github openclaw/openclaw v2026.10.10-beta.4
openclaw 2026.10.10-beta.4
on GitHub

pre-release5 hours ago

2026.10.10-beta.4

Highlights

Changes

Fixes

  • Automations: preserve authenticated operator authority for explicit same-conversation scheduled follow-ups, including one-shot next_check rearming, while retaining role, session, cancellation, target, and tool-policy revocation boundaries. (#176422) Thanks @RomneyDa.
  • Gateway security: keep an environment-referenced hooks.token out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. (#179199) Thanks @VACInc and @RomneyDa.
  • Memory Wiki: preserve human-authored Notes when OKF concept pages are re-imported or removed from the producer bundle, including changed producer content and legacy pages without a marked Notes slot. (#175707, #179657; related #175700) Thanks @YangManBOBO and @RomneyDa.
  • Claude CLI: keep the native Claude session and its context when subagent completions or channel turns run in a Control UI-started session, instead of reseeding from saved history each time. (#178955; fixes #178953) Thanks @Marvinthebored and @RomneyDa.
  • Model catalogs: honor a configured primary account pin when deciding model readiness, so native Claude CLI models no longer appear as missing auth when the selected token profile is ready. (#178522; related #178502) Thanks @ericcaiwx-star, @RomneyDa, and @eduardonunesfreire-rgb.
  • Backup and restore: preserve supported legacy exec-approval allowlists when sanitizing snapshots instead of replacing them with deny-all; malformed policies remain fail-closed. (#164297) Thanks @wangmiao0668000666, @RomneyDa, @shanselman, @dor-sr, @cristianoc, and @brucemccurdy.
  • Linux companion: persist each saved Gateway dashboard's private browser identity across restarts, while removing storage for deleted Gateways so re-added endpoints pair as fresh devices. (#158908) Thanks @dor-sr, @RomneyDa, @shanselman, @wangmiao0668000666, and @brucemccurdy.
  • Agent database lifecycle: keep peer readers and borrowers alive when maintenance or PostgreSQL opening is refused, preserve the original refusal and clean-restart seal, and retain pre-dispatch recovery behavior when a worker generation disappears. (#175987, #163258, #179320) Thanks @RomneyDa, @shanselman, @dor-sr, @wangmiao0668000666, @brucemccurdy, @goutamadwant, and @hawkit.
  • macOS bundled Gateway: show the actual installed Gateway version, keep failed or incomplete recovery actionable, and prevent stale or pending update receipts from blocking a valid repair. (#181389) Thanks @shanselman, @RomneyDa, @dor-sr, @wangmiao0668000666, and @brucemccurdy.
  • Model refresh: let explicit catalog refreshes use their existing extended discovery budget through HTTP acquisition while ordinary preparation remains bounded. (#177313) Thanks @jlapenna and @RomneyDa.
  • Webhooks and scheduled scripts: classify trusted immediate producers as events, retain each webhook's own automation scope, and refresh disposed script hooks before execution without replaying completed effects. (#172775, #177825, #178904) Thanks @RomneyDa, @jlapenna, and @jalehman.
  • Runtime security: backport patched embedded runtimes to the 2026.10.10 line. (#181074) Thanks @RomneyDa and @joshavant.
  • Update finalization: keep a verified healthy target successful when a recognized late restart-health or legacy-wrapper maintenance step fails, while authority, data-at-risk, deferred-admission, and unknown failures remain fatal. (#181166; fixes #181020) Thanks @najef1979-code.
  • Package update recovery: automatically settle verified interrupted publications or retire untouched preparations, preserve the installed candidate and original Gateway recovery evidence, and keep live update ownership and restart authority fenced. (#181307; fixes #181235) Thanks @agroman1993.
  • CLI config writes and setup with a running Gateway: openclaw config set, config unset, and openclaw setup now send their change through the running Gateway as one config.patch instead of refusing, with the same result as an offline write, no restart while reload is off, and a success acknowledgement when the Gateway accepts a restart, so Windows companion setup completes again. (#182951, #184194, #184392, #184532, #185109) Thanks @RomneyDa.
  • Codex native subagents: unblock parent replies after native children finish, are interrupted, or complete follow-ups; stop resurrecting undeliverable child completions; replay completed grandchildren correctly after Gateway restarts; keep native tool declarations across completion turns; and let Stop succeed after parent thread reuse. (#173018, #175246, #177577, #179050, #179099, #183286, #181475; fixes #178395) Thanks @quqi1599, @Stronggenetics, @linancn, @mmartoccia, @wtfichigo, @Marvinthebored, and @RomneyDa.
  • Claude CLI: stop prompt-cache prefix churn after a child completion. (#172026) Thanks @Marvinthebored and @VACInc.
  • Scheduled runs: wait for tool results before answering, so cron run summaries report the real result instead of a premature "no results" reply. (#179690) Thanks @obviyus.
  • Agent restart recovery: release restart-recovery fences for killed runs so their conversations no longer stay blocked. (#181992; fixes #181952) Thanks @najef1979-code.
  • Windows exec: restore command execution for Gateways running as an S4U scheduled task when Store PowerShell is installed. (#182898; fixes #182652) Thanks @RomneyDa and @tre1d.
  • Kimi: give Kimi K3.1 Pro the K3 thinking and video controls. (#181923) Thanks @obviyus.

Complete contribution record

This audited record covers the complete v2026.10.10-beta.3..ed2b311 history: 60 in-range PRs + 0 retained seed-only PRs = 60 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

Release verification

Check out latest releases or
releases around openclaw/openclaw v2026.10.10-beta.4

Don't miss a new openclaw release

NewReleases is sending notifications on new releases.

Get notifications