v2026.9.8

Promoted from v2026.9.8-alpha.1 at 94006b3.

What's Changed

• build(deps): bump github/gh-aw-actions/setup-cli from 0.88.4 to 0.89.7 by @dependabot[bot] in #1416
• fix: match Local AI icon to the colorful sidebar by @bkudiess in #1431
• chore(ci): build MSIX artifacts and publish Store alpha assets by @natalie-aguinaldo in #1403
• fix(sandbox): explain unsupported Windows containment by @yjw0817 in #1415
• chore(msix): rename download files to OpenClaw by @natalie-aguinaldo in #1444
• chore: retire CLAUDE.md aliases by @steipete in #1450
• feat(msix): allocate monotonic package versions by @natalie-aguinaldo in #1448
• feat(msix): publish multi-architecture Store bundle by @RomneyDa in #1452
• feat(msix): publish Store assets on every release by @RomneyDa in #1453
• feat: explore and test the app without a live Gateway by @shanselman in #1439
• improve(chat): modernize the native chat experience by @bkudiess in #1459
• fix: triage dashboard fails to open without supplied state by @karkarl in #1463
• fix(connection): require hello-ok before operator RPCs by @eleqtrizit in #1425
• build(deps): bump github/gh-aw-actions/setup-cli from 0.89.7 to 0.89.16 by @dependabot[bot] in #1454
• fix(audio): pin download redirects and bound ElevenLabs bodies by @SebTardif in #1423
• fix(connection): reject unsafe SSH users before Open Terminal by @SebTardif in #1478
• fix: Companion session cards open the main session instead of the selected one by @yadiaprianto in #1436
• fix(e2e): keep fixture uninstall away from user startup entries by @shanselman in #1494
• fix(node): ignore non-connect failed replies by @SebTardif in #1483
• fix(gateway): gate operator RPCs until hello-ok by @karkarl in #1472
• fix(a2ui): removing an obscured field leaves the password in the dump by @SebTardif in #1501
• fix(a2ui): one array index fills memory on the tray by @SebTardif in #1502
• fix(channels): do not write redacted sibling secrets back by @SebTardif in #1487
• fix(connection): keep device tokens when a gateway edit does not change the shared token by @SebTardif in #1485
• fix(setup): restore gateway reload mode through stdin by @SebTardif in #1489
• Bump Microsoft.ML.OnnxRuntime from 1.29.0 to 1.30.0 by @dependabot[bot] in #1417
• fix(setup): retry guarded restart after reload owner handoff by @karkarl in #1515
• fix(tests): tray source checks fail when the checkout is LF by @SebTardif in #1518
• feat(migration): gate Inno-to-Store migration preview and preserve the gateway on uninstall by @natalie-aguinaldo in #1461
• fix(mxc): treat cmd /R as a command-mode switch by @SebTardif in #1477
• fix(permissions): the Permissions page hides wildcard exec rules by @SebTardif in #1506
• fix(chat): in-chat approval card can show a different command than Allow runs by @SebTardif in #1499
• fix(local-ai): handle Win32Exception when launching llama-server for inspection by @larroy in #1534
• feat(setup): guide native Gateway installation and onboarding by @karkarl in #1447
• fix(setup): retry guarded restart intent contention by @shanselman in #1507
• fix(setup): keep WSL PATH scripts off the wsl.exe argv path by @SebTardif in #1476
• Bump Microsoft.WindowsAppSDK from 2.4.0 to 2.5.1 by @karkarl in #1522
• fix(test): stop migration script exit assertion from flaking on slow runners by @natalie-aguinaldo in #1536
• build(deps): bump github/gh-aw-actions/setup-cli from 0.89.17 to 0.89.21 by @dependabot[bot] in #1532
• docs(skills): add Astra and Opus 5.5 adversarial review by @shanselman in #1545
• feat(local-ai): route RTX Spark unified-memory SKUs through NVIDIA's fixed recipe table by @karkarl in #1520
• fix(setup): avoid premature Gateway restart timeouts by @karkarl in #1539
• feat(migration): ship the Inno-to-Store migration by @natalie-aguinaldo in #1519
• feat(setup): install native Gateway automatically through WinGet by @xlinush in #1547
• fix: Companion cannot onboard with an isolated Gateway by @paulcam206 in #1553
• fix(winnode): local MCP bearer is sent to HTTP_PROXY by @SebTardif in #1554
• fix(voice): ElevenLabs speech sends the API key to a redirect by @SebTardif in #1555
• fix(local-ai): re-probe incomplete CUDA hardware results in the setup window by @larroy in #1540
• fix(chat): legacy web chat sends the gateway token to HTTP_PROXY by @SebTardif in #1557
• fix(setup): approve only the pairing request setup just opened by @karkarl in #1523
• feat: guide Windows onboarding from setup to native AI tasks by @bkudiess in #1531
• fix(setup): show icon in window preview by @natalie-aguinaldo in #1558
• feat(workspace): add native Home and Sessions workspace by @karkarl in #1541
• fix(onboarding): align setup surfaces and keep provider loading inline by @bkudiess in #1562
• improve(onboarding): align Store migration with setup visuals by @bkudiess in #1563
• feat: run Local AI with native isolated Gateways by @karkarl in #1565
• improve: tidy Chat and Settings navigation by @karkarl in #1566
• feat(local-ai): reuse verified llama.cpp runtime downloads across reinstalls by @larroy in #1544
• fix: recover and release native Local AI Gateway ownership safely by @karkarl in #1570
• docs: point Gateway MSIX work to packaging repo by @RomneyDa in #1588
• fix(setup): repair WinGet before Store retry by @RomneyDa in #1591
• fix: show owned Local AI recovery without hiding existing models by @karkarl in #1585
• fix(local-ai): stage VC runtime beside llama server by @RomneyDa in #1596
• fix: avoid premature timeouts when completing native AI setup by @karkarl in #1582
• feat: run the native Gateway built from source beside the Store Gateway by @larroy in #1594
• fix(release): publish signed MSIX downloads by @RomneyDa in #1600
• fix(ci): Build and Test flakes when Workspace keyboard input or console tail polling runs late by @larroy in #1597
• fix(setup): ignore packaged toast activation argument by @RomneyDa in #1604
• fix(local-ai): make llama runtime validation deterministic by @RomneyDa in #1605
• fix(test): stabilize native Gateway startup cancellation by @RomneyDa in #1606
• fix(release): trust downloaded Dev MSIX certificates machine-wide by @RomneyDa in #1607
• fix(test): tolerate delayed Windows process exit observation by @RomneyDa in #1608
• fix(local-ai): allow cold-start runtime scan by @RomneyDa in #1609
• fix(local-ai): launch with physical MSIX paths by @RomneyDa in #1610
• improve(ci): overlap release asset preparation with validation by @RomneyDa in #1616
• fix(test): tolerate delayed MCP handler scheduling by @RomneyDa in #1622
• fix(release): alpha notes show only chronologically ordered new changes by @RomneyDa in #1617
• fix(setup): ignore COM embedding argument by @RomneyDa in #1625
• feat(local-ai): update RTX Spark 48GB recipe (b11320, Q4_K_S, MTP n=2) by @joelagnel in #1595
• fix(onboarding): reorder unsupported native Gateway choice by @RomneyDa in #1602
• fix(chat): stop reading replies aloud by default by @bkudiess in #1615
• fix: keep emoji intact when a gateway text frame is split by @SebTardif in #1630
• fix(local-ai): stop a stalled llama-server health body at the startup budget by @SebTardif in #1627
• fix(audio): stop canceled voice extraction leaving its process running by @shanselman in #1645
• fix(tests): wait for onboarding cards before invocation by @shanselman in #1646
• improve: reduce disk allocation in Local AI lifecycle tests by @shanselman in #1647
• chore(ci): avoid product CI for tested repository tooling by @shanselman in #1648
• fix(chat): show queued messages as pending conversation bubbles by @bkudiess in #1620
• fix(onboarding): show translated labels when connecting to a gateway by @bkudiess in #1619
• fix(chat): use paperclip glyph for chat attach button by @larroy in #1581
• fix(chat): clear stale setup warnings after recovery by @bkudiess in #1624
• fix(chat): let Shift+Enter insert a composer newline by @karkarl in #1537
• chore(autoreview): use the shared canonical skill by @vincentkoc in #1599
• feat(workspace): sidebar session context menu, busy ring, and faster session switching by @larroy in #1629
• feat: add standalone clean uninstall for demo devices by @karkarl in #1598
• fix: Companion fails to reconnect after isolated session replacement by @RomneyDa in #1649
• fix(local-ai): resolve physical CUDA and setup log paths by @RomneyDa in #1670
• feat(release): promote published alpha candidates to stable by @karkarl in #1652

New Contributors

• @yjw0817 made their first contribution in #1415
• @eleqtrizit made their first contribution in #1425
• @yadiaprianto made their first contribution in #1436
• @xlinush made their first contribution in #1547

Full Changelog: v2026.9.4...v2026.9.8

Signed Dev MSIX packages

OpenClaw-Dev-x64.zip and OpenClaw-Dev-arm64.zip contain development-signed
packages, matching public certificates, provenance, and installation instructions.
These are not Microsoft Store-signed packages. Unsigned Store submission packages
remain workflow artifacts.