openclaw.changelog()

// Real Chrome browser session control for AI agents. Redesigned Android chat settings UI. Docker OPENCLAW_TZ timezone support. Compaction fixes, Telegram media transport policy improvements, and Discord gateway metadata reliability.

// Complete Control UI refresh with modular views and command palette. Configurable Fast Mode for OpenAI/Anthropic speed toggles. Starter Kubernetes manifests. 15+ critical CVEs patched. Implicit workspace plugin autoloads disabled (BREAKING).

// Memory search upgraded with multimodal image/audio indexing via gemini-embedding-2-preview. iOS home screen redesign with live agent overview. First-class Ollama browser sign-in. macOS model picker in chat. Cron/notification migration required (BREAKING).

// New pluggable ContextEngine with 7 lifecycle hooks for context management. GPT-5.4 and Gemini Flash 3.1 added as default model aliases. ClawJacked vulnerability patched. Dual auth mode (token + password) requires explicit gateway.auth.mode (BREAKING).

// Critical sandbox security fixes (TOCTOU, symlink escapes, media staging). New first-class PDF analysis tool with Anthropic/Google provider support. Telegram streaming now defaults to 'partial' for all new setups.

// Beta release previewing critical sandbox media TOCTOU security fixes and first-class MiniMax-M2.5-highspeed support.

// OpenAI Responses API is now WebSocket-first by default. Docker/Kubernetes health check endpoints added. Android gains camera.list, device.permissions, and notification actions. Node exec approval payloads now require systemRunPlan (BREAKING).

// Full openclaw secrets workflow (audit, configure, apply, reload). ACP agents are now first-class thread session runtimes. New openclaw agents bindings/bind/unbind CLI. Dozens of security fixes for gateway auth, pairing, and channel ingress.

// High-severity security patch (CVE-level): hardened gateway auth, node exec approvals, symlink sandbox escapes, and channel reaction authorization. Heartbeat DM delivery default changed back to 'allow' (BREAKING from 2026.2.24).

// Beta preview for the security patches shipping in 2026.2.25.

// Shipped native four-step Android onboarding flow with a new five-tab shell. Security hardening for sandbox Docker network namespace join (blocked by default). Heartbeat now blocks DM delivery by default (BREAKING).

// Beta preview of new Android app onboarding and heartbeat routing changes.

// First-class Kilocode provider support (default model: kilocode/anthropic/claude-opus-4.6). Browser SSRF policy now defaults to trusted-network mode (BREAKING). New sessions cleanup tooling with disk-budget controls.

// Native Synology Chat channel. Optional built-in auto-updater (off by default). Removed Google Antigravity provider (BREAKING). Gateway device-auth v1 removed — v2 required (BREAKING). Unified channel streaming config.