Openclaw Changelog Intelligence

OpenClaw Changelog Intelligence

Changelog

• 2026-03-20: Created from full CHANGELOG.md analysis (versions 2026.1.5 → 2026.3.14/Unreleased)

Version History Summary

Unreleased (Next after 2026.3.13)

Key New Features:

• sessions_yield for orchestrators to end turn immediately with hidden follow-up payload
• talk.silenceTimeoutMs config for Talk mode auto-send threshold
• cron sessionTarget: "current" and session:<id> support
• Dashboard v2 (modular overview, chat, config, agent, session views; command palette)
• Fast mode toggles (/fast, params.fastMode) for OpenAI GPT-5.4 and Anthropic Claude
• Ollama, vLLM, SGLang moved to provider-plugin architecture
• OpenAI Responses WebSocket as default transport
• Kubernetes starter deployment with K8s manifests
• browser.profiles.<name>.userDataDir for attaching to existing Chromium browsers
• channels.telegram.silentErrorReplies config (default off)
• browser.profiles.<name>.driver: "openclaw" accepted (with legacy "clawd" alias)
• Health monitor with per-channel and per-account healthMonitor.enabled overrides
• Telegram/--force-document for uploading images as documents
• Android dark theme for onboarding
• plugins.entries.<id>.hooks.allowPromptInjection config

Breaking Changes in Unreleased:

• nano-banana-pro bundled skill removed → use agents.defaults.imageGenerationModel.primary
• Chrome extension relay path removed; driver: "extension" and browser.relayBindHost removed → run openclaw doctor --fix to migrate
• openclaw/extension-api public surface removed; use openclaw/plugin-sdk/* subpaths
• ChannelMessageActionAdapter.describeMessageTool(...) required for shared message tool; listActions, getCapabilities, getToolSchema removed
• Build-tool JVM injection env vars blocked from host exec (MAVEN_OPTS, SBT_OPTS, GRADLE_OPTS, ANT_OPTS, GLIBC_TUNABLES, DOTNET_ADDITIONAL_DEPS)

2026.3.13 (Current stable - our version)

Key Features:

• Android chat settings redesign
• iOS first-run welcome pager
• Browser/existing-session Chrome DevTools MCP attach mode
• Built-in browser profile="user" and profile="chrome-relay"
• OPENCLAW_TZ env var for Docker timezone pinning
• Cron sessionTarget: "current" and session:<id> support
• Telegram --force-document for image/GIF sends
• agents.defaults.compaction.postIndexSync config for post-compaction memory reindexing
• agents.defaults.memorySearch.sync.sessions.postCompactionForce config

Breaking Changes in 2026.3.13:

• BREAKING: Agents now load at most one root memory bootstrap file. MEMORY.md wins; memory.md only used when MEMORY.md is absent. If you had both files, merge before upgrade. Also fixes duplicate memory injection on case-insensitive Docker mounts.

Security Fixes:

• Bootstrap setup codes now single-use (prevents silent replay/widening to admin)
• Zero-width/soft-hyphen marker-splitting bypass blocked
• Multiple exec approval hardening fixes
• Telegram webhook secret validated before reading request body
• Telegram file URL redaction from error logs

2026.3.12

Key Features:

• Dashboard v2 Control UI with modular overview, chat, config, agent, session views
• Command palette, mobile bottom tabs, slash commands, search, export, pinned messages
• OpenAI GPT-5.4 fast mode with /fast toggle and params.fastMode
• Anthropic Claude fast mode (maps to service_tier API parameter)
• Ollama, vLLM, SGLang moved to provider-plugin architecture
• sessions_yield tool for orchestrators
• Slack Block Kit messages via channelData.slack.blocks
• channels.slack.capabilities.interactiveReplies (disabled by default)
• Short-lived bootstrap tokens for /pair and openclaw qr setup codes

Security Fixes:

• Device pairing setup codes switched to short-lived bootstrap tokens
• Implicit workspace plugin auto-load disabled (GHSA-99qw-6mr3-36qr)

2026.3.11

Key Features:

• iOS Home canvas with live agent overview
• macOS chat model picker with thinking-level persistence
• Ollama first-class setup with Local / Cloud + Local modes
• OpenCode Go provider added
• Multi-modal image and audio indexing for memorySearch.extraPaths
• Gemini gemini-embedding-2-preview memory search support
• channels.discord.autoArchiveDuration for auto-created threads
• ACP sessions_spawn with resumeSessionId for resuming existing conversations
• Exec/child commands: OPENCLAW_CLI env marker for subprocesses

Breaking Changes in 2026.3.11:

• Cron/doctor: tighten isolated cron delivery so cron jobs can no longer notify through ad hoc agent sends or fallback main-session summaries

Security Fixes:

• Gateway/WebSocket: browser origin validation enforced for all browser-originated connections (GHSA-5wcw-8jjv-m286) — critical: could grant untrusted origins operator.admin

2026.3.8

Key Features:

• openclaw backup create and openclaw backup verify commands
• talk.silenceTimeoutMs config for configurable silence detection
• TUI infers active agent from workspace
• tools.web.search.brave.mode: "llm-context" for Brave LLM Context endpoint
• openclaw --version now includes short git commit hash
• ACP provenance metadata (openclaw acp --provenance off|meta|meta+receipt)
• channels.telegram.silentErrorReplies (default off)

Security Fixes:

• Gateway auth: loopback hop spoofing ignored in trusted forwarding chains
• ACP: canonical tool identity for prompting; fail-closed on conflicting identity hints
• Subagents/follow-ups: ownership checks for /subagents send

2026.3.7

Key Features:

• ContextEngine plugin slot with full lifecycle hooks (bootstrap, ingest, assemble, compact, afterTurn, prepareSubagentSpawn, onSubagentEnded)
• ACP persistent Discord channel and Telegram topic binding storage
• Telegram per-topic agentId overrides in forum groups and DM topics
• Web UI Spanish locale support
• gateway.auth.token SecretRef support
• OPENCLAW_EXTENSIONS Docker build arg for pre-installing extension dependencies
• plugins.entries.<id>.hooks.allowPromptInjection config
• agents.defaults.compaction.postCompactionSections config
• messages.tts.openai.baseUrl config
• channels.slack.typingReaction config
• channels.discord.allowBots: "mentions" option
• agents.defaults.compaction.recentTurnsPreserve config exposed
• Hooks/Compaction lifecycle — session:compact:before and session:compact:after events
• agents.defaults.compaction.model for routing compaction through different model
• Gemini 3.1 Flash-Lite support

Breaking Changes in 2026.3.7:

• BREAKING: gateway.auth.mode required explicitly when both gateway.auth.token and gateway.auth.password are configured. Set gateway.auth.mode to token or password before upgrade.

2026.3.2

Key Features:

• SecretRef support across 64 credential surfaces
• pdf tool with native Anthropic and Google PDF provider support
• agents.defaults.pdfModel, pdfMaxBytesMb, pdfMaxPages configs
• sessions_spawn inline file attachments (tools.sessions_spawn.attachments config)
• tools.sessions_spawn.attachments config with limits
• channels.telegram.streaming defaults to "partial" (was "off")
• Telegram DM sendMessageDraft preview streaming
• openclaw config validate command
• cli.banner.taglineMode config (random | default | off)
• agents.defaults.compaction.qualityGuard config (disabled by default)
• memorySearch.provider = "ollama" support
• Zalo Personal plugin rebuilt with native zca-js

Breaking Changes in 2026.3.2:

• BREAKING: Onboarding defaults tools.profile to messaging for new local installs
• BREAKING: ACP dispatch now defaults to enabled unless acp.dispatch.enabled=false
• BREAKING: Plugin SDK removed api.registerHttpHandler(...) → use api.registerHttpRoute(...)
• BREAKING: Zalo Personal plugin no longer requires external zca-compatible CLI binaries

2026.3.1

Key Features:

• OpenAI Responses WebSocket-first by default (transport: "auto" with SSE fallback)
• Gateway container health probes (/health, /healthz, /ready, /readyz)
• Android camera, device permissions, notifications actions node commands
• Discord thread lifecycle controls (idleHours, maxAgeHours)
• Telegram per-DM direct + topic config with rich policy
• agents.defaults.heartbeat.lightContext for heartbeat lightweight bootstrap mode
• --light-context for cron agent turns
• OpenAI Responses WebSocket warm-up (response.create with generate:false)
• params.openaiWsWarmup for per-model control

Breaking Changes in 2026.3.1:

• BREAKING: Node exec approval payloads now require systemRunPlan
• BREAKING: Node system.run execution pins path-token commands to canonical realpath

2026.2.27

Key Features:

• openai/gpt-5.4, openai/gpt-5.4-pro, openai-codex/gpt-5.4 support
• Android app renamed to ai.openclaw.app

2026.2.26

Key Features:

• External Secrets Management with full openclaw secrets workflow (audit, configure, apply, reload)
• ACP thread-bound agents as first-class runtimes
• openclaw agents bindings, openclaw agents bind, openclaw agents unbind commands
• Codex/WebSocket transport as default
• Channel plugins can own interactive onboarding flows
• session.maintenance.maxDiskBytes / highWaterBytes disk-budget controls
• tools.web.search.brave.mode with provider selection
• Perplexity provider switched to Search API with structured results

Breaking Changes in 2026.2.26:

• BREAKING: gateway.auth.mode explicitly required when both token and password configured (precursor to 2026.3.7 requirement)

2026.2.25

Key Features:

• agents.defaults.heartbeat.directPolicy (allow | block) replaces heartbeat DM toggle
• agents.list[].heartbeat.directPolicy per-agent override

Breaking Changes in 2026.2.25:

• BREAKING: Heartbeat direct/DM delivery default is now allow. To keep DM-blocked behavior from 2026.2.24, set agents.defaults.heartbeat.directPolicy: "block"

2026.2.24

Key Features:

• Talk mode multi-lingual stop keywords
• agents.defaults.sandbox.docker.dangerouslyAllowContainerNamespaceJoin break-glass config
• Security audit security.trust_model.multi_user_heuristic

Breaking Changes in 2026.2.24:

• BREAKING: Heartbeat delivery blocks direct/DM targets by default
• BREAKING: Docker network: "container:<id>" sandbox namespace-join blocked by default

2026.2.23

Key Features:

• kilocode provider (auth, onboarding, default model kilocode/anthropic/claude-opus-4.6)
• Vercel AI Gateway Claude shorthand model ref support
• gateway.http.securityHeaders.strictTransportSecurity config
• Sessions openclaw sessions cleanup with per-agent store targeting and disk-budget controls
• tools.web.search.provider: "kimi" (Moonshot) web search
• agents.defaults.params per-agent overrides (including cacheRetention, temperature, maxTokens)
• Memory bootstrap file snapshots cached per session key

2026.2.22

Key Features:

• Control UI Tools panel data-driven from runtime tools.catalog
• Gemini web search provider support (gemini for grounded search)
• Control UI full cron edit parity with run history
• Mistral provider support including memory embeddings and voice
• Auto-updater (update.auto.*) config, default off
• openclaw update --dry-run command
• Synology Chat native channel plugin
• Memory FTS multilingual stop-word support (Spanish, Portuguese, Japanese, Korean, Arabic)
• Discord allowlist canonicalization to IDs
• channels.<channel>.streaming unified config with enum values off | partial | block | progress
• channels.slack.nativeStreaming for Slack native stream toggle
• Removed legacy Gateway device-auth signature v1 (must use v2 with challenge nonce)

Breaking Changes in 2026.2.22:

• BREAKING: Channel preview-streaming config unified to channels.<channel>.streaming; legacy keys (streamMode, boolean Slack streaming) read and migrated by openclaw doctor --fix
• BREAKING: Legacy Gateway device-auth signature v1 removed. Clients must sign v2 payloads.
• BREAKING: CLI local onboarding sets session.dmScope to per-channel-peer by default for new configs
• BREAKING: Tool-failure replies hide raw error details by default; requires /verbose on or /verbose full for details
• BREAKING: Google Antigravity provider support removed; google-antigravity-auth plugin removed

2026.2.21

Key Features:

• Gemini 3.1 (google/gemini-3.1-pro-preview) support
• channels.modelByChannel for per-channel model overrides
• Discord streaming preview mode with partial/block options
• Discord lifecycle status reactions with emoji/timing overrides
• Discord voice channel join/leave via /vc
• Discord thread-bound subagent sessions
• channels.discord.autoArchiveDuration (inherited from 2026.3.11 listing)
• agents.defaults.subagents.maxSpawnDepth shared max spawn depth (default 2)
• security.ownerDisplaySecret HMAC secret from configuration

2026.2.19

Key Features:

• Apple Watch companion app (watch inbox, notification relay, gateway command surfaces)
• iOS APNs push registration
• openclaw devices remove and openclaw devices clear commands
• Mattermost native slash command support
• channels.mattermost.commands.* config

2026.2.17

Key Features:

• Anthropic 1M context beta header (params.context1m: true) → maps to anthropic-beta: context-1m-2025-08-07
• anthropic/claude-sonnet-4-6 support
• /subagents spawn command
• Telegram inline button style support (primary|success|danger)
• channels.telegram.reactionNotifications config
• Discord Components v2 (buttons, selects, modals)
• Cron webhook delivery (delivery.mode = "webhook")
• Cron per-job schedule.staggerMs and openclaw cron add/edit --stagger
• tools.web.search.brave.mode: "llm-context" option
• browser.extraArgs for custom Chrome launch arguments
• talk.silenceTimeoutMs (predates 2026.3.8 listing; added here)
• agents.defaults.subagents.maxSpawnDepth (default 2, actually first added here)
• agents.defaults.subagents.announceTimeoutMs config
• models.[].thinkingDefault per-model thinking defaults

2026.2.15

Key Features:

• Discord Components v2 rich interactive agent prompts
• llm_input and llm_output plugin hook payloads exposed
• Nested sub-agents (depth configurable via agents.defaults.subagents.maxSpawnDepth: 2)
• agents.defaults.subagents.maxChildrenPerAgent config (default 5)
• Memory MMR re-ranking for hybrid search diversity (memorySearch.query.hybrid.mmr)
• Memory temporal decay scoring (memorySearch.query.hybrid.temporalDecay)
• cron.webhookToken dedicated webhook auth token
• notify (webhook delivery toggle in cron)

2026.2.14

Key Features:

• Telegram poll sending via openclaw message poll
• slack.dmPolicy + slack.allowFrom aliases (legacy dm.policy + dm.allowFrom remain)
• discord.dmPolicy + discord.allowFrom aliases
• sandbox.browser.binds for browser-container bind mounts

2026.2.13

Key Features:

• Podman-based setup (setup-podman.sh, Quadlet unit)
• Discord voice messages with waveform previews
• Outbound write-ahead delivery queue for crash recovery
• sessions.parentForkMaxTokens config (default 100000; 0 disables)
• Cron/failureAlert.mode (announce|webhook), failureAlert.accountId
• cron.failureDestination and per-job delivery.failureDestination
• Cron repeated-failure alerting configuration
• channels.discord.eventQueue.listenerTimeout per-account override

2026.2.12

Key Features:

• openclaw plugins uninstall <id> command
• openclaw logs --local-time flag
• Discord role-based allowlists and role-based agent routing
• Config $schema key accepted (JSON Schema editor tooling)
• Gateway/Hooks: POST /hooks/agent now rejects payload sessionKey overrides by default

Breaking Changes in 2026.2.12:

• BREAKING: Hooks POST /hooks/agent rejects sessionKey overrides by default. To keep fixed hook context, set hooks.defaultSessionKey (recommended: hooks.allowedSessionKeyPrefixes: ["hook:"]) or set hooks.allowRequestSessionKey: true

2026.2.9

Key Features:

• commands.allowFrom config for separate command authorization
• ClawDock shell helpers for Docker workflows
• gateway.channelHealthCheckMinutes config (default 5; 0 to disable)
• iOS node app with setup-code onboarding
• Grok (xAI) as web_search provider
• gateway.http.endpoints.chatCompletions.enabled config (default false; must opt-in)
• agents.files gateway RPC methods
• hooks.allowedAgentIds controls

2026.2.6

Key Features:

• Cron run history deep-links in dashboard
• cron.wakeMode default changed to "now" (was "next-heartbeat")
• openclaw/gpt-5.4 and openai-codex/gpt-5.4 support
• xAI (Grok) provider support
• Baidu Qianfan provider support
• Web UI token usage dashboard
• Memory Voyage AI native support
• cli.banner.taglineMode (first appearance; also listed in 2026.3.2)

2026.2.3

Key Features:

• Cron announce delivery mode for isolated jobs
• tools.sessions_spawn.attachments limits (first listing)
• messages.responsePrefix per-channel and per-account overrides

2026.2.2

Key Features:

• Feishu/Lark plugin
• Web UI Agents dashboard
• QMD backend for workspace memory (memory.backend: "qmd" first formal)
• agents.defaults.subagents.thinking config (and per-agent agents.list[].subagents.thinking)

2026.2.1

Key Features:

• channels.telegram unification (renamed from providers.telegram)
• Agents cacheRetention → renamed from cacheControlTtl (back-compat mapping)
• Sessions session.identityLinks for cross-platform DM linking (first listed in 2026.1.16-1)
• Gateway requires TLS 1.3 minimum for TLS listeners

2026.1.31 - 2026.1.24

Key Features:

• completion command (Zsh/Bash/PowerShell/Fish)
• channels.telegram.linkPreview config
• Exec approvals /approve in-chat across all channels
• gateway.auth.token SecretRef support (first for this specific key)
• diagnostics.stuckSessionWarnMs config (default 120000ms)

2026.1.23 - 2026.1.22

Key Features:

• /tools/invoke HTTP endpoint
• Heartbeat per-channel visibility controls
• Fly.io deployment support
• session.resetByChannel per-channel reset overrides
• messages.tts.openai.baseUrl config (first appearance; also listed in 2026.3.7)
• Compaction safeguard adaptive chunking + progressive fallback

2026.1.21

Key Features:

• Lobster optional plugin tool
• heartbeat.activeHours support (active-hours windowing)
• session.dmScope session DM isolation (per-channel-peer default)
• Exec approvals wildcard agent allowlists (*)
• Nodes openclaw node start headless node host
• Sessions daily reset policy (session.resetByChannel)
• agents.defaults.model.imageModel config (also agents.defaults.imageModel)
• session.mainKey customization

2026.1.20 (Major feature release)

Key Features:

• ACP IDE integration (openclaw acp)
• Skills download installs with OS-filtered options
• Memory hybrid BM25 + vector search (FTS5) with weighted merging
• SQLite embedding cache
• OpenAI batch indexing for embeddings
• Gemini native embeddings provider for memory
• Nostr channel plugin
• Matrix E2EE support via matrix-bot-sdk
• Slack HTTP webhook mode
• Zalouser channel dock metadata
• Plugin slots with memory slot selector
• Gateway /v1/responses OpenResponses endpoint
• Usage /usage cost summaries
• Exec host/security/ask routing for gateway + node exec
• /exec directive for per-session exec defaults
• Exec approvals migrated to ~/.openclaw/exec-approvals.json
• Nodes system.run/system.which via headless node host
• sessions.parentForkMaxTokens (first appearance)
• agents.defaults.sandbox.browser.allowHostControl config

2026.1.16-1 (Significant feature release)

Key Features:

• Hooks system introduced
• Inbound media understanding (image/audio/video)
• Zalo Personal plugin (@openclaw/zalouser)
• Vercel AI Gateway provider
• session.identityLinks for cross-platform DM session linking
• web_search country/language parameters
• exec PTY support
• process send-keys, process submit PTY helpers
• Skills user-invocable skill commands
• memorySearch.experimental.sessionMemory opt-in
• tools.exec.applyPatch experimental multi-file edit tool
• openclaw plugins install (path/tgz/npm)

Breaking Changes in 2026.1.16-1:

• BREAKING: openclaw message requires target (dropping to/channelId)
• BREAKING: Channel auth prefers config over env for Discord/Telegram/Matrix
• BREAKING: Drop legacy chatType: "room" → use chatType: "channel"
• BREAKING: openclaw hooks is now openclaw webhooks; hooks live under openclaw hooks
• BREAKING: openclaw plugins install <path> now copies into ~/.openclaw/extensions (use --link to keep path-based loading)

2026.1.15

Key Features:

• Provider auth registry + openclaw models auth login
• agents.defaults.heartbeat.* per-agent heartbeat configuration
• 24h duplicate suppression for heartbeat alerts
• session.dmScope for multi-user DM isolation
• channels.<channel>.defaultTo outbound routing fallback
• Memory node-llama-cpp made optional dependency

2026.1.14

Key Features:

• web_search/web_fetch tools (Brave API)
• Chrome extension relay takeover mode
• Zalo channel plugin
• openclaw security audit (expanded)
• Matrix channel plugin (external)
• channels.<provider>.configWrites gating config

2026.1.12 (Major rename release)

Key Features:

• BREAKING RENAME: chat "providers" → "channels" across CLI/RPC/config
• Memory vector search with SQLite index
• Voice-call plugin (full parity)
• Models: Synthetic provider, Moonshot Kimi K2
• One-shot cron schedules with ISO timestamps
• agents.defaults.compaction.* config (safeguard summarization, model fallbacks)
• Memory openclaw memory CLI
• memory_search/memory_get tools
• Tool profiles + group shorthands
• tools.byProvider tool policy overrides

Breaking Changes in 2026.1.12:

• BREAKING: Rename chat "providers" to "channels" (legacy config auto-migrates)
• BREAKING: Reject invalid/unknown config entries; run openclaw doctor --fix to repair

2026.1.11

Key Features:

• Plugins first-class (loader + CLI management)
• $include modular config support
• Pre-compaction memory flush turn
• tools.exec.applyPatch (multi-file edits, experimental)
• Plugins openclaw plugins install

2026.1.10

Key Features:

• openclaw status table-based with OS/update/gateway/daemon/agents/sessions
• openclaw update command
• OpenAI-compatible /v1/chat/completions endpoint (disabled by default)
• gateway.http.endpoints.chatCompletions.enabled config
• Z.AI (GLM) auth choice
• OpenRouter API key auth option

2026.1.9 (Major features)

Key Features:

• Microsoft Teams provider (now a plugin in later versions)
• OpenCode Zen + MiniMax API onboarding
• Token auth profiles + auth order
• commands.config/commands.debug config (disabled by default)
• commands.restart config (disabled by default)
• gateway.http.endpoints.chatCompletions.enabled (disabled by default)
• agents.defaults.heartbeat.includeReasoning config

Breaking Changes in 2026.1.9:

• BREAKING: Microsoft Teams is now a plugin; install @openclaw/msteams
• BREAKING: openclaw message now subcommands; requires --provider unless only one configured
• BREAKING: /restart and gateway restart tool disabled by default; enable with commands.restart=true

2026.1.8

Key Features:

• DMs locked down by default (pairing-first + allowlist guidance)
• Per-agent sandbox scope defaults
• session.dmScope for multi-user DM isolation (first in 2026.1.8)
• dmPolicy: "pairing" as new default (was open)

Breaking Changes in 2026.1.8:

• BREAKING SECURITY: Inbound DMs locked down by default (dmPolicy="pairing")
• BREAKING: Sandbox agent.sandbox.scope defaults to "agent"
• BREAKING: Timestamps in agent envelopes now UTC; removed messages.timestampPrefix

2026.1.5

Key Features:

• agents.defaults.imageModel config (image-specific model)
• image tool routed to image model
• Model shorthands (opus, sonnet, gpt, gpt-mini, gemini, gemini-flash)
• gateway.http.endpoints.chatCompletions.enabled (first mention)

Config Keys by Version (CRITICAL)

This is the authoritative reference. Do NOT use a key in a version where it wasn't introduced.

Introduced in Unreleased (after 2026.3.13 - NOT safe in our version)

Introduced in 2026.3.13 (our current version — SAFE)

Introduced in 2026.3.12

Introduced in 2026.3.11

Introduced in 2026.3.8

Introduced in 2026.3.7

Introduced in 2026.3.2

Introduced in 2026.3.1

Introduced in 2026.2.26

Introduced in 2026.2.25

Introduced in 2026.2.23

Introduced in 2026.2.22

Introduced in 2026.2.21

Introduced in 2026.2.19

Introduced in 2026.2.17

Introduced in 2026.2.15

Introduced in 2026.2.14

Introduced in 2026.2.13

Introduced in 2026.2.12

Introduced in 2026.2.9

Introduced in 2026.2.6

Introduced in 2026.2.3

Introduced in 2026.2.2

Introduced in 2026.2.1

Introduced in 2026.1.31 - 2026.1.24

Introduced in 2026.1.23 - 2026.1.22

Introduced in 2026.1.21

Introduced in 2026.1.20

Introduced in 2026.1.16-1

Introduced in 2026.1.15

Introduced in 2026.1.12

Introduced in 2026.1.9 - 2026.1.8

Introduced in 2026.1.5

Breaking Changes & Deprecations (Full List)

2026.3.13

• Memory bootstrap: Only one root bootstrap file loaded. MEMORY.md wins; memory.md is fallback only. Merge both files before upgrade if you used both.

2026.3.12

• Implicit workspace plugin auto-load disabled (security fix GHSA-99qw-6mr3-36qr)
• Device pairing setup codes changed to short-lived bootstrap tokens

2026.3.11

• Cron isolated delivery tightened: cron jobs can no longer notify through ad hoc agent sends or fallback main-session summaries. Use openclaw doctor --fix to migrate legacy cron storage.

2026.3.7

• BREAKING: gateway.auth.mode required when both token and password configured. Set to "token" or "password" before upgrade.

2026.3.2

• BREAKING: Onboarding defaults tools.profile to "messaging" for new local installs
• BREAKING: ACP dispatch defaults to enabled; use acp.dispatch.enabled=false to disable
• BREAKING: Plugin SDK removed api.registerHttpHandler(...) → use api.registerHttpRoute(...)
• **BREA

…(truncated)