Agent Breaking Changes_

← OpenClaw

OpenClaw openclaw 2026.10.6

breakingsecuritymodel

2026-10-22 · official notes

Summary

Full notes

## 2026.10.6

### Highlights

- **Patched Node runtime required:** OpenClaw now requires Node 24.22.1+ on the 24 line or 26.12.1+ on the 26 line, which reject TLS chains signed with the compromised certificate keys addressed in the October 2026 Node.js security releases. Docker images ship Node 24.22.1, installers select the patched runtimes, and `openclaw update` refuses with recovery guidance before installing on an older Node instead of breaking the running install. Source builds now pin pnpm 12.15.0. (#179992) Thanks @joshavant.
- **Safer updates and recovery:** package swaps now refuse unsafe service states, Windows and macOS package-manager updates recover from platform-specific failures, and frozen Gateway startup owners can be retired cleanly. (#171101, #170940, #171936, #171678) Thanks @RomneyDa, @homeworld520, @Yolo521-bot, @stop-time, @AntaresGG, and @TommyLei666.
- **Data-preserving migrations and backups:** Doctor and migration paths now refuse malformed or lossy workspace imports, preserve malformed Notes bytes, reject unsafe non-UTF-8 wiki rewrites, keep deeply nested SQLite backups, and retain staging evidence when restore inspection fails. (#172293, #172953, #172742, #174573, #168583, #170867, #172028) Thanks @wangmiao0668000666, @RomneyDa, @Leon-SK668, @ericcurtin, @Yolo521-bot, @obviyus, and @altaywtf.
- **Reliable delivery across restarts:** queued turns, watched child results, dead-lettered deliveries, and streamed replies now survive recovery without disappearing, duplicating, or producing false missing-answer notices. (#170384, #169489, #169932, #173798) Thanks @RomneyDa, @huyengiang101086-spec, and @Yolo521-bot.
- **Provider and model resilience:** GPT-5.6 tool turns, OpenRouter DeepSeek tool calls, LM Studio overflow recovery, parallel OpenAI reasoning settings, and model retry/fallback budgets now behave consistently. (#176709, #175058, #169189, #169322, #164808) Thanks @RomneyDa, @Linux2010, @ZhimingQ, @xpeng5278-web, and @anyech.
- **Windows and mobile stability:** fresh Windows state stores, Proxy-backed environments, and stored Anthropic credentials no longer block startup, while iOS Talk and chat connectivity recover from first-reply and timeout failures. (#176174, #176194, #174571, #168416, #169912) Thanks @RomneyDa, @tjarrau-dev, @skyzhao1223, @easyteacher, @scalesmart, @masatohoshino, @Takhoffman, and @Solvely-Colin.
- **Agent and tool-call recovery:** unfinished tools now time out visibly, context overflow compacts after steered tool results, malformed calls continue after earlier refusals, large patch hunks avoid argument-limit crashes, and stopped yielded tasks stay stopped. (#172983, #172019, #170615, #174477, #169453) Thanks @RomneyDa, @budzation, @mirasrael, @r3n3x, @freeqaz-openai, and @obviyus.
- **Channel delivery correctness:** WhatsApp retries and stickers, Telegram albums and dual-stack replies, Slack relay recovery, and Discord voice-call replies no longer lose or duplicate messages. (#142434, #164210, #163926, #171564, #173407, #172380) Thanks @ashawwal, @RomneyDa, @andrewwbuilds, @abacha, @Dat1GUI, @brainmonger, @obviyus, and @vincentkoc.
- **Worker and worktree recovery:** hosts reclaim worker capacity after reboot, partial-clone worktrees repair missing objects, and child-result and exec-wake evidence survives Gateway restarts. (#168863, #168864, #169489, #169645) Thanks @RomneyDa.

### Changes

- This patch release contains focused reliability fixes only; it does not introduce new user-facing features.

### Fixes

- **State and system-agent recovery:** restore access to agents held by affected upgrades, recover held system-agent databases after schema changes, and preserve live configuration when forensic snapshots fail. (#175007, #176783, #171217) Thanks @RomneyDa, @PennyVibe, and @Yolo521-bot.
- **Windows state and updates:** canonicalize schema ownership across path aliases, serialize Proxy-backed environments before inspection IPC, hide SQLite helper windows during update work, and recognize native Scheduled Task permission failures in every locale. (#176174, #176194, #174969, #178624) Thanks @RomneyDa, @tjarrau-dev, @skyzhao1223, @easyteacher, and @throwingbones.
- **macOS companion execution:** honor long command and approval deadlines across the companion socket, classify late or lost replies without replaying submitted commands, and preserve native permission details. (#172117) Thanks @holgergruenhagen, @RomneyDa, @ylcn91, and @Colton-Harris.
- **Doctor and managed plugins:** repair empty retired-plugin metadata, clear resolved migration warnings, and converge app-managed plugins onto the installed core version. (#173851, #177096, #174257) Thanks @RomneyDa, @fengfan201314-eng, @ScientificProgrammer, @yinx65588-boop, @jj5638521, and @kazuyuki-eguchi.
- **Update diagnostics:** preserve FRV blockers, explain package-journal identity and runtime-retention failures, and avoid cleanup stalls on shared recovery manifests. (#171186, #170385, #169280, #174249) Thanks @vincentkoc, @RomneyDa, @astapenkoav, @council10-kera, and @shoaibulhaque.
- **SQLite correctness:** preserve transaction outcomes when warning handlers throw, settle peer closes after shared-worker refusal, and prevent retired cache generations from taking worker ownership. (#157151, #173813, #172798) Thanks @vincentkoc and @RomneyDa.
- **Reply recovery:** preserve side-question and immediate fallback ordering, avoid repeated or missing answers after streamed delivery, and keep stopped yielded tasks from restarting. (#174869, #169305, #173798, #169453) Thanks @RomneyDa and @freeqaz-openai.
- **Codex and native sessions:** release stalled startup waits and completed subagents after cancellation or cleanup failures, preserve conversations across runtime restarts, keep workspace bindings across reply resets, and settle recovered child binding writes before session readiness. (#168347, #173547, #166368, #160549, #177564) Thanks @RomneyDa, @Kimiyu-186, @alkor2000, @jhgaylor, @vincentkoc, @jjjhenriksen, and @obviyus.
- **Gateway lifecycle:** retain restart custody, avoid stop-time lease deadlocks, recover worker capacity after reboot, and preserve suppressed-channel configuration across reloads. (#172852, #171308, #168863) Thanks @RomneyDa.
- **CLI and process diagnostics:** preserve JSON output on Gateway command exits, report resource-disposal and PTY EOF failures, and surface failed diagnostic writes without crashing. (#176795, #173566, #176362, #174622) Thanks @vincentkoc and @RomneyDa.
- **Scheduled follow-ups:** same-conversation follow-ups scheduled from an authorized operator turn keep that operator's current authority when they run, and one-shot continuations can call `next_check` to check back later. (#176422)
- **Media and TTS:** time out slow hosted speech synthesis and report playback cache, probe, and quota failures rather than silently dropping cleanup errors. (#175614, #175634, #174668) Thanks @RomneyDa.

### Complete contribution record

This audited record covers the complete v2026.10.5..bba7238a1be3a0d4e92c371988f94e81011a06b2 history: 293 in-range PRs + 0 retained seed-only PRs = 293 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

#### Pull requests

- **PR #176194** Related #176111. Thanks @skyzhao1223 and @RomneyDa and @easyteacher.
- **PR #176174** Related #176163. Thanks @RomneyDa and @tjarrau-dev.
- **PR #175007** Thanks @RomneyDa.
- **PR #176783** Related #176669. Thanks @RomneyDa and @PennyVibe.
- **PR #171101** Related #170774, #171036. Thanks @RomneyDa and @homeworld520 and @Yolo521-bot.
- **PR #171217** Related #171187. Thanks @RomneyDa and @Yolo521-bot.
- **PR #171678** Related #171513. Thanks @RomneyDa and @TommyLei666.
- **PR #173851** Related #173659. Thanks @RomneyDa and @fengfan201314-eng.
- **PR #174257** Related #174120. Thanks @RomneyDa and @kazuyuki-eguchi.
- **PR #174969** Related #174906. Thanks @RomneyDa and @throwingbones.
- **PR #176104** Related #176066. Thanks @yinx65588-boop and @RomneyDa and @BGreezy.
- **PR #176009** Thanks @Alix-007 and @RomneyDa.
- **PR #176219** Thanks @vincentkoc and @RomneyDa.
- **PR #167935** Related #167934. Thanks @PollyBot13 and @RomneyDa and @obviyus.
- **PR #171977** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #173142** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #175624** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #176510** Thanks @RomneyDa.
- **PR #175642** Related #175599. Thanks @sunlit-deng and @RomneyDa and @seriouslysean.
- **PR #176603** Related #169077. Thanks @RomneyDa and @hannnnn-l.
- **PR #176681** Thanks @RomneyDa.
- **PR #176787** Thanks @RomneyDa.
- **PR #176691** Thanks @RomneyDa.
- **PR #176795** Thanks @vincentkoc and @RomneyDa.
- **PR #176742** Thanks @sunlit-deng and @RomneyDa.
- **PR #176879** Thanks @RomneyDa.
- **PR #176876** Thanks @RomneyDa.
- **PR #176873** Thanks @shakkernerd and @gideonpraise and @RomneyDa.
- **PR #176997** Related #169256. Thanks @RomneyDa and @etzelm.
- **PR #175606** Thanks @vincentkoc and @RomneyDa.
- **PR #177042** Thanks @vincentkoc and @RomneyDa.
- **PR #176990** Thanks @shakkernerd and @gideonpraise and @RomneyDa.
- **PR #177038** Thanks @RomneyDa.
- **PR #177060** Thanks @RomneyDa.
- **PR #177096** Related #160561, #176966. Thanks @ScientificProgrammer and @yinx65588-boop and @RomneyDa and @jj5638521.
- **PR #177059** Related #170203. Thanks @RomneyDa and @BodegaClaw.
- **PR #177066** Thanks @RomneyDa.
- **PR #177184** Thanks @RomneyDa.
- **PR #177126** Thanks @shakkernerd and @gideonpraise and @RomneyDa.
- **PR #177243** Thanks @vincentkoc and @RomneyDa.
- **PR #177252** Thanks @RomneyDa.
- **PR #176656** Thanks @RomneyDa.
- **PR #176182** Thanks @ericcurtin and @RomneyDa.
- **PR #176206** Thanks @RomneyDa.
- **PR #172469** Thanks @easonclaw-lgtm and @RomneyDa.
- **PR #176039** Thanks @RomneyDa.
- **PR #176362** Thanks @RomneyDa.
- **PR #173310** Thanks @TurboTheTurtle and @RomneyDa.
- **PR #176458** Thanks @RomneyDa.
- **PR #176293** Related #176250. Thanks @goutamadwant and @RomneyDa and @yetval.
- **PR #175952** Thanks @RomneyDa.
- **PR #176023** Thanks @RomneyDa.
- **PR #175229** Thanks @RomneyDa.
- **PR #175058** Related #174909. Thanks @Linux2010 and @RomneyDa and @ZhimingQ.
- **PR #175289** Thanks @RomneyDa.
- **PR #175343** Thanks @RomneyDa.
- **PR #175416** Thanks @RomneyDa.
- **PR #173048** Thanks @ericcurtin and @RomneyDa.
- **PR #175381** Related #175303. Thanks @musatoktas and @RomneyDa and @Yolo521-bot.
- **PR #175452** Thanks @RomneyDa.
- **PR #175489** Thanks @RomneyDa.
- **PR #175532** Thanks @RomneyDa.
- **PR #172028** Related #171959. Thanks @ericcurtin and @RomneyDa and @Yolo521-bot.
- **PR #175634** Thanks @RomneyDa.
- **PR #175625** Thanks @vincentkoc and @RomneyDa.
- **PR #174590** Related #174504. Thanks @shoaibulhaque and @RomneyDa and @altaywtf and @Yolo521-bot.
- **PR #175614** Thanks @RomneyDa.
- **PR #175689** Thanks @RomneyDa.
- **PR #175703** Thanks @RomneyDa.
- **PR #175726** Thanks @RomneyDa.
- **PR #174424** Thanks @RomneyDa.
- **PR #174299** Thanks @RomneyDa.
- **PR #174477** Thanks @RomneyDa.
- **PR #174571** Related #174204. Thanks @RomneyDa and @scalesmart.
- **PR #174573** Thanks @RomneyDa.
- **PR #174622** Thanks @RomneyDa.
- **PR #174668** Thanks @RomneyDa.
- **PR #172293** Thanks @wangmiao0668000666 and @RomneyDa and @obviyus.
- **PR #172953** Thanks @Leon-SK668 and @RomneyDa and @obviyus.
- **PR #172742** Thanks @Leon-SK668 and @RomneyDa and @obviyus.
- **PR #174750** Related #173351. Thanks @RomneyDa and @Yolo521-bot.
- **PR #174767** Related #173348. Thanks @skyzhao1223 and @RomneyDa and @Yolo521-bot.
- **PR #174807** Related #174563. Thanks @RomneyDa and @sunlit-deng and @prizmizm.
- **PR #174869** Thanks @RomneyDa.
- **PR #174868** Thanks @RomneyDa.
- **PR #174030** Thanks @vincentkoc and @RomneyDa.
- **PR #174195** Thanks @RomneyDa.
- **PR #174249** Related #174072. Thanks @RomneyDa and @shoaibulhaque and @astapenkoav.
- **PR #168735** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #162828** Thanks @SunnyShu0925 and @fuller-stack-dev and @RomneyDa.
- **PR #165889** Thanks @SunnyShu0925 and @fuller-stack-dev and @RomneyDa.
- **PR #167619** Thanks @SunnyShu0925 and @fuller-stack-dev and @RomneyDa.
- **PR #155323** Related #155322. Thanks @masatohoshino and @fuller-stack-dev and @RomneyDa.
- **PR #173753** Thanks @vincentkoc and @RomneyDa.
- **PR #173686** Thanks @RomneyDa.
- **PR #173241** Thanks @wangmiao0668000666 and @RomneyDa and @obviyus.
- **PR #173798** Thanks @RomneyDa.
- **PR #173813** Thanks @RomneyDa.
- **PR #173835** Thanks @RomneyDa.
- **PR #172903** Thanks @RomneyDa.
- **PR #173921** Thanks @RomneyDa.
- **PR #173231** Thanks @pgondhi987 and @RomneyDa.
- **PR #157151** Thanks @vincentkoc and @RomneyDa.
- **PR #163959** Thanks @vincentkoc and @RomneyDa.
- **PR #163665** Thanks @ly85206559 and @RomneyDa and @vincentkoc.
- **PR #163818** Thanks @RomneyDa and @vincentkoc.
- **PR #163825** Thanks @RomneyDa and @vincentkoc.
- **PR #163920** Thanks @RomneyDa and @vincentkoc.
- **PR #163931** Thanks @RomneyDa and @vincentkoc.
- **PR #150992** Related #150083. Thanks @wangmiao0668000666 and @RomneyDa and @vincentkoc and @dh-js.
- **PR #163918** Thanks @RomneyDa and @vincentkoc.
- **PR #163839** Thanks @RomneyDa and @vincentkoc.
- **PR #163915** Thanks @RomneyDa and @vincentkoc.
- **PR #163933** Thanks @RomneyDa and @vincentkoc.
- **PR #163926** Thanks @RomneyDa and @vincentkoc.
- **PR #163932** Thanks @RomneyDa and @vincentkoc.
- **PR #163952** Thanks @RomneyDa and @vincentkoc.
- **PR #163944** Thanks @RomneyDa and @vincentkoc.
- **PR #163809** Thanks @RomneyDa and @vincentkoc.
- **PR #163951** Thanks @RomneyDa and @vincentkoc.
- **PR #173954** Thanks @RomneyDa.
- **PR #176709** Thanks @RomneyDa.
- **PR #173209** Thanks @RomneyDa.
- **PR #173347** Related #173077. Thanks @RomneyDa and @Winoren and @Yolo521-bot.
- **PR #142434** Related #142398. Thanks @ashawwal and @RomneyDa and @obviyus.
- **PR #164210** Related #163559. Thanks @andrewwbuilds and @RomneyDa and @obviyus and @abacha.
- **PR #173407** Thanks @RomneyDa.
- **PR #173225** Thanks @RomneyDa.
- **PR #172639** Thanks @stevenlee-oai and @RomneyDa.
- **PR #173547** Thanks @Kimiyu-186 and @RomneyDa.
- **PR #173498** Thanks @obviyus and @RomneyDa.
- **PR #173560** Related #173546. Thanks @shakkernerd and @RomneyDa.
- **PR #172223** Related #172222. Thanks @serg0x and @RomneyDa.
- **PR #173566** Thanks @RomneyDa.
- **PR #172980** Related #172871. Thanks @RomneyDa and @Oldrich333.
- **PR #173000** Thanks @RomneyDa.
- **PR #172983** Related #172899. Thanks @RomneyDa and @budzation.
- **PR #172780** Thanks @SunnyShu0925 and @RomneyDa.
- **PR #170608** Thanks @duyufansh2008 and @RomneyDa.
- **PR #170380** Related #170332. Thanks @DonnieFi and @RomneyDa.
- **PR #172256** Thanks @SunnyShu0925 and @RomneyDa.
- **PR #157948** Thanks @PollyBot13 and @fuller-stack-dev and @RomneyDa.
- **PR #172691** Thanks @joshavant and @RomneyDa.
- **PR #172798** Thanks @RomneyDa.
- **PR #172182** Related #172180. Thanks @fhgffy and @skyzhao1223 and @RomneyDa.
- **PR #172852** Thanks @RomneyDa.
- **PR #164808** Thanks @anyech and @RomneyDa.
- **PR #172023** Related #172000. Thanks @RomneyDa and @jeanmonet.
- **PR #172133** Related #172109. Thanks @RomneyDa and @wangxiajun68.
- **PR #172270** Thanks @RomneyDa.
- **PR #172331** Related #172258. Thanks @RomneyDa and @rclarke0.
- **PR #172380** Related #172233. Thanks @RomneyDa and @brainmonger.
- **PR #172019** Thanks @mirasrael and @RomneyDa and @obviyus.
- **PR #171414** Related #171380. Thanks @ericcurtin and @RomneyDa and @obviyus and @asikorskiy.
- **PR #160549** Thanks @vincentkoc and @RomneyDa.
- **PR #171208** Thanks @RomneyDa.
- **PR #171482** Thanks @vincentkoc and @RomneyDa.
- **PR #171571** Thanks @zhangguiping-xydt and @RomneyDa and @obviyus.
- **PR #171570** Related #171366. Thanks @RomneyDa and @davidcittadini.
- **PR #171587** Related #171472. Thanks @RomneyDa.
- **PR #171564** Related #171438. Thanks @RomneyDa and @Dat1GUI.
- **PR #154923** Related #149867. Thanks @sxh313 and @RomneyDa and @playhard94.
- **PR #128886** Related #128859. Thanks @sashankh and @RomneyDa and @shad0wca7.
- **PR #171936** Related #171797. Thanks @RomneyDa and @AntaresGG.
- **PR #170967** Thanks @RomneyDa.
- **PR #170940** Related #170700. Thanks @RomneyDa and @stop-time.
- **PR #161098** Related #160641. Thanks @xydigitLybnnnn and @RomneyDa and @obviyus and @aniruddhaadak80.
- **PR #166368** Related #124852. Thanks @alkor2000 and @RomneyDa and @obviyus and @jhgaylor.
- **PR #169932** Related #169807. Thanks @huyengiang101086-spec and @RomneyDa and @Yolo521-bot.
- **PR #170372** Related #169972. Thanks @xiajiahang and @RomneyDa and @letsc4.
- **PR #169893** Related #169674. Thanks @xydigitLybnnnn and @RomneyDa and @farisoftfry.
- **PR #162771** Related #162525, #162622. Thanks @xydigitLybnnnn and @RomneyDa and @shadow-enthusiast and @islandpreneur007.
- **PR #171029** Related #171013. Thanks @ericcaiwx-star and @RomneyDa and @brainmonger.
- **PR #141312** Thanks @hugenshen and @RomneyDa and @obviyus.
- **PR #171164** Thanks @RomneyDa.
- **PR #171186** Thanks @vincentkoc and @RomneyDa.
- **PR #170500** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #170495** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #171094** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #171308** Thanks @RomneyDa.
- **PR #171180** Related #171106. Thanks @ruel225 and @RomneyDa and @obviyus and @SanderHelgesen.
- **PR #171365** Related #171034. Thanks @ynaamane and @RomneyDa and @obviyus and @Yolo521-bot.
- **PR #155019** Related #154834. Thanks @linhongyu510 and @RomneyDa and @obviyus and @jerryliang122.
- **PR #169280** Thanks @RomneyDa.
- **PR #169392** Thanks @holgergruenhagen and @RomneyDa and @obviyus.
- **PR #170867** Thanks @RomneyDa.
- **PR #170615** Related #170522. Thanks @RomneyDa and @r3n3x.
- **PR #170063** Related #169950. Thanks @amittell and @RomneyDa.
- **PR #170913** Thanks @RomneyDa.
- **PR #166245** Thanks @holgergruenhagen and @RomneyDa.
- **PR #170048** Thanks @RomneyDa.
- **PR #170125** Thanks @ly85206559 and @RomneyDa and @obviyus.
- **PR #165019** Thanks @eleqtrizit and @RomneyDa.
- **PR #168771** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #170123** Thanks @ly85206559 and @RomneyDa and @obviyus.
- **PR #168731** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #170385** Related #170031. Thanks @RomneyDa and @council10-kera.
- **PR #170384** Thanks @RomneyDa.
- **PR #155801** Thanks @SunnyShu0925 and @RomneyDa and @obviyus.
- **PR #170553** Related #170466. Thanks @obviyus and @RomneyDa and @migelizaga-rgb.
- **PR #168666** Thanks @holgergruenhagen and @RomneyDa and @obviyus.
- **PR #169489** Thanks @RomneyDa.
- **PR #169645** Thanks @RomneyDa.
- **PR #156835** Thanks @vincentkoc and @RomneyDa.
- **PR #169936** Thanks @RomneyDa.
- **PR #169912** Related #169911. Thanks @Solvely-Colin and @RomneyDa.
- **PR #168864** Thanks @RomneyDa.
- **PR #168863** Thanks @RomneyDa.
- **PR #168347** Thanks @RomneyDa.
- **PR #168905** Thanks @RomneyDa.
- **PR #168416** Related #168415. Thanks @masatohoshino and @Takhoffman and @RomneyDa.
- **PR #169180** Related #169121. Thanks @xilopaint and @RomneyDa and @jipeng6036-del.
- **PR #169278** Related #168026. Thanks @RomneyDa and @obviyus.
- **PR #169286** Thanks @RomneyDa.
- **PR #169305** Thanks @RomneyDa.
- **PR #169189** Related #169187. Thanks @xpeng5278-web and @RomneyDa.
- **PR #169322** Thanks @RomneyDa.
- **PR #169453** Thanks @freeqaz-openai and @RomneyDa.
- **PR #172117** Related #139706. Thanks @holgergruenhagen and @RomneyDa and @ylcn91 and @Colton-Harris.
- **PR #177564** Thanks @jjjhenriksen and @RomneyDa.
- **PR #168583** Related #168822. Thanks @wangmiao0668000666 and @RomneyDa and @altaywtf.
- **PR #175458** Thanks @RomneyDa.
- **PR #175
Weekly digest: every breaking change, retirement and price change across 23 coding agents, one email.

Form not loading? Subscribe here.