Raw dump of top-5 OpenClaw releases (16.06.2026) via GitHub REST API. Highlights of the digest: - v2026.6.8 stable: GLM-5.2 + Claude Haiku 4.5 catalog rows, OpenRouter/Vertex provider-prefix normalization, Telegram rich-message delivery, QMD memory search stable in transient mode, raw Memory Wiki source pages as source evidence, Skill Workshop symlink-write validation - v2026.6.7-beta.1: Kimi K2.7 Code added, Discord thread-title timeout, Anthropic thinking replay repair - v2026.6.6 stable: major security release — exec approvals fail closed on timeout, MCP stdio hardening, Telegram account-scoped topics Wiki changes: - tools/openclaw.md (new): platform reference with version timeline, 10 plattformrelevante changes vs our setup, rollout plan (awaiting Kai approval for v2026.6.8 update) - architecture/model-routing.md (updated): GLM-5.2-Support + provider-prefix normalization for v2026.6.8, distribution matrix updated - architecture/memory-system.md (updated): QMD stabilization, SQLite-NFS-WAL detection, raw-Memory-Wiki-source-pages as source evidence, full-reindex rollback recovery - concepts/llm/glm-5.2-zai-coding-model.md (updated): OpenClaw v2026.6.8 native provider adapter breaks Z.ai Coding Plan monopoly - index.md (updated): new tools entry, header datum 12. update, updated descriptions for memory/routing/glm-5.2, new raw sources row - log.md (updated): new ingest entry following schema
21 KiB
21 KiB
| type | source_url | retrieved | title | tags | scope | fetched_via | ||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| other | https://github.com/openclaw/openclaw/releases | 2026-06-16 | OpenClaw Releases — v2026.6.6 bis v2026.6.8 (Top 5 aktuell) |
|
index | GitHub REST API (releases endpoint, per_page=6) |
OpenClaw Releases — Index Snapshot (2026-06-16)
Roh-Dump der fünf aktuellsten OpenClaw-Releases via GitHub-REST-API. Quelle: https://github.com/openclaw/openclaw/releases Fetch: 2026-06-16 18:08 UTC
Dieser Dump ist die unveränderliche Quelle. Strukturell reduzierte Wiki-Aufbereitung
liegt unter wiki/tools/openclaw.md + Updates in wiki/architecture/model-routing.md,
wiki/architecture/memory-system.md, wiki/concepts/llm/glm-5.2-zai-coding-model.md.
1. v2026.6.8 (stable) — 2026-06-16 16:32 UTC
- Tag:
v2026.6.8(Release-Branch:release/2026.6.8) - Release-SHA:
844f405ac1be805d5c598922a37254f12ab6d765 - URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.8
- Author: @vincentkoc
- Asset:
OpenClaw-2026.6.8.dmg(40.8 MB),OpenClaw-2026.6.8.zip(55.8 MB),OpenClawCompanion-Setup-arm64.exe,openclaw-2026.6.8-dependency-evidence.zip
Highlights
- Telegram + WhatsApp Channel Delivery: Structured rich text (tabellen, listen, expandable blockquotes, intentional line breaks), prompt-preserving CLI backend delivery, retired native draft migration, safer rich-media boundaries, WhatsApp honoriert konfigurierte ACP-Bindings. (#92679, #93164, #84082, #89421, #92513)
- Agent + Gateway Recovery: Account-scoped DM sends, generated media completions, auto-reply message-tool final replies, reset archive fallback reads, restart shutdown aborts, yielded subagent pauses, trusted subagent thinking override fallback, yielded cron media, heartbeat dedupe, session identity prompts, unknown OpenAI agent selector rejection. (#92788, #91246, #92879, #91357, #92631, …)
- Provider/Model Handling: GLM-5.2 Support + Claude Haiku 4.5 catalog rows, OpenRouter und Google Vertex provider-prefix normalization, managed SecretRef auth, OAuth image-default routing via Codex, bounded model browse discovery, LM Studio binary thinking-off delivery, storeless OpenAI Responses replay gating, invalid OpenAI reasoning-signature + genericized Anthropic thinking-signature recovery, Claude 4.5 Copilot tool-streaming safety, OpenAI/Anthropic-family payload quarantine für unreadable/post-hook tool schemas.
/usageund reply payload hooks: Native full footer renderer, default template, fixed-decimal formatting, credential-aware limits, partial-count handling, warnings für broken templates.- UI/mobile: Workspace files collapsible, WebChat backscroll survives streaming, sidebar session picker interaktiv, iOS reconnects stale foreground gateways.
- Memory/State/Diagnostics: Oversized OpenAI embedding batches split vor 431s, QMD memory search stays available in transient mode, SQLite avoids WAL on NFS state volumes, stuck-session recovery no longer resets warning backoff, full memory reindexes preserve rollback/cache recovery, raw Memory Wiki source pages stop looking malformed, Infinity chunk limits stay genuinely unbounded.
Changes
- Providers/models: GLM-5.2 support, Claude Haiku 4.5 catalog entries, provider- qualified model IDs normalized across OpenRouter + Google Vertex.
- Web search: Key-free providers (Parallel Free, DuckDuckGo, Ollama, Codex Hosted Search) als explicit opt-ins, nicht auto-selected wenn keine API-backed Provider konfiguriert. (#93616)
- Channel plugins: Telegram rich-message delivery, WhatsApp ACP binding support, preserved line breaks, rich prompt handoff to CLI backends, transport fixtures.
- Agent commands:
/btwin CLI-backed sessions, CLI usage-error exits als usage failures klassifiziert. - Usage hooks: built-in full footer rendering, default footer templates, per-turn usage state, credential-aware limits, fixed-decimal formatting.
- Docs/operator guidance: node config examples, before-install hook scope, agent default concurrency comments, ZAI provider docs, channel/group docs.
Fixes (Kernauswahl, plattformrelevant)
- Channels: Account-scoped DM policy, intentional line breaks in Telegram/status,
rich Telegram final replies + tables + lists, Feishu dynamic-agent routes nach
persisted binding reuse, Slack outbound
message_senthooks, same-channel generated media completions, channel chunking around surrogate pairs + Infinity. - Discord: Auto-thread titles: 60s timeout + 4,096-token reasoning budget (clamped to model output cap).
- Agent/cron/Gateway runtime: Active main sessions marked before restart shutdown aborts, yielded subagent runs paused at terminal abort, trusted subagent thinking overrides clamped through provider/model fallback, yielded media completions preserved, channel message-tool final replies via auto-reply (internal hints hidden), reset archive fallback reads restored, heartbeat events de-duplicated, session identity exposed in runtime prompts, unknown OpenAI agent selectors rejected, admin privileges required for HTTP session/model override surfaces.
- Providers/model replay: Storeless OpenAI Responses replay compatibility, OpenAI reasoning-signature + Anthropic thinking-signature replay recovery, OAuth image defaults routed through Codex, Claude 4.5 in Copilot avoids eager tool streaming, unreadable and post-hook OpenAI/Anthropic-family tool schemas quarantined (ohne broadening allowed tool choices), LM Studio binary-thinking models erhalten explicit thinking-off requests, profile auth honored for SecretRef model entries, bounded model browsing, provider prefixes stripped wo runtimes bare IDs brauchen, nested embedding fetch failures surfaced.
- Memory/State/Diagnostics/Config: Header-too-large embedding batches split, QMD memory search enabled in transient mode, SQLite avoids WAL on NFS volumes, recovery scheduling preserved, full-reindex rollback/cache recovery, raw Memory Wiki source pages treated as source evidence, shell environment fallbacks contained in config write tests.
- Plugins + updates: Missing required platform packages during managed plugin install/update repaired, including omitted Codex platform binaries.
- Dependencies: Hono updated to 4.12.25.
- Release + test reliability: Slow Gateway/full-suite watchdogs extended, local full-suite shards split when throttled, plugin auth marker fixtures stabilized, brittle provider-ref error text avoided, Telegram RTT sampling folded into live QA evidence, QA scorecard mappings around canonical coverage IDs simplified, QA Lab bootstrap aligned with flow-only scenarios, false downgrade prompts für unresolved latest-tag updates vermieden.
Verification
- npm: https://www.npmjs.com/package/openclaw/v/2026.6.8
- integrity:
sha512-iziR8fi69+ojrtX7FYYvTpkGcVnmyLpIhvchgt5LFkkdHVWw973XAAekKVZ3/xQJ5FG4NwgHkXL0LLTrgsNOSQ== - Release-CI-Report: https://github.com/openclaw/releases/blob/main/evidence/2026.6.8/release-evidence.md
- macOS signed/notarized preflight, Swift validation, asset promotion alle grün
- Windows Hub promotion: from
openclaw/openclaw-windows-node@v0.6.3
2. v2026.6.8-beta.2 (prerelease) — 2026-06-16 01:50 UTC
- Tag:
v2026.6.8-beta.2(Release-SHA:b1736723d716b1abe1f8d324772371661146f3b8) - URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.8-beta.2
- Inhalt: Identisch zu v2026.6.8 (Highlights/Changes/Fixes), nur Verification-Block verweist auf Beta-Build-Links und post-publish recovery (35 npm plugins + 35 ClawHub packages verifiziert nach Registry-Propagation).
3. v2026.6.8-beta.1 (prerelease) — 2026-06-14 22:45 UTC
- Tag:
v2026.6.8-beta.1(Release-SHA:43d00c7724b5b4856ad4055b2dcd21ce6ef61550) - URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.8-beta.1
- Inhalt: Gleiche Highlights/Changes/Fixes wie stable v2026.6.8; markiert als
## 2026.6.8im Body (nicht mitv-Prefix). Beta-1 CI: Release-Publish- Orchestration fehlgeschlagen nach Plugin-Publish-Verification, dann direkter OpenClaw-npm-Recovery. ClawHub Plugin-Publish fehlgeschlagen wegensetupEntryMetadata in transport plugin (follow-up erforderlich).
4. v2026.6.7-beta.1 (prerelease) — 2024-06-13 09:42 UTC
- Tag:
v2026.6.7-beta.1 - URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.7-beta.1
- Body-Header:
## 2026.6.7(Note: kein 2026.6.7-stable; nur Beta)
Highlights (Highlights zusammengefasst)
- Channel delivery tighter: Slack same-channel finals persist in transcripts,
top-level
imagemessage-tool sends attach media, Telegram expandable blockquotes + spooled replay survive delivery, explicit silent replies stay silent, progress draft startup failures reported, channel action result pages fetchable incremental. (#92498, #92407, #92416, #92281, #92073, #92083, #88993) - Provider/Model resilient: Kimi K2.7 Code verfügbar, Kimi native tool-call
ids + replayed
reasoning_contentrepaired, Mistral skips unreadable tool schemas, Fireworks catalog parameters from manifests, DeepSeek keeps configured static transport, provider fallbacks resolve correctly, Anthropic thinking replay repaired, Anthropic Vertex stops re-marking transport-budgeted cache control. (#92554, #92396, #90242, #90326, #92265, #92293, #92286, #92387) - Context/Auth boundaries safer: Feishu leakt keine prompt-preface runtime
context, WebSocket payload handling hardened, CLI-backed
/btwfallback fails closed, local setup trust hardened, Skill Workshop symlink writes gated + validated before rollback metadata written. (#92589, #92593, #92226, #92175) - Agent/Memory/Codex/Cron/Update recovery: Invalid plugin model catalogs isolated, QMD startup failures survive fallback errors, Codex memory prompts stay registered, source message tool replies stoppen agent progress nicht mehr, structured unsupported-model errors classified, heartbeat/cron terminal state preserved, Linux service updates handoff cleanly, cron status reports SQLite store path. (#92564, #92218, #92618, #92350, #92343, #92280, #92231, #92225, #92144)
- UI/Docs/QA/Docker/Release proof: Accessibility contrast/focus/font fixes,
empty Workboard columns hideable, design-system docs, uptime monitors pointed
at
/health, Windows Hub docs pin verified stable installer links, QA evidence- scorecard taxonomy artifacts, QA Lab bundled into Docker images, lifecycle timeout cleanup survives leader exit. (#89822, #89615, #89827, #55768, #92608, #92605, #91484, #91500, #92087, #92566)
Changes
- QA + release validation emit scorecard taxonomy + evidence artifacts, split plugin ClawHub publishing paths, use trusted plugin npm publishing, keep plugin publish checks authoritative, align root package, publishable plugin manifests, generated baselines, native app versions für 2026.6.7 beta train.
- Docs + operator guidance: Gateway uptime monitoring, design-system guidance, Windows Hub stable download pins, removed stale ClawHub navigation, WhatsApp inbound compatibility, doctor/update progress behavior.
- Matrix plugin release metadata aligned with core beta train.
Fixes
- Channels: Slack transcript mirrors, Telegram polling conflicts + transient draft-preview failures, outbound image sends, explicit silent replies, progress-draft startup errors, paged action results, WhatsApp inbound aliases, local setup trust, heartbeat commitment delivery.
- Provider/model/tool replay: Mistral schemas, Fireworks manifest model parameters, Kimi K2.7 Code/tool-call/reasoning replay, DeepSeek transport inheritance, managed SecretRef auth, static model fallbacks, Anthropic thinking replay, Anthropic Vertex cache control, OTLP trace correlation.
- Agent/runtime recovery: Invalid plugin model catalogs isolated, Codex memory prompt registration preserved, source message tool replies continue, structured unsupported-model errors classified, QMD startup failures reported neben fallback errors, cron timeout/cancel state preserved, disabled heartbeat one-shot retries working, Linux service auto-updates readable + handoff.
- Install/sandbox/doctor/security: CLI skill prompts from materialized paths,
CLI-backed
/btwfails closed, doctor SecretRef previews, blocked external channel plugins diagnosed, Skill Workshop symlink writes validated + gated, Node package install failures stop processing, unsupported daemon service status readable. - Release/CI/E2E/Docker/dependency gates: lifecycle timeout cleanup, QA Lab runtime in Docker images, esbuild audit pin updated, Docker process cleanup hardened, plugin publish checks authoritative, noisy redundant proof scripts entfernt.
5. v2026.6.6 (stable) — 2026-06-12 11:04 UTC
- Tag:
v2026.6.6(Release-SHA:8c802aa683510c7f7503597b54c3021733245e59) - URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.6
- Integrity:
sha512-oMYoQ8a7zummw1tD+AX98yYLzqoq0tQmYWHG65AA0ZivgzmOb2oD0cVdhcWP9IT3opkHdJ5vBdWywUe6xWQXtw==
Highlights (Security-Release — höchste Priorität für unser Setup)
- Security boundaries substantially tighter across: transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, Teams group actions. Exec approvals now fail closed on timeout. (#91529, #91618, #91615, #91619, #91741, #91745, #91746, #91748, #91749, #91750, #91751, #91752, #91763, #89938)
- Telegram delivery safer + more coherent: Account-scoped topics route to
correct agent, streamed text survives tool calls,
/compactworks on generic ingress, callback handling uses concrete APIs, draft chunking shared, durable dispatch dedupe moved into SDK, unauthorized DM text stays out of cache + prompt context. (#91189, #88682, #89588, #90212, #91876, #91874, #91904, #91478, #91915) - iMessage recovery + delivery: Always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, actionable inbound startup diagnostics. (#91335, #91449, #88969, #88530, #91783, #91785)
- Browser + MCP connectivity: Existing-session CDP support, discovered
WebSocket validation, default-profile
cdpUrlhandling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE auth, broader schema compatibility. (#91422, #89851, #91736, #91747, #91451, #80143) - Control UI startup + first-reply latency: Cached model metadata, removal of startup catalog wait, lazy slash-command loading, first-event tracing with slow-reply diagnostics. (#91531, #91538, #91568, #91583, #91598)
- Provider support expands: OpenRouter OAuth onboarding, Claude Fable 5 adaptive thinking, Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, Gemma 4 reasoning replay preserved. (#91830, #91882, #91590, #88630, #88768, #91696)
Changes (Auswahl)
- CLI progress: Emit Claude CLI commentary progress events, bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding.
- Observability: Trusted diagnostics channels capture tool input/output content, first-assistant-event traces, warn on slow initial replies.
- Plugins/ClawHub: Dogfood reusable package publishing, dry runs skip publish approval, declared installed trusted hooks, report managed plugin version drift, warn instead of failing on retired Skill Workshop config.
- Memory/providers: Local llama.cpp runtime moved into its provider plugin, batch embeddings across files, persist agent model catalog cache, QMD JSON search one-shot + filtering stale REM recall previews.
- Channels/mobile: QQBot group mention toggle, iPad + iPhone control surfaces, active connection host in TUI footer.
- Performance: Prewarm TUI runtime plugins, dedupe plugin auto-enable
fanout, stop
/modelsderived-registry rescan storms, trim dense text-delta snapshots, reuse prepared startup model metadata.
Fixes (Auswahl, plattformrelevant)
- Agent/session recovery: Drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main + visible replies, preserve Codex context-engine compaction ownership, project thinking catalog compatibility through SDK sessions, retry same-model assistant calls across short rate-limit windows, lower default compaction timeout to 180s, keep provider-failure terminal lifecycle state correct.
- User-visible content boundaries: Suppress Codex/Harmony protocol artifacts,
neutralize browser + LanceDB memory media directives, redact transcript
images, preserve native
/compactreplies through source suppression. - Channel delivery: WhatsApp captured replies attached to successor controller after restart, Feishu rate limits retry, Mattermost thread replies preserved, LINE webhook paths canonicalized, Discord reply hydration + runtime timeout exports restored, OpenAI Realtime WebRTC assistant transcripts shown.
- Cron: Cancel active task runs cleanly, preserve terminal timeout/cancel state, recover no-deliver tool warnings statt silent loss.
- Gateway/config/auth: Share approval runtime socket token, replace arrays
explicitly in
config.patch, keep indexedreplacePathsconsent from widening to whole arrays, reject malformed Gateway RPC timeout inputs, skip deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, arm QMD startup maintenance. - Providers/Codex: Clarify quota errors, restore Codex synthetic usage
line, canonicalize Codex protocol assets, require API-key auth for realtime
voice, normalize ACP model refs, preserve Gemma 4
reasoning_content, honor Ollama's provider-declared thinking default in SDK sessions, avoid guardian review for local models. - Updates/builds: Recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm, seed correct Docker store packages, keep ClawHub dry-run + publish paths reusable, keep beta GitHub release pages draft bis OpenClaw npm + dependency evidence + postpublish verification + required plugin publishes pass.
- Android: Avoid
dataSyncforeground-service type for persistent nodes. - Native hooks: Bound relay lifetimes so abandoned native hook connections cannot linger indefinitely.
Verification
- npm: https://www.npmjs.com/package/openclaw/v/2026.6.6
- Full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.6.6/release-evidence.md
Cross-Release Patterns (plattformrelevant)
| Bereich | Trend seit 2026.6.6 | Direkter Impact für unser Setup |
|---|---|---|
| Security boundaries | Tightening: exec approvals fail closed, MCP stdio, ACP bypasses | High — wir laufen auf ollama/minimax-m3 (local) + Telegram + Discord |
| Memory | QMD JSON search stabilisiert, batch embeddings, NFS-WAL vermieden | Medium — S2 (OpenClaw built-in) ist unsere primäre Memory |
| Model routing | OpenRouter/Vertex prefix normalization, GLM-5.2 Support, LM Studio binary thinking-off, OAuth image defaults via Codex | High — berührt unseren openrouter/auto Fallback + zukünftiges GLM-5.2 Routing |
| Telegram | Rich-message delivery, expandable blockquotes, account-scoped topics, intent-preserving line breaks | High — Hauptkanal |
| Subagents | Trusted subagent thinking override fallback, yielded subagent pauses bei abort, channel message-tool final replies hidden | High — wir spawnen regelmäßig Subagents |
| Heartbeat | De-duplication main-session events, snapshot of session identity in runtime prompts | Low — Heartbeats sind sideband |
| Skill Workshop | Symlink writes gated + validated, retired config wird warning statt failure | High — wir nutzen Skill Workshop aktiv |
| Plugin updates | Missing required platform packages repaired, Hono 4.12.25 | Medium — Codex platform binaries jetzt korrekt mitinstalliert |
| Admin boundaries | HTTP session/model override surfaces require admin | Medium — relevant falls wir HTTP-Override nutzen |
Verwandte Wiki-Dateien
wiki/tools/openclaw.md(neu erstellt 2026-06-16) — Übersicht + Versions-Timelinewiki/architecture/model-routing.md(Update 2026-06-16) — GLM-5.2 + Provider-Prefixwiki/architecture/memory-system.md(Update 2026-06-16) — QMD + SQLite-WALwiki/concepts/llm/glm-5.2-zai-coding-model.md(Update 2026-06-16) — Offizielle OpenClaw-Integrationwiki/concepts/llm/llm-knowledge-base.md— OpenClaw native raw Memory Wiki source pages support