← OpenClaw
OpenClaw openclaw 2026.9.33
securitymodel2026-10-15 · official notes
Summary
- This is a gateway-only extended-stable release, which is our current equivalent to LTS. This release is OpenClaw from the end of September 2026, plus critical security updates, reliability and perform
- Safer September upgrades: updates on the 2026.9 line keep state, plugin data, service ownership, and Windows state paths intact, and refuse automatic restore over unattributed Doctor writes. (#160167,
- Updates that finish on pnpm, npm, and Windows: pnpm 12 Gateway services and launchers survive native updates, retained updater runtimes no longer block npm recovery, and Windows updates no longer roll
Full notes
This is a gateway-only `extended-stable` release, which is our current equivalent to LTS. This release is OpenClaw from the end of September 2026, plus critical security updates, reliability and performance fixes, and features like new model support. The latest version of OpenClaw at the time of this release is [2026.10.3](https://github.com/openclaw/openclaw/releases#release-v2026.10.3)
## 2026.9.33
### Highlights
- **Safer September upgrades:** updates on the 2026.9 line keep state, plugin data, service ownership, and Windows state paths intact, and refuse automatic restore over unattributed Doctor writes. (#160167, #166755) Thanks @RomneyDa, @vyctorbrzezowski, @jalehman, @Alix-007, @jayzhou2309, @nitinjwadhawan, @SunnyShu0925, @obviyus, @vincentkoc, @taihartman, and @DonnieFi.
- **Updates that finish on pnpm, npm, and Windows:** pnpm 12 Gateway services and launchers survive native updates, retained updater runtimes no longer block npm recovery, and Windows updates no longer roll back after Doctor rechecks driver ancestry. (#170003, #170131, #170170, #169563) Thanks @xilopaint, @k-sekula, @Warhangel, @RomneyDa, @DonnieFi, @Takhoffman, @NianJiuZst, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @Yolo521-bot, @mightyx, and @ajmtrz.
- **New model support:** run Meta Muse Wonder, use MiniMax M3.1 thinking effort levels, and stay signed in to MiniMax portal OAuth past token expiry. (#170232, #160089, #160459) Thanks @RomneyDa, @NianJiuZst, @Takhoffman, @php737, @masatohoshino, @rongtianhua, @DonnieFi, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **More reliable model turns:** agent runs honor live thinking levels, local providers get response-header deadlines, ChatGPT WebSocket normal closes recover, and Codex replies keep their final tokens. (#168566, #168282, #167512, #168400) Thanks @obviyus, @ericcurtin, @mightyx, @RomneyDa, @DonnieFi, @Takhoffman, @NianJiuZst, @masatohoshino, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, and @ajmtrz.
- **Work survives Gateway restarts:** interrupted automation turns, steered sessions, cloud worker claims, and partial worker replies now resume or persist after a restart. (#170162, #170252, #170161, #170223) Thanks @DonnieFi, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **Delivery and device stability:** live sends survive queue recovery, and node requests no longer fail on unrelated pairing activity or while another device's pairing is written. (#169010, #169486, #169575) Thanks @RomneyDa, @DonnieFi, @Takhoffman, @NianJiuZst, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **Agent and update stability:** carry a broad batch of compatible October fixes for agent turns, sessions, channels, and update recovery. (#170476) Thanks @RomneyDa, @yetval, @Dimitri-lcht, @Program-123, @dhruv1220, @Shenrui-Ma, @igs-rogenlo, @changeroa, @hxy91819, @Takhoffman, @harjothkhara, @TYY-2005, @giodl73-repo, @masatohoshino, @obviyus, @jalehman, @wangmiao0668000666, and @an2in.
### Changes
- **Meta:** add the Muse Wonder model to the catalog and onboarding with max thinking support, keeping Spark as the default. (#170232) Thanks @RomneyDa, @DonnieFi, @Takhoffman, @NianJiuZst, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **MiniMax:** add the MiniMax M3.1 Flash Preview model and route its thinking effort levels to the provider. (#160089) Thanks @NianJiuZst, @Takhoffman, @php737, @DonnieFi, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **LM Studio:** refreshing saved inventory now discovers newly loaded models. (#168039) Thanks @jb-lopez, @DonnieFi, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
### Fixes
- **Update and Doctor:** keep Doctor running under unreadable supervisors and child binding errors, keep clean service install refusals out of native-authority recovery, stop update history writes from stalling cron and cleanup, avoid bookkeeping-only repair refusals, and never delete an OAuth profile because the legacy auth store is unreadable. (#169665, #169658, #169283, #170195, #170256) Thanks @DonnieFi, @Yolo521-bot, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @mightyx, and @ajmtrz.
- **Updating from 2026.8.35:** cron jobs approved with "allow always" keep running unattended after the update, pnpm 12 Gateway services left on a deleted store generation are rewritten to the durable install link, Doctor defers optional checks so updates finish under older updaters' time limits, official plugins with removed SDK imports are no longer silently kept, and Kubernetes pods run Doctor before starting. (#171816) Thanks @RomneyDa.
- **Gateway responsiveness:** long streamed replies that start with a reply tag such as `[[reply_to_current]]` no longer re-parse the whole reply on every delta, which could keep the Gateway busy for tens of seconds. #166781 (#166782) Thanks @boeingchoco and @obviyus.
- **Tailscale:** an interrupted Tailscale Serve start stops its serve process, the Gateway keeps local access when the tailnet denies Serve, and public chat no longer returns 503s right after startup. #167436 (#167514, #171509, #167604) Thanks @pandysp and @RomneyDa.
- **Context engine:** sessions holding an old blocked turn no longer repeat the blocked-turn warning and re-read it on every run. (#167595) Thanks @jalehman.
- **State database:** state reads no longer stay closed until a Gateway restart after a failed state cleanup. Fixes #162085. (#171709) Thanks @RomneyDa and @residentb2b.
- **Update summaries and Doctor:** successful updates stop listing settled plugin data and settings upgrades as pending, optional dreaming-cron inspection or snapshot cleanup failures no longer block updates, and macOS LaunchAgent repair accepts an in-progress bootstrap. (#170413, #170754, #170740) Thanks @RomneyDa and @DonnieFi.
- **Providers:** recover DeepSeek `calls` markup instead of leaking tool payloads, recover Codex follow-up requests after failed thread preparation, and select aliased llama.cpp models while failing setup when credentials cannot be saved. (#169728, #169431, #168232) Thanks @TOMUIV, @jjjhenriksen, @DonnieFi, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **Channels and tools:** channel tools keep working after a config write restarts the account, ACP agents keep plugin and OpenClaw tools when acpx is installed separately, Talk consultations no longer abort right after connecting, and routed turns deliver blocking questions. (#164848, #159396, #164272, #170083, #170039) Thanks @sjf-oa, @ceckert, @jayzhou2309, @ajmtrz, @brokemac79, @DonnieFi, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, and @mightyx.
- **Automation:** failed one-shot automations always alert, and cron no longer holds the state writer while waiting on host admission. (#169102, #168291) Thanks @DonnieFi, @Takhoffman, @NianJiuZst, @RomneyDa, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
- **Release checks:** Windows installer checks tolerate slow `gateway stop` help and surface cleanup errors, packaged checks recover from a busy Gateway port, and extended-stable candidates now qualify upgrades from the previous extended-stable release. (#169567, #170178, #171565) Thanks @RomneyDa, @DonnieFi, @Takhoffman, @NianJiuZst, @masatohoshino, @obviyus, @ericcurtin, @jjjhenriksen, @sjf-oa, @ceckert, @jayzhou2309, @brokemac79, @xilopaint, @k-sekula, @Warhangel, @Yolo521-bot, @mightyx, and @ajmtrz.
### Complete contribution record
This audited record covers the complete v2026.9.9..a902bd2d4bd1707cdc0c861bb9bf92727645f700 history: 65 in-range PRs + 0 retained seed-only PRs = 65 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.
#### Pull requests
- **PR #168346** Thanks @RomneyDa.
- **PR #160167** Thanks @RomneyDa and @vyctorbrzezowski and @jalehman and @Alix-007 and @jayzhou2309 and @nitinjwadhawan and @SunnyShu0925 and @obviyus and @vincentkoc.
- **PR #166755** Related #166656. Thanks @RomneyDa and @vyctorbrzezowski and @jalehman and @Alix-007 and @jayzhou2309 and @nitinjwadhawan and @SunnyShu0925 and @obviyus and @vincentkoc and @taihartman.
- **PR #170476** Thanks @RomneyDa and @yetval and @Dimitri-lcht and @Program-123 and @dhruv1220 and @Shenrui-Ma and @igs-rogenlo and @changeroa and @hxy91819 and @Takhoffman and @harjothkhara and @TYY-2005 and @giodl73-repo and @masatohoshino and @obviyus and @jalehman and @wangmiao0668000666 and @an2in.
- **PR #169567** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170178** Related #169669, #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170702** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169665** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169563** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169658** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169283** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170195** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170003** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170131** Related #169244, #169059, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @k-sekula and @xilopaint and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170170** Related #169463, #169059, #169244, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @Warhangel and @xilopaint and @k-sekula and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #170256** Related #168959, #169059, #169244, #169463, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @Yolo521-bot and @xilopaint and @k-sekula and @Warhangel and @mightyx and @ajmtrz.
- **PR #170232** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #160089** Related #160037, #169059, #169244, #169463, #168959, #167345, #164211. Thanks @NianJiuZst and @DonnieFi and @Takhoffman and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @php737 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #160459** Related #77467, #169059, #169244, #169463, #168959, #167345, #164211. Thanks @masatohoshino and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @rongtianhua and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #168566** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @obviyus and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #168039** Related #150262, #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @jb-lopez and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #168232** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169728** Related #159665, #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @TOMUIV and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #167512** Related #167345, #169059, #169244, #169463, #168959, #164211. Thanks @ericcurtin and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @mightyx and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @ajmtrz.
- **PR #168282** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #168400** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169431** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @jjjhenriksen and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169010** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @RomneyDa and @DonnieFi and @Takhoffman and @NianJiuZst and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #164848** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @sjf-oa and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #159396** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @ceckert and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169486** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #169575** Related #169059, #169244, #169463, #168959, #167345, #164211. Thanks @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenriksen and @sjf-oa and @ceckert and @jayzhou2309 and @brokemac79 and @xilopaint and @k-sekula and @Warhangel and @Yolo521-bot and @mightyx and @ajmtrz.
- **PR #164272** Related #164211, #169059, #169244, #169463, #168959, #167345. Thanks @jayzhou2309 and @DonnieFi and @Takhoffman and @NianJiuZst and @RomneyDa and @masatohoshino and @obviyus and @ericcurtin and @jjjhenrik
Weekly digest: every breaking change, retirement and price change across 20+ coding agents, one email.
Form not loading? Subscribe here.