knowledge-base/raw/other/2026-06-16_openclaw-releases-v2026.6.8.md
Hector ea7c8c3abe ingest(github): openclaw releases v2026.6.6-v2026.6.8
Raw dump of top-5 OpenClaw releases (16.06.2026) via GitHub REST API.

Highlights of the digest:
- v2026.6.8 stable: GLM-5.2 + Claude Haiku 4.5 catalog rows, OpenRouter/Vertex
  provider-prefix normalization, Telegram rich-message delivery, QMD memory
  search stable in transient mode, raw Memory Wiki source pages as source
  evidence, Skill Workshop symlink-write validation
- v2026.6.7-beta.1: Kimi K2.7 Code added, Discord thread-title timeout,
  Anthropic thinking replay repair
- v2026.6.6 stable: major security release — exec approvals fail closed on
  timeout, MCP stdio hardening, Telegram account-scoped topics

Wiki changes:
- tools/openclaw.md (new): platform reference with version timeline, 10
  plattformrelevante changes vs our setup, rollout plan (awaiting Kai approval
  for v2026.6.8 update)
- architecture/model-routing.md (updated): GLM-5.2-Support + provider-prefix
  normalization for v2026.6.8, distribution matrix updated
- architecture/memory-system.md (updated): QMD stabilization, SQLite-NFS-WAL
  detection, raw-Memory-Wiki-source-pages as source evidence, full-reindex
  rollback recovery
- concepts/llm/glm-5.2-zai-coding-model.md (updated): OpenClaw v2026.6.8
  native provider adapter breaks Z.ai Coding Plan monopoly
- index.md (updated): new tools entry, header datum 12. update, updated
  descriptions for memory/routing/glm-5.2, new raw sources row
- log.md (updated): new ingest entry following schema
2026-06-16 20:17:21 +02:00

21 KiB

type source_url retrieved title tags scope fetched_via
other https://github.com/openclaw/openclaw/releases 2026-06-16 OpenClaw Releases — v2026.6.6 bis v2026.6.8 (Top 5 aktuell)
openclaw
releases
github
changelog
model-routing
security
index GitHub REST API (releases endpoint, per_page=6)

OpenClaw Releases — Index Snapshot (2026-06-16)

Roh-Dump der fünf aktuellsten OpenClaw-Releases via GitHub-REST-API. Quelle: https://github.com/openclaw/openclaw/releases Fetch: 2026-06-16 18:08 UTC

Dieser Dump ist die unveränderliche Quelle. Strukturell reduzierte Wiki-Aufbereitung liegt unter wiki/tools/openclaw.md + Updates in wiki/architecture/model-routing.md, wiki/architecture/memory-system.md, wiki/concepts/llm/glm-5.2-zai-coding-model.md.


1. v2026.6.8 (stable) — 2026-06-16 16:32 UTC

Highlights

  • Telegram + WhatsApp Channel Delivery: Structured rich text (tabellen, listen, expandable blockquotes, intentional line breaks), prompt-preserving CLI backend delivery, retired native draft migration, safer rich-media boundaries, WhatsApp honoriert konfigurierte ACP-Bindings. (#92679, #93164, #84082, #89421, #92513)
  • Agent + Gateway Recovery: Account-scoped DM sends, generated media completions, auto-reply message-tool final replies, reset archive fallback reads, restart shutdown aborts, yielded subagent pauses, trusted subagent thinking override fallback, yielded cron media, heartbeat dedupe, session identity prompts, unknown OpenAI agent selector rejection. (#92788, #91246, #92879, #91357, #92631, …)
  • Provider/Model Handling: GLM-5.2 Support + Claude Haiku 4.5 catalog rows, OpenRouter und Google Vertex provider-prefix normalization, managed SecretRef auth, OAuth image-default routing via Codex, bounded model browse discovery, LM Studio binary thinking-off delivery, storeless OpenAI Responses replay gating, invalid OpenAI reasoning-signature + genericized Anthropic thinking-signature recovery, Claude 4.5 Copilot tool-streaming safety, OpenAI/Anthropic-family payload quarantine für unreadable/post-hook tool schemas.
  • /usage und reply payload hooks: Native full footer renderer, default template, fixed-decimal formatting, credential-aware limits, partial-count handling, warnings für broken templates.
  • UI/mobile: Workspace files collapsible, WebChat backscroll survives streaming, sidebar session picker interaktiv, iOS reconnects stale foreground gateways.
  • Memory/State/Diagnostics: Oversized OpenAI embedding batches split vor 431s, QMD memory search stays available in transient mode, SQLite avoids WAL on NFS state volumes, stuck-session recovery no longer resets warning backoff, full memory reindexes preserve rollback/cache recovery, raw Memory Wiki source pages stop looking malformed, Infinity chunk limits stay genuinely unbounded.

Changes

  • Providers/models: GLM-5.2 support, Claude Haiku 4.5 catalog entries, provider- qualified model IDs normalized across OpenRouter + Google Vertex.
  • Web search: Key-free providers (Parallel Free, DuckDuckGo, Ollama, Codex Hosted Search) als explicit opt-ins, nicht auto-selected wenn keine API-backed Provider konfiguriert. (#93616)
  • Channel plugins: Telegram rich-message delivery, WhatsApp ACP binding support, preserved line breaks, rich prompt handoff to CLI backends, transport fixtures.
  • Agent commands: /btw in CLI-backed sessions, CLI usage-error exits als usage failures klassifiziert.
  • Usage hooks: built-in full footer rendering, default footer templates, per-turn usage state, credential-aware limits, fixed-decimal formatting.
  • Docs/operator guidance: node config examples, before-install hook scope, agent default concurrency comments, ZAI provider docs, channel/group docs.

Fixes (Kernauswahl, plattformrelevant)

  • Channels: Account-scoped DM policy, intentional line breaks in Telegram/status, rich Telegram final replies + tables + lists, Feishu dynamic-agent routes nach persisted binding reuse, Slack outbound message_sent hooks, same-channel generated media completions, channel chunking around surrogate pairs + Infinity.
  • Discord: Auto-thread titles: 60s timeout + 4,096-token reasoning budget (clamped to model output cap).
  • Agent/cron/Gateway runtime: Active main sessions marked before restart shutdown aborts, yielded subagent runs paused at terminal abort, trusted subagent thinking overrides clamped through provider/model fallback, yielded media completions preserved, channel message-tool final replies via auto-reply (internal hints hidden), reset archive fallback reads restored, heartbeat events de-duplicated, session identity exposed in runtime prompts, unknown OpenAI agent selectors rejected, admin privileges required for HTTP session/model override surfaces.
  • Providers/model replay: Storeless OpenAI Responses replay compatibility, OpenAI reasoning-signature + Anthropic thinking-signature replay recovery, OAuth image defaults routed through Codex, Claude 4.5 in Copilot avoids eager tool streaming, unreadable and post-hook OpenAI/Anthropic-family tool schemas quarantined (ohne broadening allowed tool choices), LM Studio binary-thinking models erhalten explicit thinking-off requests, profile auth honored for SecretRef model entries, bounded model browsing, provider prefixes stripped wo runtimes bare IDs brauchen, nested embedding fetch failures surfaced.
  • Memory/State/Diagnostics/Config: Header-too-large embedding batches split, QMD memory search enabled in transient mode, SQLite avoids WAL on NFS volumes, recovery scheduling preserved, full-reindex rollback/cache recovery, raw Memory Wiki source pages treated as source evidence, shell environment fallbacks contained in config write tests.
  • Plugins + updates: Missing required platform packages during managed plugin install/update repaired, including omitted Codex platform binaries.
  • Dependencies: Hono updated to 4.12.25.
  • Release + test reliability: Slow Gateway/full-suite watchdogs extended, local full-suite shards split when throttled, plugin auth marker fixtures stabilized, brittle provider-ref error text avoided, Telegram RTT sampling folded into live QA evidence, QA scorecard mappings around canonical coverage IDs simplified, QA Lab bootstrap aligned with flow-only scenarios, false downgrade prompts für unresolved latest-tag updates vermieden.

Verification


2. v2026.6.8-beta.2 (prerelease) — 2026-06-16 01:50 UTC

  • Tag: v2026.6.8-beta.2 (Release-SHA: b1736723d716b1abe1f8d324772371661146f3b8)
  • URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.8-beta.2
  • Inhalt: Identisch zu v2026.6.8 (Highlights/Changes/Fixes), nur Verification-Block verweist auf Beta-Build-Links und post-publish recovery (35 npm plugins + 35 ClawHub packages verifiziert nach Registry-Propagation).

3. v2026.6.8-beta.1 (prerelease) — 2026-06-14 22:45 UTC

  • Tag: v2026.6.8-beta.1 (Release-SHA: 43d00c7724b5b4856ad4055b2dcd21ce6ef61550)
  • URL: https://github.com/openclaw/openclaw/releases/tag/v2026.6.8-beta.1
  • Inhalt: Gleiche Highlights/Changes/Fixes wie stable v2026.6.8; markiert als ## 2026.6.8 im Body (nicht mit v-Prefix). Beta-1 CI: Release-Publish- Orchestration fehlgeschlagen nach Plugin-Publish-Verification, dann direkter OpenClaw-npm-Recovery. ClawHub Plugin-Publish fehlgeschlagen wegen setupEntry Metadata in transport plugin (follow-up erforderlich).

4. v2026.6.7-beta.1 (prerelease) — 2024-06-13 09:42 UTC

Highlights (Highlights zusammengefasst)

  • Channel delivery tighter: Slack same-channel finals persist in transcripts, top-level image message-tool sends attach media, Telegram expandable blockquotes + spooled replay survive delivery, explicit silent replies stay silent, progress draft startup failures reported, channel action result pages fetchable incremental. (#92498, #92407, #92416, #92281, #92073, #92083, #88993)
  • Provider/Model resilient: Kimi K2.7 Code verfügbar, Kimi native tool-call ids + replayed reasoning_content repaired, Mistral skips unreadable tool schemas, Fireworks catalog parameters from manifests, DeepSeek keeps configured static transport, provider fallbacks resolve correctly, Anthropic thinking replay repaired, Anthropic Vertex stops re-marking transport-budgeted cache control. (#92554, #92396, #90242, #90326, #92265, #92293, #92286, #92387)
  • Context/Auth boundaries safer: Feishu leakt keine prompt-preface runtime context, WebSocket payload handling hardened, CLI-backed /btw fallback fails closed, local setup trust hardened, Skill Workshop symlink writes gated + validated before rollback metadata written. (#92589, #92593, #92226, #92175)
  • Agent/Memory/Codex/Cron/Update recovery: Invalid plugin model catalogs isolated, QMD startup failures survive fallback errors, Codex memory prompts stay registered, source message tool replies stoppen agent progress nicht mehr, structured unsupported-model errors classified, heartbeat/cron terminal state preserved, Linux service updates handoff cleanly, cron status reports SQLite store path. (#92564, #92218, #92618, #92350, #92343, #92280, #92231, #92225, #92144)
  • UI/Docs/QA/Docker/Release proof: Accessibility contrast/focus/font fixes, empty Workboard columns hideable, design-system docs, uptime monitors pointed at /health, Windows Hub docs pin verified stable installer links, QA evidence
    • scorecard taxonomy artifacts, QA Lab bundled into Docker images, lifecycle timeout cleanup survives leader exit. (#89822, #89615, #89827, #55768, #92608, #92605, #91484, #91500, #92087, #92566)

Changes

  • QA + release validation emit scorecard taxonomy + evidence artifacts, split plugin ClawHub publishing paths, use trusted plugin npm publishing, keep plugin publish checks authoritative, align root package, publishable plugin manifests, generated baselines, native app versions für 2026.6.7 beta train.
  • Docs + operator guidance: Gateway uptime monitoring, design-system guidance, Windows Hub stable download pins, removed stale ClawHub navigation, WhatsApp inbound compatibility, doctor/update progress behavior.
  • Matrix plugin release metadata aligned with core beta train.

Fixes

  • Channels: Slack transcript mirrors, Telegram polling conflicts + transient draft-preview failures, outbound image sends, explicit silent replies, progress-draft startup errors, paged action results, WhatsApp inbound aliases, local setup trust, heartbeat commitment delivery.
  • Provider/model/tool replay: Mistral schemas, Fireworks manifest model parameters, Kimi K2.7 Code/tool-call/reasoning replay, DeepSeek transport inheritance, managed SecretRef auth, static model fallbacks, Anthropic thinking replay, Anthropic Vertex cache control, OTLP trace correlation.
  • Agent/runtime recovery: Invalid plugin model catalogs isolated, Codex memory prompt registration preserved, source message tool replies continue, structured unsupported-model errors classified, QMD startup failures reported neben fallback errors, cron timeout/cancel state preserved, disabled heartbeat one-shot retries working, Linux service auto-updates readable + handoff.
  • Install/sandbox/doctor/security: CLI skill prompts from materialized paths, CLI-backed /btw fails closed, doctor SecretRef previews, blocked external channel plugins diagnosed, Skill Workshop symlink writes validated + gated, Node package install failures stop processing, unsupported daemon service status readable.
  • Release/CI/E2E/Docker/dependency gates: lifecycle timeout cleanup, QA Lab runtime in Docker images, esbuild audit pin updated, Docker process cleanup hardened, plugin publish checks authoritative, noisy redundant proof scripts entfernt.

5. v2026.6.6 (stable) — 2026-06-12 11:04 UTC

Highlights (Security-Release — höchste Priorität für unser Setup)

  • Security boundaries substantially tighter across: transcripts, sandbox binds, host environment inheritance, MCP stdio, Codex HTTP access, native search policy, elevated sender checks, deleted-agent ACP bypasses, loopback tools, Discord moderation, Teams group actions. Exec approvals now fail closed on timeout. (#91529, #91618, #91615, #91619, #91741, #91745, #91746, #91748, #91749, #91750, #91751, #91752, #91763, #89938)
  • Telegram delivery safer + more coherent: Account-scoped topics route to correct agent, streamed text survives tool calls, /compact works on generic ingress, callback handling uses concrete APIs, draft chunking shared, durable dispatch dedupe moved into SDK, unauthorized DM text stays out of cache + prompt context. (#91189, #88682, #89588, #90212, #91876, #91874, #91904, #91478, #91915)
  • iMessage recovery + delivery: Always-on inbound restart, durable echo markers, block streaming, idle approval discovery, hardened outbound transport, actionable inbound startup diagnostics. (#91335, #91449, #88969, #88530, #91783, #91785)
  • Browser + MCP connectivity: Existing-session CDP support, discovered WebSocket validation, default-profile cdpUrl handling, safer browser-output boundaries, Streamable HTTP loopback transport, corrected OAuth/SSE auth, broader schema compatibility. (#91422, #89851, #91736, #91747, #91451, #80143)
  • Control UI startup + first-reply latency: Cached model metadata, removal of startup catalog wait, lazy slash-command loading, first-event tracing with slow-reply diagnostics. (#91531, #91538, #91568, #91583, #91598)
  • Provider support expands: OpenRouter OAuth onboarding, Claude Fable 5 adaptive thinking, Codex sessions keep correct compaction ownership, local models skip guardian review, dynamic tool progress normalizes cleanly, Gemma 4 reasoning replay preserved. (#91830, #91882, #91590, #88630, #88768, #91696)

Changes (Auswahl)

  • CLI progress: Emit Claude CLI commentary progress events, bridge inter-tool commentary into channel progress without exposing internal protocol scaffolding.
  • Observability: Trusted diagnostics channels capture tool input/output content, first-assistant-event traces, warn on slow initial replies.
  • Plugins/ClawHub: Dogfood reusable package publishing, dry runs skip publish approval, declared installed trusted hooks, report managed plugin version drift, warn instead of failing on retired Skill Workshop config.
  • Memory/providers: Local llama.cpp runtime moved into its provider plugin, batch embeddings across files, persist agent model catalog cache, QMD JSON search one-shot + filtering stale REM recall previews.
  • Channels/mobile: QQBot group mention toggle, iPad + iPhone control surfaces, active connection host in TUI footer.
  • Performance: Prewarm TUI runtime plugins, dedupe plugin auto-enable fanout, stop /models derived-registry rescan storms, trim dense text-delta snapshots, reuse prepared startup model metadata.

Fixes (Auswahl, plattformrelevant)

  • Agent/session recovery: Drop stale approval follow-ups after session rebind, remove drained reply-queue items by identity, recover stale main + visible replies, preserve Codex context-engine compaction ownership, project thinking catalog compatibility through SDK sessions, retry same-model assistant calls across short rate-limit windows, lower default compaction timeout to 180s, keep provider-failure terminal lifecycle state correct.
  • User-visible content boundaries: Suppress Codex/Harmony protocol artifacts, neutralize browser + LanceDB memory media directives, redact transcript images, preserve native /compact replies through source suppression.
  • Channel delivery: WhatsApp captured replies attached to successor controller after restart, Feishu rate limits retry, Mattermost thread replies preserved, LINE webhook paths canonicalized, Discord reply hydration + runtime timeout exports restored, OpenAI Realtime WebRTC assistant transcripts shown.
  • Cron: Cancel active task runs cleanly, preserve terminal timeout/cancel state, recover no-deliver tool warnings statt silent loss.
  • Gateway/config/auth: Share approval runtime socket token, replace arrays explicitly in config.patch, keep indexed replacePaths consent from widening to whole arrays, reject malformed Gateway RPC timeout inputs, skip deleted-agent guard only for valid ACP harness sessions, surface headless LaunchAgent state, verify SQLite auth migration before cleanup, arm QMD startup maintenance.
  • Providers/Codex: Clarify quota errors, restore Codex synthetic usage line, canonicalize Codex protocol assets, require API-key auth for realtime voice, normalize ACP model refs, preserve Gemma 4 reasoning_content, honor Ollama's provider-declared thinking default in SDK sessions, avoid guardian review for local models.
  • Updates/builds: Recover package Gateway restarts after refresh failure, expose plugin convergence repair, fall back to Corepack in PATH-less pnpm, seed correct Docker store packages, keep ClawHub dry-run + publish paths reusable, keep beta GitHub release pages draft bis OpenClaw npm + dependency evidence + postpublish verification + required plugin publishes pass.
  • Android: Avoid dataSync foreground-service type for persistent nodes.
  • Native hooks: Bound relay lifetimes so abandoned native hook connections cannot linger indefinitely.

Verification


Cross-Release Patterns (plattformrelevant)

Bereich Trend seit 2026.6.6 Direkter Impact für unser Setup
Security boundaries Tightening: exec approvals fail closed, MCP stdio, ACP bypasses High — wir laufen auf ollama/minimax-m3 (local) + Telegram + Discord
Memory QMD JSON search stabilisiert, batch embeddings, NFS-WAL vermieden Medium — S2 (OpenClaw built-in) ist unsere primäre Memory
Model routing OpenRouter/Vertex prefix normalization, GLM-5.2 Support, LM Studio binary thinking-off, OAuth image defaults via Codex High — berührt unseren openrouter/auto Fallback + zukünftiges GLM-5.2 Routing
Telegram Rich-message delivery, expandable blockquotes, account-scoped topics, intent-preserving line breaks High — Hauptkanal
Subagents Trusted subagent thinking override fallback, yielded subagent pauses bei abort, channel message-tool final replies hidden High — wir spawnen regelmäßig Subagents
Heartbeat De-duplication main-session events, snapshot of session identity in runtime prompts Low — Heartbeats sind sideband
Skill Workshop Symlink writes gated + validated, retired config wird warning statt failure High — wir nutzen Skill Workshop aktiv
Plugin updates Missing required platform packages repaired, Hono 4.12.25 Medium — Codex platform binaries jetzt korrekt mitinstalliert
Admin boundaries HTTP session/model override surfaces require admin Medium — relevant falls wir HTTP-Override nutzen

Verwandte Wiki-Dateien

  • wiki/tools/openclaw.md (neu erstellt 2026-06-16) — Übersicht + Versions-Timeline
  • wiki/architecture/model-routing.md (Update 2026-06-16) — GLM-5.2 + Provider-Prefix
  • wiki/architecture/memory-system.md (Update 2026-06-16) — QMD + SQLite-WAL
  • wiki/concepts/llm/glm-5.2-zai-coding-model.md (Update 2026-06-16) — Offizielle OpenClaw-Integration
  • wiki/concepts/llm/llm-knowledge-base.md — OpenClaw native raw Memory Wiki source pages support