$git log --oneline
2026.3.2-beta.1PATCHβ BETAReleased: 2026-03-01
Beta Preview: Sandbox Hardening + MiniMax M2.5
/** Beta release previewing the critical security patches and MiniMax-M2.5-highspeed shipping in 2026.3.2. */
β Beta release β not recommended for production. Upgrade to 2026.3.2 stable when available.
beta_preview.md
β¨ What's in this Beta
Sandbox Media TOCTOU Fixes (Preview)
Preview of critical fixes for sandbox media TOCTOU symlink-retarget escapes. Enforces root-scoped boundary-safe reads at attachment/image load time.
MiniMax-M2.5-highspeed (Preview)
First-class MiniMax-M2.5-highspeed support added across built-in provider catalogs, onboarding flows, and MiniMax OAuth plugin defaults.
Workspace Safe Write Hardening
Hardened writeFileWithinRoot against symlink-retarget TOCTOU races. Defers truncation until post-open identity+boundary validation.
security_preview.md
π Security Preview
π‘Sandbox media TOCTOU symlink-retarget escape prevention
π‘Sandbox media staging destination symlink escape block via stageSandboxMedia
π‘Workspace writeFileWithinRoot hardened against TOCTOU races with atomic rename
install_beta.sh
π¦ Try the Beta
# Install beta version
$ npm install -g openclaw@2026.3.2-beta.1