openclaw 2026.6.33

2026.6.33

Highlights

• Safer network and secret boundaries: provider streams, Discord REST responses, browser fetches, OAuth paths, and logs now cap hostile response sizes and keep Telegram credentials out of diagnostics. (#96989, #95412, #99428) Thanks @wangmiao0668000666, @Alix-007, @xialonglee, @liuhaiyang14, @Pick-cat, @mushuiyu886, @vincentkoc, @ZOOWH, @Pandah97, @solodmd, @zhangguiping-xydt, and @obviyus.
• More reliable long-running agents: run release, liveness checks, and watchdog semantics now distinguish genuine stalls from active long model calls and wedged backends. (#102160) Thanks @obviyus, @kiagentkronos-cell, @alvelda, @alkor2000, and @vincentkoc.
• Stronger channel delivery: Discord reconnects no longer silently drop queued messages or repeat ambiguous non-idempotent sends, while Telegram bot-to-bot and reply-fence handling preserve the intended thread and authorization result. (#100896, #103867, #106755) Thanks @tiffanychum, @Godecule, @yetval, @xialonglee, and @RomneyDa.
• Safer credential recovery: service restarts preserve SecretRef-backed Telegram credentials, and OAuth repair no longer overwrites an already-valid destination profile. (#99124, #97541) Thanks @mushuiyu886, @1Wanker, @liuhao1024, @yetval, @Darren2030, @obviyus, and @RomneyDa.
• Extended-stable updates: package installations can select, update from, and receive availability notices for the extended-stable channel without silently falling back to another release line. (#99811, #100438) Thanks @kevinslin.

Changes

• Approval and tool authority: Codex app-server commands now require an actual human/plugin approval, exec auto-review stays bound to the exact resolved command, and narrow tool allowlists remain owned by the factory that constructs them. (#103430, #103457, #104213) Thanks @obviyus, @brokemac79, @Pandah97, @wangmiao0668000666, and @pgondhi987.
• Scoped external tooling: external MCP loopback clients use short-lived session-bound attach grants instead of inheriting mutable child-process authority, and Gateway message actions retain trusted requester provenance and reject untrusted callers. (#102031) Thanks @pgondhi987, @Glucksberg, @wings1029, @Alix-007, @machine3at, and @anagnorisis2peripeteia.

Fixes

• Authorization and disclosure: Gateway HTTP rejects disallowed browser origins before unauthenticated handling, permission repair stays confined to its intended include, MCP status output redacts secrets, and Gateway action bridges reject untrusted requesters. (#102881, #103267, #103396, #102031) Thanks @wangyan2026, @yetval, @NianJiuZst, @obviyus, @pgondhi987, and @brokemac79.
• Gateway and process stability: agent-run caches are bounded, lock probes stop leaking file descriptors, close reasons preserve valid UTF-8, and heartbeat reads survive transient filesystem races. (#77973, #99291, #100047, #100389) Thanks @fede-kamel, @chenyangjun-xy, @zhangLei99586, @NarahariRaghava, @ogarciarevett, @markr9805, @849261680, @mushuiyu886, @vincentkoc, @wings1029, and @masatohoshino.
• Provider and browser reliability: Anthropic-compatible partial streams stop hanging at their size bound, OpenAI Realtime uses the correct authentication and transcription secret flow, and remote CDP credentials stay out of responses. (#100686, #102518, #103139) Thanks @zhangguiping-xydt, @cxbAsDev, @sjf-oa, @sjf, @vincentkoc, and @obviyus.
• Ingress and webhook safety: replayed Twilio requests are rejected under sustained traffic, corrupt queued channel rows are tombstoned without blocking later work, and Telegram tokens are redacted even when split across log chunks. (#101107, #105259, #103861) Thanks @zhangguiping-xydt, @vincentkoc, @mushuiyu886, @Pick-cat, and @xialonglee.

Complete contribution record

This audited record covers the complete v2026.6.11..db7af38 history: 169 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

• PR #98835 Related #98672. Thanks @moguangyu5-design and @jalehman and @AaronFaby.
• PR #96989 Thanks @wangmiao0668000666 and @vincentkoc.
• PR #95412 Thanks @Alix-007.
• PR #95108 Thanks @vincentkoc.
• PR #97499 Thanks @wangmiao0668000666.
• PR #102953 Thanks @ZOOWH.
• PR #97551 Thanks @Alix-007 and @vincentkoc.
• PR #97540 Thanks @Alix-007 and @vincentkoc.
• PR #95416 Thanks @Alix-007 and @vincentkoc.
• PR #97614 Thanks @cxbAsDev.
• PR #97808 Thanks @Pick-cat.
• PR #96445 Thanks @lin-hongkuan.
• PR #97961 Thanks @eleqtrizit.
• PR #97838 Thanks @pgondhi987.
• PR #98455 Thanks @wings1029.
• PR #100889 Thanks @mushuiyu886.
• PR #77973 Related #77976. Thanks @fede-kamel and @vincentkoc.
• PR #99291 Related #98958. Thanks @chenyangjun-xy and @zhangLei99586.
• PR #99428 Related #96982. Thanks @xialonglee and @liuhaiyang14.
• PR #98130 Thanks @Pick-cat.
• PR #100047 Related #99976. Thanks @NarahariRaghava.
• PR #100389 Related #99994. Thanks @ogarciarevett and @markr9805.
• PR #98682 Thanks @wings1029.
• PR #99479 Thanks @Pandah97.
• PR #101079 Thanks @cxbAsDev.
• PR #101160 Thanks @cxbAsDev.
• PR #102105 Thanks @wangmiao0668000666.
• PR #102450 Thanks @qingminglong.
• PR #100483 Related #100423. Thanks @versatagent.
• PR #102050 Thanks @Alix-007.
• PR #102952 Related #55365. Thanks @lidge-jun and @Mdx2025.
• PR #102160 Related #85826, #96168. Thanks @obviyus and @kiagentkronos-cell and @alvelda.
• PR #96224 Related #77986. Thanks @eleqtrizit and @fede-kamel.
• PR #96599 Thanks @sjf-oa and @sjf.
• PR #96615 Related #96589. Thanks @liuhao1024 and @yetval.
• PR #89812 Related #89626. Thanks @Petru2224.
• PR #92274 Related #91527. Thanks @fsdwen and @zackchiutw.
• PR #96396 Related #95784. Thanks @849261680 and @velvet-shark and @BryceMurray.
• PR #96096 Related #85900. Thanks @849261680 and @velvet-shark and @fanispoulinakisai-boop.
• PR #96831 Related #94083. Thanks @velvet-shark and @ooiuuii.
• PR #96142 Related #95574. Thanks @brokemac79 and @riazrahaman.
• PR #97044 Related #96983. Thanks @zw-xysk and @vincentkoc and @liuhaiyang14.
• PR #94452 Related #94040. Thanks @mushuiyu886 and @xrow.
• PR #96772 Thanks @wangmiao0668000666 and @vincentkoc.
• PR #96042 Thanks @Alix-007 and @vincentkoc.
• PR #96038 Thanks @Alix-007 and @vincentkoc.
• PR #96031 Thanks @Alix-007.
• PR #95103 Thanks @vincentkoc.
• PR #97620 Thanks @Alix-007 and @vincentkoc.
• PR #97693 Thanks @Alix-007.
• PR #98496 Thanks @Pandah97.
• PR #97784 Thanks @Alix-007.
• PR #97140 Related #97091. Thanks @galiniliev.
• PR #95543 Related #95474. Thanks @mikasa0818 and @ElliotDrel.
• PR #97504 Thanks @hugenshen.
• PR #90908 Thanks @shengting.
• PR #97356 Thanks @miorbnli.
• PR #97541 Related #97522. Thanks @liuhao1024 and @yetval.
• PR #97520 Related #97313. Thanks @zhangguiping-xydt and @pmdvedar-ai.
• PR #96544 Thanks @yetval and @vincentkoc.
• PR #97579 Thanks @hugenshen.
• PR #96644 Thanks @solodmd.
• PR #97214 Thanks @masatohoshino and @vincentkoc.
• PR #97372 Thanks @masatohoshino.
• PR #95774 Thanks @mushuiyu886.
• PR #95084 Related #90684. Thanks @jailbirt and @studentzhou-svg.
• PR #97367 Thanks @masatohoshino.
• PR #98693 Thanks @ZengWen-DT and @cursoragent.
• PR #89817 Thanks @masatohoshino.
• PR #96965 Related #96929. Thanks @zw-xysk and @YouToco.
• PR #100107 Thanks @frank-beans.
• PR #97861 Thanks @yetval.
• PR #96444 Thanks @lin-hongkuan.
• PR #96492 Thanks @yetval.
• PR #97870 Thanks @eleqtrizit.
• PR #98142 Thanks @RomneyDa.
• PR #98226 Related #98225. Thanks @ooiuuii.
• PR #99460 Related #99459. Thanks @ooiuuii.
• PR #98354 Thanks @Pick-cat.
• PR #98508 Thanks @lzyyzznl.
• PR #93379 Related #77755. Thanks @xialonglee and @jiveshkalra.
• PR #99070 Thanks @LeonidasLux.
• PR #98720 Related #98463. Thanks @wangmiao0668000666 and @zhangLei99586.
• PR #99800 Thanks @cxbAsDev and @vincentkoc.
• PR #100744 Thanks @lsr911 and @vincentkoc.
• PR #98262 Related #98239. Thanks @brokemac79.
• PR #101366 Related #84600. Thanks @deepujain and @13884379776l.
• PR #100835 Thanks @machine3at.
• PR #102035 Thanks @pgondhi987.
• PR #101617 Thanks @zhangguiping-xydt.
• PR #101744 Thanks @hugenshen and @cursoragent.
• PR #101739 Thanks @Alix-007.
• PR #102089 Thanks @Alix-007.
• PR #102661 Related #98038. Thanks @mabaty.
• PR #102403 Thanks @yetval.
• PR #102398 Thanks @yetval.
• PR #102426 Thanks @pgondhi987.
• PR #102840 Thanks @yetval.
• PR #103441 Related #68691. Thanks @hobo-l-20230331 and @aaajiao.
• PR #103267 Thanks @NianJiuZst.
• PR #104015
• PR #103619 Thanks @pgondhi987.
• PR #104337 Related #104330.
• PR #102881 Related #102834. Thanks @wangyan2026 and @yetval.
• PR #105769 Thanks @mushuiyu886.
• PR #102924 Thanks @hugenshen.
• PR #106056 Thanks @pgondhi987.
• PR #106806 Related #103056. Thanks @yetval.
• PR #96143 Related #77616. Thanks @brokemac79 and @RomneyDa and @slideshow-dingo.
• PR #97271 Thanks @hugenshen.
• PR #96762 Thanks @wangmiao0668000666 and @vincentkoc.
• PR #97235 Thanks @zhangguiping-xydt and @vincentkoc.
• PR #95542 Related #95519. Thanks @mikasa0818 and @altaywtf and @zjx111234.
• PR #97571 Related #97564. Thanks @liuhao1024 and @nicelysalted.
• PR #86088 Thanks @liaoandi and @altaywtf.
• PR #99960 Thanks @masatohoshino and @vincentkoc.
• PR #85296 Thanks @alkor2000 and @vincentkoc.
• PR #100484 Thanks @vincentkoc and @litang9.
• PR #100722 Related #98864. Thanks @cxbAsDev and @carterstebbins23-spec.
• PR #94149 Related #84698. Thanks @ZengWen-DT and @cursoragent and @zus-assistant.
• PR #96065 Thanks @Darren2030 and @obviyus.
• PR #99124 Related #98107. Thanks @mushuiyu886 and @1Wanker.
• PR #99931 Related #98357. Thanks @ooiuuii.
• PR #91584 Thanks @hiragram and @openclaw-agent.
• PR #100896 Related #56610. Thanks @tiffanychum and @Godecule.
• PR #103867 Thanks @yetval.
• PR #101378 Related #91489, #92054, #98573. Thanks @wendy-chsy and @Vilard7 and @arturomagdiel and @studiodevlabs.
• PR #101394 Thanks @cxbAsDev.
• PR #100686 Thanks @zhangguiping-xydt.
• PR #102518
• PR #103139
• PR #103353 Related #103317.
• PR #103247
• PR #103430 Related #103427.
• PR #103457 Related #103427.
• PR #103617 Related #103610.
• PR #103396 Related #103053. Thanks @obviyus and @yetval.
• PR #103074 Thanks @pgondhi987.
• PR #103822
• PR #101107 Thanks @zhangguiping-xydt.
• PR #103620 Thanks @pgondhi987.
• PR #103861 Thanks @vincentkoc.
• PR #105259 Thanks @Pick-cat.
• PR #104213 Related #104208. Thanks @obviyus.
• PR #104715 Thanks @Leon-SK668.
• PR #105082
• PR #102031 Thanks @pgondhi987.
• PR #106755
• PR #106854
• PR #103994
• PR #102996
• PR #99811 Related #99808. Thanks @kevinslin.
• PR #100438 Thanks @kevinslin.
• PR #102759 Related #102757. Thanks @vincentkoc.
• PR #102858
• PR #102896
• PR #103737 Thanks @vincentkoc.
• PR #103759 Thanks @vincentkoc.
• PR #103906
• PR #104162 Related #104161. Thanks @vincentkoc.
• PR #104697
• PR #105746 Thanks @vincentkoc.
• PR #99266 Thanks @RomneyDa.
• PR #100448 Thanks @kevinslin.
• PR #107832 Thanks @RomneyDa.
• PR #99212
• PR #107872 Thanks @RomneyDa.
• PR #102600
• PR #103204 Related #103189.

Release verification

Extended-stable Gateway release: npm and container images only. GitHub Releases has one repository-wide Latest flag, not a per-channel Latest; this page is intentionally not Latest. The moving extended-stable selectors may advance, so use the exact 2026.6.33 references below for this release.

• npm package: openclaw@2026.6.33
• npm registry tarball: openclaw-2026.6.33.tgz
• npm integrity: sha512-53MCYfnMEzQmrh/mFNpqfUcQunZASPZ2qYOmqn6wq3K4gZPzV0QOMwjxOCU2C+VmQ5FqzVU8exy7j7pyL3EBzQ==
• Container images: GHCR and Docker Hub, with exact tags 2026.6.33, 2026.6.33-slim, and 2026.6.33-browser for amd64 and arm64
• Container manifest digests: default/slim sha256:99546785a121ccac065263d4b609c3dc08a396d260b20c837722e7998be0a6ee; browser sha256:91b9af17a0a5667defbb74a411da668054374c6165033e990a935f6a154cc48c
• Release commit: 7af0cfc9c5488e03c4e2f528bdc7ac9f7778b35e
• Release workflows: npm preflight, Full Release Validation, plugin npm publish, OpenClaw npm publish, and Docker Release