Skip to content

v0.0.134

# NemoClaw v0.0.134 release brief
@rsliter rsliter tagged this 14 Oct 02:08 
## Release range

- Previous release: `v0.0.133` at `ef5d55d19e2da33c2474db158588613828e1a9be`
- Candidate: `8a5718dd14a2c2e440011488b1f3a32e9414cf82`
- Candidate selection: current-main
- Commits: 23
- Risky files detected: 68

## QA context

### Risky areas

- Workflow / enforcement
- Credentials / inference
- Sandbox / policy / SSRF
- Installer / bootstrap
- Onboarding / host glue

### Suggested test focus

- Fresh install and upgrade paths
- Onboarding wizard and sandbox creation
- Policy enforcement, network egress, and SSRF protections
- CI checks, pre-commit hooks, and DCO declarations
- Credential storage and inference provider routing

## Canonical release entry

- Path: `docs/changelog/2026-10-13.mdx`
- Entry:

## v0.0.134

NemoClaw v0.0.134 updates managed LangChain Deep Agents Code and strengthens onboarding, backup, download, and provider setup.
Station WSL onboarding also binds managed llama.cpp to the GPU that passed host checks.

- Managed LangChain Deep Agents Code now uses version 0.1.71 with a pinned Python dependency graph and matching startup and MCP behavior.
  Related change: [PR #12376](https://github.com/NVIDIA/NemoClaw/pull/12376).
- Generated and custom Dockerfile recipes on a local Docker gateway build and verify an image before sandbox creation.
  A remote gateway, engine mismatch, failed build, or missing image stops creation.
  Related changes: [PR #13035](https://github.com/NVIDIA/NemoClaw/pull/13035) and [PR #13077](https://github.com/NVIDIA/NemoClaw/pull/13077).
- OpenClaw onboarding can request write access for a verified matching CLI device with pairing/read permissions after a probe refreshes its connection metadata.
  Related change: [PR #13107](https://github.com/NVIDIA/NemoClaw/pull/13107).
- Managed vLLM and llama.cpp installers declare the selected profile, recipe, runtime image, and model download size before acquisition.
  Managed vLLM declares the image download size when the image is not cached.
  Related change: [PR #12220](https://github.com/NVIDIA/NemoClaw/pull/12220).
- Hermes backups accept a sanitized configuration that grows beyond the source file size.
  The archive still excludes credentials, and the live configuration remains unchanged.
  Related change: [PR #13049](https://github.com/NVIDIA/NemoClaw/pull/13049).
- `nemoclaw <sandbox> download` rejects a symbolic link in any component of the host destination parent.
  Related change: [PR #12870](https://github.com/NVIDIA/NemoClaw/pull/12870).
- Runtime identity provider setup verifies the stored gateway profile after import and stops before provider creation if the export fails or differs.
  A later profile change or failed export produces a warning without changing the completed operation.
  Related change: [PR #12947](https://github.com/NVIDIA/NemoClaw/pull/12947).
- Linux port checks ignore known `lsof` mount warnings when no listener exists.
  Other `lsof` errors still leave port ownership unverified.
  Related change: [PR #13048](https://github.com/NVIDIA/NemoClaw/pull/13048).
- Station WSL managed llama.cpp selects the Docker-proved GB300 by UUID.
  The serving recipes remain pinned to the published image while the new GB300 image awaits qualification.
  Related change: [PR #13053](https://github.com/NVIDIA/NemoClaw/pull/13053).

## Documentation coverage

- Latest included cumulative docs PR: [#13115](https://github.com/NVIDIA/NemoClaw/pull/13115), merged.
- Final PR commit and merge commit: `46674a55137346eeb2bb9df43204c90d07b0bb4e`; `a6eb5a6fc3ca5df7585c83a9410210fb9e848f37`.
- Final automated refresh coverage commit: `1c6588e543bc846b84e073b68bd53844752ec994` (verified bot refresh parent).
- Later commits and merged PRs:
  - `a6eb5a6fc3` [#13115](https://github.com/NVIDIA/NemoClaw/pull/13115): cumulative docs merge.
  - `c3941bab1f` [#12550](https://github.com/NVIDIA/NemoClaw/pull/12550): CI toolchain inputs.
  - `588a1f1c06` [#13117](https://github.com/NVIDIA/NemoClaw/pull/13117): README documentation links.
  - `143985515e` [#13118](https://github.com/NVIDIA/NemoClaw/pull/13118): revert CI toolchain inputs.
  - `8a5718dd14` [#13120](https://github.com/NVIDIA/NemoClaw/pull/13120): troubleshooting correction.
- Changed paths: #13115 changed only `docs/changelog/2026-10-13.mdx`, an allowed documentation path. After its coverage point, the candidate changes `README.md`, `docs/changelog/2026-10-13.mdx`, `docs/reference/troubleshooting.mdx`, `scripts/check-docs-published-routes.mts`, and `test/generation/check-docs-published-routes.test.ts`.
- Review and checks: #13115 was approved and merged after required checks passed or legitimately skipped. #13120 was approved and merged after docs build, PR validation, independent writer review, CodeRabbit, and Advisor review passed; its Advisor recommended no PR E2E selector.
- Open managed docs PRs: None at evidence inspection.
- Maintainer decision: Proceed with the candidate as shown.

## Base and managed image evidence

- Base-image candidate: `8a5718dd14a2c2e440011488b1f3a32e9414cf82`
- Evidence: [E2E / Main and Manual Suite run 38485952945, attempt 1](https://github.com/NVIDIA/NemoClaw/actions/runs/38485952945), main push event for exact candidate `8a5718dd14a2c2e440011488b1f3a32e9414cf82`; [base-image-publication job 115611323260](https://github.com/NVIDIA/NemoClaw/actions/runs/38485952945/job/115611323260) completed successfully at `2026-10-14T00:21:50Z`. GitHub job and commit check-run both confirm success; workflow attempt path is `.github/workflows/e2e.yaml` on `main`.

## General E2E decision

- Newest identifiable full main run: [38484637600, attempt 1](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600), tested `143985515e4ffaeedd309ca5328e0c8ffbbc1eec`, which differs from planned candidate `8a5718dd14a2c2e440011488b1f3a32e9414cf82`.
- Workflow created and started: `2026-10-13T23:30:16Z`; last updated: `2026-10-14T02:01:40Z`; inspected: `2026-10-14T02:05:31Z` (about 155 minutes after creation). Workflow status: completed; conclusion: failure.
- [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115640560904): failed; started `2026-10-14T02:00:57Z`, completed `2026-10-14T02:01:06Z`.
- Full-run job counts: 28 failure, 14 skipped, 57 success.
- Failed and skipped full-run jobs:
  - skipped: [native-runtime-qualification-producer-plan](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595707647)
  - skipped: [Exact staging Brev Launchable identity](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595707721)
  - skipped: [external-gateway-health](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595707829)
  - skipped: [openshell-dev-artifact](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708175)
  - skipped: [Portable Hermes finalization (Podman 5.7, NVIDIA GPU)](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708190)
  - skipped: [Build pinned Portable Podman 5.7 toolchain](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708225)
  - skipped: [Build pinned native Podman toolchain / ${{ matrix.architecture }}](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708301)
  - skipped: [matrix.jobName](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708792)
  - skipped: [Aggregate native runtime qualification evidence](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115595708917)
  - failure: [Cloud onboard (docker)](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596274649)
  - failure: [Messaging providers (docker)](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596274679)
  - skipped: [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596275798)
  - skipped: [MCP bridge dev (${{ matrix.agent }}, ${{ matrix.runtime_provider }})](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596275895)
  - skipped: [${{ matrix.display_name }} (${{ matrix.runtime_provider }})](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596276256)
  - skipped: [dgx-station-express](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596276559)
  - failure: [Networking: OpenClaw answers through balanced egress (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278181)
  - failure: [Performance: bounds hosted inference turns for OpenClaw and Hermes (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278343)
  - failure: [Dashboard: retains audit findings when bound remotely (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278381)
  - failure: [Install: bootstraps NemoClaw and completes hosted inference (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278420)
  - failure: [Tunnel: starts, probes, and stops a public dashboard tunnel (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278471)
  - failure: [Messaging: OpenClaw preserves channels across stop and start (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278549)
  - failure: [Networking: Hermes reaches a public reference through open egress (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278596)
  - failure: [CLI: routes sessions and agents to OpenClaw (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278639)
  - failure: [Messaging: shares OpenClaw Discord pairing approval (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278704)
  - failure: [Authorization: approves a write-scope upgrade without operator.admin (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278799)
  - failure: [Messaging: treats Telegram shell metacharacters as data (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278809)
  - failure: [Rebuild: restores OpenClaw state and native readiness (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278858)
  - failure: [Security: Hermes retains the required sandbox posture (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278872)
  - failure: [Lifecycle: OpenShell stop and start preserves native agent state (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278875)
  - failure: [Sandbox: preserves lifecycle and final gateway cleanup (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278934)
  - failure: [Install: leaves NemoClaw and OpenShell usable after standard installation (none) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596278965)
  - failure: [Networking: Personal public fetch without Brave Search or Tavily Search API keys (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279039)
  - failure: [OpenClaw: installs, onboards, and completes an agent turn (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279058)
  - failure: [Backup: rebuild restores the complete native home (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279091)
  - failure: [Skills: OpenClaw owns the public stateless lifecycle (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279095)
  - failure: [Preflight: reaches managed inference without DNS failure (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279163)
  - failure: [Networking: OpenClaw reaches a public reference through open egress (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279201)
  - failure: [Security: OpenClaw retains the required sandbox posture (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279209)
  - failure: [Messaging: shares OpenClaw Slack pairing approval (docker) / NVIDIA inference API key](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115596279250)
  - failure: [Protected managed-image GPU and local inference](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115603642049)
  - failure: [Release qualification](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115640560904)
  - skipped: [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/38484637600/job/115640562308)
- Exact-candidate automatic [main push run 38485952945](https://github.com/NVIDIA/NemoClaw/actions/runs/38485952945) tested `8a5718dd14a2c2e440011488b1f3a32e9414cf82`: completed with failure. Its required base-image-publication job passed. [jetson-nvmap-gpu](https://github.com/NVIDIA/NemoClaw/actions/runs/38485952945/job/115611854206) and [Relevant E2E](https://github.com/NVIDIA/NemoClaw/actions/runs/38485952945/job/115612674492) failed; other selected work was skipped or passed.
- Maintainer E2E choice: Proceed with the final failed status. The maintainer reconfirmed after the older full run completed with 28 failures, including protected managed-image GPU and Release qualification, and after the exact-candidate push run failed Jetson. No additional focused or full E2E run was requested.
- Requested E2E runs: None.

Exceptions: The newest full E2E run tested an older commit and failed 28 jobs, including protected managed-image GPU and Release qualification; the exact-candidate push run failed Jetson, although its required base-image-publication job passed. The maintainer is proceeding while working toward stability and assesses that at least some failures involve upstream service issues such as HTTP 429 responses. The specific causes of all failed jobs have not been classified; no additional E2E run was requested.
Assets 2
Loading