OpenClaw
Latest release v2026.10.10-beta.5 on 2026-10-30 · Actively maintained · 15 releases in 90 days
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
| Latest release | v2026.10.10-beta.5 on 2026-10-30 |
|---|---|
| Maintenance | Actively maintained — pushed within the last 14 days, with 3 or more releases in 90 days |
| Stars | 393,624 (+98 since yesterday) |
| Releases in 90 days | 15 |
| Last commit | 2026-11-01 |
| Repository | openclaw/openclaw |
| Licence | MIT |
| Open issues | 7,839 |
OpenClaw release notes and changelog
v2026.10.10-beta.5 2026-10-30
What's new
- Node compatibility: installs and updates work again on Node >=24.16.0 =26.1.0; Node 24.22.1 or…
- Gateway streaming: replies that contain tool-call-like XML, look like tool calls, or end long…
- Updates and rollback: a failed npm rollback no longer strands the installed package, an…
- Cron: missed slots with a stale stored next run time are no longer dropped, and startup…
Fixed
- Security boundaries: require approval for test/[ -v operands in exec allowlist mode, refuse…
- Security: keep browser pairing credentials out of opener process arguments, mask Google OAuth…
- Dependency security: update fast-uri, bound vendored Zod traversal for A2UI and Discord input,…
- Terminal output: escape terminal control sequences in camera, channel capability and catalog,…
v2026.10.9 2026-10-29
What's new
- Patch vulnerable runtime dependencies
- Apply tools.fs.workspaceOnly to Gateway-built tools, so delegate changes still require…
- Keep live credentials out of MCP CLI inspection and mask Google OAuth client secrets in logs.…
- Make failed update rollbacks safe
Fixed
- Resolve local media in Codex steering messages from the session's own workspace instead of the…
- Report uncertain process cleanup from buffered commands, such as local CLI speech providers,…
- Keep reapproved node connections alive by publishing the approval with its committed pairing…
- Recover stopped Gateways when service activation cannot be verified; retain untouched-recovery…
Changed
- This maintenance release focuses on security dependency patches, recovery, data preservation,…
v2026.9.36 2026-10-29
What's new
- Failed updates stay recoverable
- Workspace restrictions reach Gateway-built tools
- Microsoft Teams allowlists stay restrictive
- Untrusted input is bounded
Fixed
- Credential and content boundaries
- Untrusted parsing: bound Matrix media metadata and IMAP mail parsing, the TOML key parser, URI…
- Reply delivery: keep comparison prose after astral characters in the outbound sanitizer. Thanks
- XAI: allow off for older models without configurable reasoning effort instead of rejecting it…
Changed
- Certificate trust and Docker images
Other coding agents we track
- Hermes · v0.22.5
- OpenCode · v2.2.5
- AutoGPT · preview-seed-fixture
- Claude Code · v2.1.316
- Codex · rust-v0.166.0
- Browser Use · 0.13.14
- Pi · v1.4.0
- Gemini CLI · v0.67.0-nightly.20261101.g6814e00d6
Maintenance status is derived from public repository activity — release cadence and commit recency. It is not a review, an endorsement, or a security assessment. Star counts measure attention, not quality.