Skip to content
This repository was archived by the owner on Jul 18, 2026. It is now read-only.

v2026.2.23

Choose a tag to compare

View all tags
@aaajiao aaajiao released this 24 Feb 13:45
· 183 commits to main since this release
v2026.2.23
8f53e75

Sync with upstream OpenClaw v2026.2.23

Setup Script

  • Pre-create ~/.openclaw/identity directory before openclaw onboard (v2026.2.22 compat)

Config Template (openclaw.json.example)

  • Add browser SSRF policy config (ssrfPolicy, dangerouslyAllowPrivateNetwork)
  • Add gateway.http.securityHeaders for HTTPS deployments
  • Add session.maintenance disk budget controls
  • Add Gemini 3.1 model to catalog (google/gemini-3.1-pro-preview)
  • Add Kilo Gateway and Moonshot/Kimi provider examples
  • Add update.auto config (commented out, default off)
  • Add channels.modelByChannel per-channel model override example

Documentation

  • configuration-guide.md: SSRF policy, session disk budget, security headers, new providers (Kilo Gateway, Moonshot AI), new env vars
  • sandbox.md: Base image SHA256 pinning note, OPENCLAW_BROWSER_NO_SANDBOX env var
  • commands.md: New env vars (OPENCLAW_BROWSER_NO_SANDBOX, OPENCLAW_TELEGRAM_DNS_RESULT_ORDER, OPENCLAW_NODE_EXEC_HOST)
  • architecture.md: Browser sandbox dedicated Docker network note (v2026.2.21+)

Upstream Highlights (v2026.2.18 → v2026.2.23)

  • Browser sandbox now uses dedicated Docker network for isolation
  • SSRF protection defaults to trusted-network mode
  • Session maintenance with disk budget controls
  • First-class Kilo Gateway provider support
  • Prompt caching enhancements
  • Multiple security hardening improvements
Assets 2
Loading