// aktualnosc openclaw
low GitHub Release

openclaw 2026.6.33

## 2026.6.33

### Highlights

  • **Safer network and secret boundaries:** provider streams, Discord REST responses, browser fetches, OAuth paths, and logs now cap hostile response sizes and keep Telegram credentials out of diagnostics. (#96989, #95412, #99428) Thanks @wangmiao0668000666, @Alix-007, @xialonglee, @liuhaiyang14, @Pick-cat, @mushuiyu886, @vincentkoc, @ZOOWH, @Pandah97, @solodmd, @zhangguiping-xydt, and @obviyus.
  • **More reliable long-running agents:** run release, liveness checks, and watchdog semantics now distinguish genuine stalls from active long model calls and wedged backends. (#102160) Thanks @obviyus, @kiagentkronos-cell, @alvelda, @alkor2000, and @vincentkoc.
  • **Stronger channel delivery:** Discord reconnects no longer silently drop queued messages or repeat ambiguous non-idempotent sends, while Telegram bot-to-bot and reply-fence handling preserve the intended thread and authorization result. (#100896, #103867, #106755) Thanks @tiffanychum, @Godecule, @yetval, @xialonglee, and @RomneyDa.
  • **Safer credential recovery:** service restarts preserve SecretRef-backed Telegram credentials, and OAuth repair no longer overwrites an already-valid destination profile. (#99124, #97541) Thanks @mushuiyu886, @1Wanker, @liuhao1024, @yetval, @Darren2030, @obviyus, and @RomneyDa.
  • **Extended-stable updates:** package installations can select, update from, and receive availability notices for the `extended-stable` channel without silently falling back to another release line. (#99811, #100438) Thanks @kevinslin.

### Changes

  • **Approval and tool authority:** Codex app-server commands now require an actual human/plugin approval, exec auto-review stays bound to the exact resolved command, and narrow tool allowlists remain owned by the factory that constructs them. (#103430, #103457, #104213) Thanks @obviyus, @brokemac79, @Pandah97, @wangmiao0668000666, and @pgondhi987.
  • **Scoped external tooling:** external MCP loopback clients use short-lived session-bound attach grants instead of inheriting mutable child-process authority, and Gateway message actions retain trusted requester provenance and reject untrusted callers. (#102031) Thanks @pgondhi987, @Glucksberg, @wings1029, @Alix-007, @machine3at, and @anagnorisis2peripeteia.

### Fixes

  • **Authorization and disclosure:** Gateway HTTP rejects disallowed browser origins before unauthenticated handling, permission repair stays confined to its intended include, MCP status output redacts secrets, and Gateway action bridges reject untrusted requesters. (#102881, #103267, #103396, #102031) Thanks @wangyan2026, @yetval, @NianJiuZst, @obviyus, @pgondhi987, and @brokemac79.
  • **Gateway and process stability:** agent-run caches are bounded, lock probes stop leaking file descriptors, close reasons preserve valid UTF-8, and heartbeat reads survive transient filesystem races. (#77973, #99291, #100047, #100389) Thanks @fede-kamel, @chenyangjun-xy, @zhangLei99586, @NarahariRaghava, @ogarciarevett, @markr9805, @849261680, @mushuiyu886, @vincentkoc, @wings1029, and @masatohoshino.
  • **Provider and browser reliability:** Anthropic-compatible partial streams stop hanging at their size bound, OpenAI Realtime uses the correct authentication and transcription secret flow, and remote CDP credentials stay out of responses. (#100686, #102518, #103139) Thanks @zhangguiping-xydt, @cxbAsDev, @sjf-oa, @sjf, @vincentkoc, and @obviyus.
  • **Ingress and webhook safety:** replayed Twilio requests are rejected under sustained traffic, corrupt queued channel rows are tombstoned without blocking later work, and Telegram tokens are redacted even when split across log chunks. (#101107, #105259, #103861) Thanks @zhangguiping-xydt, @vincentkoc, @mushuiyu886, @Pick-cat, and @xialonglee.

### Complete contribution record

This audited record covers the complete v2026.6.11..db7af38c0b228fbd57613f7517bce02b056aa9ab history: 169 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

#### Pull requests

  • **PR #98835** Related #98672. Thanks @moguangyu5-design and @jalehman and @AaronFaby.
  • **PR #96989** Thanks @wangmiao0668000666 and @vincentkoc.
  • **PR #95412** Thanks @Alix-007.
  • **PR #95108** Thanks @vincentkoc.
  • **PR #97499** Thanks @wangmiao0668000666.
  • **PR #102953** Thanks @ZOOWH.
  • **PR #97551** Thanks @Alix-007 and @vincentkoc.
  • **PR #97540** Thanks @Alix-007 and @vincentkoc.
  • **PR #95416** Thanks @Alix-007 and @vincentkoc.
  • **PR #97614** Thanks @cxbAsDev.
  • **PR #97808** Thanks @Pick-cat.
  • **PR #96445** Thanks @lin-hongkuan.
  • **PR #97961** Thanks @eleqtrizit.
  • **PR #97838** Thanks @pgondhi987.
  • **PR #98455** Thanks @wings1029.
  • **PR #100889** Thanks @mushuiyu886.
  • **PR #77973** Related #77976. Thanks @fede-kamel and @vincentkoc.
  • **PR #99291** Related #98958. Thanks @chenyangjun-xy and @zhangLei99586.
  • **PR #99428** Related #96982. Thanks @xialonglee and @liuhaiyang14.
  • **PR #98130** Thanks @Pick-cat.
  • **PR #100047** Related #99976. Thanks @NarahariRaghava.
  • **PR #100389** Related #99994. Thanks @ogarciarevett and @markr9805.
  • **PR #98682** Thanks @wings1029.
  • **PR #99479** Thanks @Pandah97.
  • **PR #101079** Thanks @cxbAsDev.
  • **PR #101160** Thanks @cxbAsDev.
  • **PR #102105** Thanks @wangmiao0668000666.
  • **PR #102450** Thanks @qingminglong.
  • **PR #100483** Related #100423. Thanks @versatagent.
  • **PR #102050** Thanks @Alix-007.
  • **PR #102952** Related #55365. Thanks @lidge-jun and @Mdx2025.
  • **PR #102160** Related #85826, #96168. Thanks @obviyus and @kiagentkronos-cell and @alvelda.
  • **PR #96224** Related #77986. Thanks @eleqtrizit and @fede-kamel.
  • **PR #96599** Thanks @sjf-oa and @sjf.
  • **PR #96615** Related #96589. Thanks @liuhao1024 and @yetval.
  • **PR #89812** Related #89626. Thanks @Petru2224.
  • **PR #92274** Related #91527. Thanks @fsdwen and @zackchiutw.
  • **PR #96396** Related #95784. Thanks @849261680 and @velvet-shark and @BryceMurray.
  • **PR #96096** Related #85900. Thanks @849261680 and @velvet-shark and @fanispoulinakisai-boop.
  • **PR #96831** Related #94083. Thanks @velvet-shark and @ooiuuii.
  • **PR #96142** Related #95574. Thanks @brokemac79 and @riazrahaman.
  • **PR #97044** Related #96983. Thanks @zw-xysk and @vincentkoc and @liuhaiyang14.
  • **PR #94452** Related #94040. Thanks @mushuiyu886 and @xrow.
  • **PR #96772** Thanks @wangmiao0668000666 and @vincentkoc.
  • **PR #96042** Thanks @Alix-007 and @vincentkoc.
  • **PR #96038** Thanks @Alix-007 and @vincentkoc.
  • **PR #96031** Thanks @Alix-007.
  • **PR #95103** Thanks @vincentkoc.
  • **PR #97620** Thanks @Alix-007 and @vincentkoc.
  • **PR #97693** Thanks @Alix-007.
  • **PR #98496** Thanks @Pandah97.
  • **PR #97784** Thanks @Alix-007.
  • **PR #97140** Related #97091. Thanks @galiniliev.
  • **PR #95543** Related #95474. Thanks @mikasa0818 and @ElliotDrel.
  • **PR #97504** Thanks @hugenshen.
  • **PR #90908** Thanks @shengting.
  • **PR #97356** Thanks @miorbnli.
  • **PR #97541** Related #97522. Thanks @liuhao1024 and @yetval.
  • **PR #97520** Related #97313. Thanks @zhangguiping-xydt and @pmdvedar-ai.
  • **PR #96544** Thanks @yetval and @vincentkoc.
  • **PR #97579** Thanks @hugenshen.
  • **PR #96644** Thanks @solodmd.
  • **PR #97214** Thanks @masatohoshino and @vincentkoc.
  • **PR #97372** Thanks @masatohoshino.
  • **PR #95774** Thanks @mushuiyu886.
  • **PR #95084** Related #90684. Thanks @jailbirt and @studentzhou-svg.
  • **PR #97367** Thanks @masatohoshino.
  • **PR #98693** Thanks @ZengWen-DT and @cursoragent.
  • **PR #89817** Thanks @masatohoshino.
  • **PR #96965** Related #96929. Thanks @zw-xysk and @YouToco.
  • **PR #100107** Thanks @frank-beans.
  • **PR #97861** Thanks @yetval.
  • **PR #96444** Thanks @lin-hongkuan.
  • **PR #96492** Thanks @yetval.
  • **PR #97870** Thanks @eleqtrizit.
  • **PR #98142** Thanks @RomneyDa.
  • **PR #98226** Related #98225. Thanks @ooiuuii.
  • **PR #99460** Related #99459. Thanks @ooiuuii.
  • **PR #98354** Thanks @Pick-cat.
  • **PR #98508** Thanks @lzyyzznl.
  • **PR #93379** Related #77755. Thanks @xialonglee and @jiveshkalra.
  • **PR #99070** Thanks @LeonidasLux.
  • **PR #98720** Related #98463. Thanks @wangmiao0668000666 and @zhangLei99586.
  • **PR #99800** Thanks @cxbAsDev and @vincentkoc.
  • **PR #100744** Thanks @lsr911 and @vincentkoc.
  • **PR #98262** Related #98239. Thanks @brokemac79.
  • **PR #101366** Related #84600. Thanks @deepujain and @13884379776l.
  • **PR #100835** Thanks @machine3at.
  • **PR #102035** Thanks @pgondhi987.
  • **PR #101617** Thanks @zhangguiping-xydt.
  • **PR #101744** Thanks @hugenshen and @cursoragent.
  • **PR #101739** Thanks @Alix-007.
  • **PR #102089** Thanks @Alix-007.
  • **PR #102661** Related #98038. Thanks @mabaty.
  • **PR #102403** Thanks @yetval.
  • **PR #102398** Thanks @yetval.
  • **PR #102426** Thanks @pgondhi987.
  • **PR #102840** Thanks @yetval.
  • **PR #103441** Related #68691. Thanks @hobo-l-20230331 and @aaajiao.
  • **PR #103267** Thanks @NianJiuZst.
  • **PR #104015**
  • **PR #103619** Thanks @pgondhi987.
  • **PR #104337** Related #104330.
  • **PR #102881** Related #102834. Thanks @wangyan2026 and @yetval.
  • **PR #105769** Thanks @mushuiyu886.
  • **PR #102924** Thanks @hugenshen.
  • **PR #106056** Thanks @pgondhi987.
  • **PR #106806** Related #103056. Thanks @yetval.
  • **PR #96143** Related #77616. Thanks @brokemac79 and @RomneyDa and @slideshow-dingo.
  • **PR #97271** Thanks @hugenshen.
  • **PR #96762** Thanks @wangmiao0668000666 and @vincentkoc.
  • **PR #97235** Thanks @zhangguiping-xydt and @vincentkoc.
  • **PR #95542** Related #95519. Thanks @mikasa0818 and @altaywtf and @zjx111234.
  • **PR #97571** Related #97564. Thanks @liuhao1024 and @nicelysalted.
  • **PR #86088** Thanks @liaoandi and @altaywtf.
  • **PR #99960** Thanks @masatohoshino and @vincentkoc.
  • **PR #85296** Thanks @alkor2000 and @vincentkoc.
  • **PR #100484** Thanks @vincentkoc and @litang9.
  • **PR #100722** Related #98864. Thanks @cxbAsDev and @carterstebbins23-spec.
  • **PR #94149** Related #84698. Thanks @ZengWen-DT and @cursoragent and @zus-assistant.
  • **PR #96065** Thanks @Darren2030 and @obviyus.
  • **PR #99124** Related #98107. Thanks @mushuiyu886 and @1Wanker.
  • **PR #99931** Related #98357. Thanks @ooiuuii.
  • **PR #91584** Thanks @hiragram and @openclaw-agent.
  • **PR #100896** Related #56610. Thanks @tiffanychum and @Godecule.
  • **PR #103867** Thanks @yetval.
  • **PR #101378** Related #91489, #92054, #98573. Thanks @wendy-chsy and @Vilard7 and @arturomagdiel and @studiodevlabs.
  • **PR #101394** Thanks @cxbAsDev.
  • **PR #100686** Thanks @zhangguiping-xydt.
  • **PR #102518**
  • **PR #103139**
  • **PR #103353** Related #103317.
  • **PR #103247**
  • **PR #103430** Related #103427.
  • **PR #103457** Related #103427.
  • **PR #103617** Related #103610.
  • **PR #103396** Related #103053. Thanks @obviyus and @yetval.
  • **PR #103074** Thanks @pgondhi987.
  • **PR #103822**
  • **PR #101107** Thanks @zhangguiping-xydt.
  • **PR #103620** Thanks @pgondhi987.
  • **PR #103861** Thanks @vincentkoc.
  • **PR #105259** Thanks @Pick-cat.
  • **PR #104213** Related #104208. Thanks @obviyus.
  • **PR #104715** Thanks @Leon-SK668.
  • **PR #105082**
  • **PR #102031** Thanks @pgondhi987.
  • **PR #106755**
  • **PR #106854**
  • **PR #103994**
  • **PR #102996**
  • **PR #99811** Related #99808. Thanks @kevinslin.
  • **PR #100438** Thanks @kevinslin.
  • **PR #102759** Related #102757. Thanks @vincentkoc.
  • **PR #102858**
  • **PR #102896**
  • **PR #103737** Thanks @vincentkoc.
  • **PR #103759** Thanks @vincentkoc.
  • **PR #103906**
  • **PR #104162** Related #104161. Thanks @vincentkoc.
  • **PR #104697**
  • **PR #105746** Thanks @vincentkoc.
  • **PR #99266** Thanks @RomneyDa.
  • **PR #100448** Thanks @kevinslin.
  • **PR #107832** Thanks @RomneyDa.
  • **PR #99212**
  • **PR #107872** Thanks @RomneyDa.
  • **PR #102600**
  • **PR #103204** Related #103189.

### Release verification

Extended-stable Gateway release: npm and container images only. GitHub Releases has one repository-wide Latest flag, not a per-channel Latest; this page is intentionally not Latest. The moving `extended-stable` selectors may advance, so use the exact `2026.6.33` references below for this release.

  • npm package: [`openclaw@2026.6.33`](https://www.npmjs.com/package/openclaw/v/2026.6.33)
  • npm registry tarball: [`openclaw-2026.6.33.tgz`](https://registry.npmjs.org/openclaw/-/openclaw-2026.6.33.tgz)
  • npm integrity: `sha512-53MCYfnMEzQmrh/mFNpqfUcQunZASPZ2qYOmqn6wq3K4gZPzV0QOMwjxOCU2C+VmQ5FqzVU8exy7j7pyL3EBzQ==`
  • Container images: [GHCR](https://github.com/openclaw/openclaw/pkgs/container/openclaw) and [Docker Hub](https://hub.docker.com/r/openclaw/openclaw/tags?name=2026.6.33), with exact tags `2026.6.33`, `2026.6.33-slim`, and `2026.6.33-browser` for amd64 and arm64
  • Container manifest digests: default/slim `sha256:99546785a121ccac065263d4b609c3dc08a396d260b20c837722e7998be0a6ee`; browser `sha256:91b9af17a0a5667defbb74a411da668054374c6165033e990a935f6a154cc48c`
  • Release commit: [`7af0cfc9c5488e03c4e2f528bdc7ac9f7778b35e`](https://github.com/openclaw/openclaw/commit/7af0cfc9c5488e03c4e2f528bdc7ac9f7778b35e)
  • Release workflows: [npm preflight](https://github.com/openclaw/openclaw/actions/runs/29817136995), [Full Release Validation](https://github.com/openclaw/openclaw/actions/runs/29817162968), [plugin npm publish](https://github.com/openclaw/openclaw/actions/runs/29825338302), [OpenClaw npm publish](https://github.com/openclaw/openclaw/actions/runs/29825660318), and [Docker Release](https://github.com/openclaw/openclaw/actions/runs/29817086729)
Zobacz oryginal
Wróc do aktualnosci