OpenClaw 2026.10.6 is a critical patch release focused entirely on reliability and security, with no new user-facing features. The most significant change is a mandatory upgrade to Node.js 24.22.1+ or 26.12.1+ to address compromised TLS certificate keys; `openclaw update` will guide you through this. This release also brings safer update mechanisms, improving recovery from platform-specific failures on Windows and macOS, and allowing clean retirement of frozen Gateway startup owners. Data integrity is enhanced with doctor and migration paths now refusing malformed workspace imports, preserving malformed Notes bytes, rejecting unsafe non-UTF-8 wiki rewrites, and retaining staging evidence during restore inspection. Reliability across restarts is a major theme, with queued turns, watched child results, dead-lettered deliveries, and streamed replies now surviving recovery without data loss or duplication. Provider and model resilience has been improved, ensuring consistent behavior for GPT-5.6 tool turns, OpenRouter DeepSeek tool calls, LM Studio overflow recovery, parallel OpenAI reasoning settings, and model retry/fallback budgets. Windows and mobile stability are also addressed, fixing startup blocks in fresh Windows state stores, Proxy-backed environments, and stored Anthropic credentials, while iOS Talk and chat connectivity now recover from first-reply and timeout failures. Agent and tool-call recovery is more robust, with unfinished tools timing out visibly, context overflow compacting after steered tool results, and malformed calls continuing after earlier refusals. Channel delivery correctness is improved for WhatsApp, Telegram, Slack, and Discord, preventing message loss or duplication. Worker and worktree recovery ensures hosts reclaim worker capacity after reboot, partial-clone worktrees repair missing objects, and child-result and exec-wake evidence survives Gateway restarts. This is a recommended upgrade for all users to ensure security, stability, and data integrity.