with warnings; this additio... | Memory and transcript persistence: bound embedding-cache migrations and report oversized rows, reduce transcript-copy overhead, and move lifecycle ...

Safer updates and recovery: preserve plugin settings, prevent duplicate Gateways, handle pnpm package updates without terminal failures, and retain... | Update safety: preserve incompatible-plugin settings through recovery, keep retained plugin records during migration, avoid pnpm terminal failures,...

Fixed background sessions that could not be reopened from claude agents after the agent exited and removed the worktree the session was started in

#14682 979e02c - Stop a single sub-agent from its task card, and follow the background agents of the current run next to the working status and ses...

#14682 979e02c - Stop a single sub-agent from its task card, and follow the background agents of the current run next to the working status and ses...

Removed the browser link from /ultrareview and claude ultrareview output

[VSCode] Fixed uninstalling a plugin from the Manage plugins dialog, which removed the wrong installation or failed for a plugin installed for the ...

Preserve prompt cache breakpoints only for first-party OpenAI providers, avoiding incompatible requests to custom providers.

Fixed tab bars in dialogs such as /config and /plugin breaking the title and tab labels mid-word in a narrow terminal; a tab that doesn't fit now m...

Changed the ultracode visuals in /effort and the prompt input to plain styling (no ripple, border flourish or keyword glimmer) and removed the dyna...

Fixed API errors from an HTML error page (such as a proxy's 429 or 502 page) printing the page's raw markup or leaving out the HTTP status, and err... | Removed the leftover "(removed)" /agents entry from the command menu and /help; typing /agents still explains where the wizard went

Fixed the prompt line staying scrambled on Windows terminals after invisible characters were removed on Enter; the screen is now repainted so you r... | [VSCode] Improved prompt handling in the chat box: invisible Unicode formatting and tag characters are removed from pasted text with a notice, and ... | [Claude Code on the web] Removed the empty repository picker shown when starting a session on a self-hosted environment in an organization where an...

Telegram bots must @mention when bots_require_mention is on, breaking bot-to-bot loops (#106534); Matrix renders LaTeX (#106515); Signal renders ma...

Safer updates: rehearse core and plugin changes in isolated candidate state before activation, support eligible 2026.9.2 migrations, and recover ab... | Breaking — Node runtime: require Node 24.16.0 or newer on 24.x, or Node 26.1.0 or newer; Node 26 is recommended. Upgrade Node before OpenClaw to pr... | Breaking — execution-policy SDK: move the retired exec-mode and comparator helpers from infra-runtime to execPolicy on openclaw/plugin-sdk/agent-ha... | Breaking — approval SDK: import approval account-resolution helpers from approval-native-runtime, adapt session filtering to the full matchesApprov... | Breaking — SDK aliases: replace channel-inbound.buildChannelTurnMediaPayload with buildChannelInboundMediaPayload; infer the retained abortAndDrain...

Supply-chain response — the Blender MCP catalog entry and skill were removed after an upstream compromise (#83404); plugin installs get Tier-1 secu... | Electron rolled back to 40.10.2; TCC interpreter anchor removed (superseded by the signing-identity approach that shipped).

Removed outdated OpenCode Go first-month discount messaging and pricing.

Removed built-in Qwen sampling defaults that could send unsupported settings. | Ignore malformed model pricing instead of breaking usage cost calculation.

Readonly config loader at 29 call sites (28× cheaper reads); per-turn config deepcopies killed (telemetry gate 54×); one raw config.yaml parse per ... | Canonical config loaders for behavioral reads; table-driven config migration registry; DEFAULT_CONFIG extracted to config_defaults.py; auto-migrati... | hermes import-agent — one-command migration from Claude Code / Codex CLI setups (#72190 — @teknium1) | Office skills bundled: docx, xlsx, pdf + refreshed powerpoint; skills-tree debloat continues (yuanbao, segment-anything, jupyter, heartmula, audioc... | Credential pool: reset-aware primary restore (stay on fallback until the rate-limit window resets) + deferred-refresh locking fixes; FTS UPDATE tri...

~80% TTFT cut — Discord capability detection off the critical path (token-keyed 24h disk cache + background refresh), Ollama probe skipped for know... | Unified delegation concurrency caps (max_async_children deprecated); explain long provider waits on the live status line; deterministic tool-output... | hermes config get / unset; warn on unknown root config keys + doctor deprecated-key reporting; display.timestamp_format (#65540, #67370, #40622 — @...

Removed the agent-callable send_message tool; coding-context posture across CLI/TUI/desktop/ACP; read_file extracts .ipynb/.docx/.xlsx to text (#47...

Removed (redundant / dead): spotify (→ Spotify plugin's 7 native tools), linear (→ hermes mcp install linear), kanban-codex-lane, debugging-hermes-...