$ git log --oneline --all

openclaw.changelog()

/** Every release documented — what's new, what broke, how to migrate, and how the community reacted */

14 releases•Current: 2026.3.13•GitHub Releases →

release-2026.3.13.md

2026.3.13PATCH2026-03-13

Live Chrome Browser Control + Redesigned Mobile App + Docker TZ

// Real Chrome browser session control for AI agents. Redesigned Android chat settings UI. Docker OPENCLAW_TZ timezone support. Compaction fixes, Telegram media transport policy improvements, and Discord gateway metadata reliability.

#Browser#Mobile#Docker#Performance

→ Full release notes

release-2026.3.12.md

2026.3.12MINOR⚠ BREAKING CHANGE2026-03-12

Dashboard v2 + Fast Mode + Kubernetes + 15 CVE Patches

// Complete Control UI refresh with modular views and command palette. Configurable Fast Mode for OpenAI/Anthropic speed toggles. Starter Kubernetes manifests. 15+ critical CVEs patched. Implicit workspace plugin autoloads disabled (BREAKING).

#Dashboard#FastMode#K8s#Security

→ Full release notes

release-2026.3.11.md

2026.3.11MINOR⚠ BREAKING CHANGE2026-03-11

Multimodal Memory + iOS Redesign + Gemini 3.1 Flash-Lite

// Memory search upgraded with multimodal image/audio indexing via gemini-embedding-2-preview. iOS home screen redesign with live agent overview. First-class Ollama browser sign-in. macOS model picker in chat. Cron/notification migration required (BREAKING).

#Memory#iOS#Gemini#Ollama#Security

→ Full release notes

release-2026.3.7.md

2026.3.7MINOR⚠ BREAKING CHANGE2026-03-07

ContextEngine Architecture + GPT-5.4 / Gemini Flash 3.1 + ClawJacked Fix

// New pluggable ContextEngine with 7 lifecycle hooks for context management. GPT-5.4 and Gemini Flash 3.1 added as default model aliases. ClawJacked vulnerability patched. Dual auth mode (token + password) requires explicit gateway.auth.mode (BREAKING).

#ContextEngine#GPT-5.4#Gemini#Security

→ Full release notes

release-2026.3.2.md

2026.3.2PATCH2026-03-02

Security Hardening + PDF Tool + Streaming Improvements

// Critical sandbox security fixes (TOCTOU, symlink escapes, media staging). New first-class PDF analysis tool with Anthropic/Google provider support. Telegram streaming now defaults to 'partial' for all new setups.

#Security#PDF#Telegram#Streaming

→ Full release notes

release-2026.3.2-beta.1.md

2026.3.2-beta.1PATCH2026-03-01

Beta Preview: Sandbox Hardening + MiniMax M2.5

// Beta release previewing critical sandbox media TOCTOU security fixes and first-class MiniMax-M2.5-highspeed support.

#Beta#Security#MiniMax

→ Full release notes

release-2026.3.1.md

2026.3.1MINOR⚠ BREAKING CHANGE2026-02-28

OpenAI WebSocket-First + Android Nodes + Discord Thread Bindings

// OpenAI Responses API is now WebSocket-first by default. Docker/Kubernetes health check endpoints added. Android gains camera.list, device.permissions, and notification actions. Node exec approval payloads now require systemRunPlan (BREAKING).

#OpenAI#WebSocket#Android#Discord#Feishu

→ Full release notes

release-2026.2.26.md

2026.2.26MINOR2026-02-26

External Secrets Management + ACP Thread Agents + Routing CLI

// Full openclaw secrets workflow (audit, configure, apply, reload). ACP agents are now first-class thread session runtimes. New openclaw agents bindings/bind/unbind CLI. Dozens of security fixes for gateway auth, pairing, and channel ingress.

#Secrets#ACP#CLI#Security

→ Full release notes

release-2026.2.25.md

2026.2.25PATCH⚠ BREAKING CHANGE2026-02-25

Critical Security Patch + Android Startup Improvements

// High-severity security patch (CVE-level): hardened gateway auth, node exec approvals, symlink sandbox escapes, and channel reaction authorization. Heartbeat DM delivery default changed back to 'allow' (BREAKING from 2026.2.24).

#Security#Android#Patch

→ Full release notes

release-2026.2.25-beta.1.md

2026.2.25-beta.1PATCH2026-02-24

Beta Preview: Security Patches

// Beta preview for the security patches shipping in 2026.2.25.

#Beta#Security

→ Full release notes

release-2026.2.24.md

2026.2.24MINOR⚠ BREAKING CHANGE2026-02-23

Native Android App Onboarding + Heartbeat Routing + Talk Config

// Shipped native four-step Android onboarding flow with a new five-tab shell. Security hardening for sandbox Docker network namespace join (blocked by default). Heartbeat now blocks DM delivery by default (BREAKING).

#Android#Talk#Security#Heartbeat

→ Full release notes

release-2026.2.24-beta.1.md

2026.2.24-beta.1MINOR2026-02-22

Beta Preview: Android App + Heartbeat Rewrite

// Beta preview of new Android app onboarding and heartbeat routing changes.

#Beta#Android#Heartbeat

→ Full release notes

release-2026.2.23.md

2026.2.23MINOR⚠ BREAKING CHANGE2026-02-22

Kilo Gateway + Vercel AI Gateway + Cron Improvements

// First-class Kilocode provider support (default model: kilocode/anthropic/claude-opus-4.6). Browser SSRF policy now defaults to trusted-network mode (BREAKING). New sessions cleanup tooling with disk-budget controls.

#Providers#Kilo#Vercel#Cron#Security

→ Full release notes

release-2026.2.22.md

2026.2.22MINOR⚠ BREAKING CHANGE2026-02-21

Synology Chat + Auto-Updater + Unified Streaming Config

// Native Synology Chat channel. Optional built-in auto-updater (off by default). Removed Google Antigravity provider (BREAKING). Gateway device-auth v1 removed — v2 required (BREAKING). Unified channel streaming config.

#Synology#Auto-update#Streaming#Breaking

→ Full release notes

// Want release notifications?

Watch the GitHub repo to get notified on every release

$gh repo watch openclaw/openclaw