Skip to content

v2026.4.2-1 — Documentation for OpenClaw v2026.4.2

Choose a tag to compare

@mudrii mudrii released this 03 Apr 02:39
· 37 commits to main since this release

Documentation Release v2026.4.2-1

Rebased all documentation to the current stable line: published GitHub release v2026.4.2 (published 2026-04-02 UTC).

Upstream Release Window

  • Tag range: v2026.4.1..v2026.4.2
  • 284 commits, 882 files changed, +51,562 / -9,916 lines

Codebase Stats (validated at tag v2026.4.2)

  • 8,658 TypeScript files (up from 8,607)
  • 1,710,796 lines of TypeScript (up from 1,655,809)
  • 84 extension packages (consolidated from 91)
  • 190 bundled skills (up from 65)
  • 15 Markdown documents in this repo

Breaking Changes Documented

  • Plugins/xAI: x_search settings migrated from tools.web.x_search.* to plugins.entries.xai.config.xSearch.* — run openclaw doctor --fix to migrate
  • Plugins/web fetch: Firecrawl web_fetch config migrated from tools.web.fetch.firecrawl.* to plugins.entries.firecrawl.config.webFetch.* — run openclaw doctor --fix to migrate

Major Documentation Updates

  • Task Flow substrate: Core Task Flow restored with managed-vs-mirrored sync modes, durable flow state/revision tracking, child task spawning with sticky cancel intent, and openclaw tasks flow inspection/recovery CLI
  • Plugin api.runtime.taskFlow seam: Plugins can now create and drive managed Task Flows from host-resolved context
  • before_agent_reply hook: Plugins can short-circuit the LLM with synthetic replies after inline actions
  • Provider transport centralization: Major refactoring — request auth, proxy, TLS, header shaping centralized across HTTP/stream/websocket; endpoint classification hardened for Copilot, Anthropic, and OpenAI-compatible routing
  • Exec YOLO defaults: Gateway/node host exec defaults to security=full with ask=off (no-prompt)
  • Channel updates: Matrix m.mentions, Feishu Drive comment-event flow, WhatsApp reactionLevel, Slack mrkdwn guidance, MS Teams streaming fix, session routing moved to plugin-owned surfaces
  • Security hardening: Exec/env pivots blocked, dotenv workspace overrides blocked, webhook safeEqualSecret unification, browser CDP/host inspection fixes, image gen SSRF hardening
  • Agent improvements: agents.defaults.compaction.notifyUser opt-in, output sanitization (antml:thinking stripping), ACP reconnect reliability, Kimi Coding tool normalization

Files Changed

  • 17 files: 819 insertions, 233 deletions
  • All 10 analysis files updated
  • All 5 core documents updated (README, CHANGELOG, ARCHITECTURE, AGENT_README, AGENTS)
  • Integrity findings replaced with v2026.4.2 audit