Skip to content
This repository was archived by the owner on Jul 18, 2026. It is now read-only.

v2026.2.25

Choose a tag to compare

View all tags
@aaajiao aaajiao released this 26 Feb 07:28
· 181 commits to main since this release
v2026.2.25
ea1c7f0

Sync with upstream OpenClaw v2026.2.25 (covering v2026.2.24 + v2026.2.25 changes).

What's New

New Config Options

  • agents.defaults.heartbeat.directPolicy — Control heartbeat DM delivery ("allow" | "block"). v2026.2.24 changed default target from "last" to "none" (opt-in); v2026.2.25 introduced explicit directPolicy (default "allow")
  • sandbox.docker.dangerouslyAllowContainerNamespaceJoin — Docker network: "container:<id>" namespace-join mode now blocked by default (v2026.2.24)
  • security.trust_model.multi_user_heuristic — New top-level security block for multi-user detection heuristics (v2026.2.24)
  • session.parentForkMaxTokens — Prevent oversized parent sessions from bricking Slack thread sessions (default: 100000, v2026.2.25)

CLI Changes

  • openclaw memory search now accepts --query <text> in addition to positional arguments

Upstream Highlights

  • Security hardening: sandbox media path restrictions, exec environment sanitization, hooks Unicode NFKC normalization
  • Channel fixes: Discord voice stability, WhatsApp reasoning safety, Telegram formatting fallback, Matrix instant read receipts
  • Provider fixes: OpenRouter cooldown bypass, Google thinkingBudget sanitization, Bedrock alias normalization
  • Model fallback chain improvements: continues traversal instead of collapsing to primary-only

Full upstream release notes: v2026.2.24 | v2026.2.25

Assets 2
Loading