OpenClaw v2026.10.9 - 更新日志

## 2026.10.9 ### 亮点 - 修补存在漏洞的运行时依赖：fast-uri 4.2.3 会在 MCP schema 校验中拒绝格式错误的 URI scheme 和主机名；A2UI 和 Discord 嵌入式应用 SDK 会提前拒绝过大的 Zod 集合；IMAP 发件人解析改用 nodemailer 10.1.4，防止伪造发件人通过发件人令牌校验；Microsoft Teams 改用已修补的 MSAL Node 7.1.1。（#187294）感谢 @RomneyDa。 - 将 `tools.fs.workspaceOnly` 应用于由 Gateway 构建的工具，因此委派更改仍需审批，媒体工具也只能在工作区内操作。（#185094）感谢 @eleqtrizit、@RomneyDa 和 @shakkernerd。 - 防止 MCP CLI 检查功能泄露实时凭据，并在日志中遮蔽 Google OAuth 客户端密钥。（#180321、#180308、#183193）感谢 @brandon-julio-t、@wr-web、@LeizhenZhang 和 @RomneyDa。 - 让失败的更新回滚更安全：Git 源回滚会保留运维人员的修改，而不是重置检出内容；npm 回滚会在 Windows 临时拒绝操作时重试，并准确报告恢复可启动安装所需的文件移动操作，避免包根目录陷入无法使用的状态。（#185201、#184887、#185160、#184889）感谢 @wr-web、@syxscott、@LiuwqGit、@shakkernerd 和 @RomneyDa。 - 在 SQLite 分词器变更后恢复完好的代理数据库和过期的全文索引，包括更新快照。（#176234、#176220、#176833、#181206）感谢 @ndakota79 和 @RomneyDa。 - 修复重新挂载后已完成发布的更新，同时保留原始启动器和封存的恢复辅助程序。（#186557、#186527）感谢 @ericcaiwx-star、@sennyhoney 和 @RomneyDa。 - 迁移大型对话记录存档时避免超出 Node.js 字符串长度限制。（#170853、#170847）感谢 @iamonlv426 和 @RomneyDa。 - 磁盘空间恢复后，无需重启即可让代理从磁盘空间耗尽状态中恢复。（#176902）感谢 @RomneyDa。 ### 变更此维护版本重点修补安全依赖、改进恢复和数据保留，并修复可靠性问题。 ### 修复 - 在 Codex 引导消息中解析本地媒体时，使用会话自身的工作区，而不是代理的默认工作区。（#181528）感谢 @RomneyDa。 - 对缓冲命令（例如本地 CLI 语音提供程序）报告不确定的进程清理状态，而不是将其显示为普通命令失败。（#184270、#184237）感谢 @shakkernerd 和 @RomneyDa。 - 通过在请求恢复前，使用已提交的配对信息发布审批结果，确保重新审批后的节点连接保持存活。感谢 @RomneyDa。 - 在无法验证服务已激活时恢复已停止的 Gateway；同时在 Windows 排查流程中保留不改动现状的恢复行为。（#172784、#181577、#181698）感谢 @SMF12138 和 @RomneyDa。 - 当 macOS 上未安装 Gateway 服务时，避免在被动停止期间卸载该服务。（#181257）感谢 @shakkernerd、@LiuwqGit、@eleqtrizit、@syxscott 和 @RomneyDa。 - 从文件系统根目录启动时恢复 CLI Node 运行时，包括 launchd 作业。（#178112、#177739）感谢 @downingkeys 和 @RomneyDa。 - 在指定的工作目录而非默认工作区中启动新的 ACP 会话。（#176852、#123557）感谢 @yinx65588-boop、@crappier 和 @RomneyDa。 - 防止重叠的模型刷新导致请求失败。（#179144）感谢 @RomneyDa。 - 在 `openclaw gateway probe --ssh` 中遵循明确指定的 SSH 端口 22，而不是使用别名配置的端口。（#171092）感谢 @zhangguiping-xydt、@obviyus 和 @RomneyDa。 - 当内联 YAML 元数据值末尾带有注释时，仍保留技能图标、主页等元数据。（#171224）感谢 @zhangguiping-xydt、@Takhoffman 和 @RomneyDa。 - 在 `openclaw infer video generate` 的文本和 JSON 输出中显示被提供程序忽略的选项。（#171172）感谢 @ly85206559、@obviyus 和 @RomneyDa。 ### 完整贡献记录本次审计记录涵盖 v2026.10.8..c213740c8338a05ac1a6db036e0d11060e70bf5d 的完整历史：范围内 PR 48 个 + 仅保留种子记录的 PR 0 个 = 唯一 PR 共 48 个。生成清单也将直接提交记录作为编辑输入；上方分组说明优先呈现对用户的影响。已发布基线排除项：v2026.10.8（3 个 PR：#180390、#180668、#181596）。 #### 拉取请求 - **PR #185538** 感谢 @RomneyDa。 - **PR #170853** 相关 #170847。感谢 @iamonlv426 和 @RomneyDa。 - **PR #185201** 相关 #184887。感谢 @wr-web、@RomneyDa 和 @syxscott。 - **PR #176902** 感谢 @RomneyDa。 - **PR #176852** 相关 #123557。感谢 @yinx65588-boop、@RomneyDa 和 @crappier。 - **PR #178112** 相关 #177739。感谢 @RomneyDa 和 @downingkeys。 - **PR #179144** 感谢 @RomneyDa。 - **PR #180321** 相关 #180308。感谢 @brandon-julio-t、@wr-web 和 @RomneyDa。 - **PR #183193** 感谢 @LeizhenZhang 和 @RomneyDa。 - **PR #176833** 相关 #176220。感谢 @RomneyDa 和 @ndakota79。 - **PR #181698** 相关 #181577。感谢 @RomneyDa 和 @SMF12138。 - **PR #172784** 相关 #181577。感谢 @RomneyDa 和 @SMF12138。 - **PR #185541** 相关 #181577。感谢 @RomneyDa 和 @SMF12138。 - **PR #176234** 相关 #176220。感谢 @RomneyDa 和 @ndakota79。 - **PR #181206** 相关 #176220。感谢 @RomneyDa 和 @ndakota79。 - **PR #186557** 相关 #186527。感谢 @ericcaiwx-star、@RomneyDa 和 @sennyhoney。 - **PR #181257** 相关 #184889、#184237。感谢 @shakkernerd、@RomneyDa、@LiuwqGit、@eleqtrizit 和 @syxscott。 - **PR #171224** 感谢 @zhangguiping-xydt、@Takhoffman 和 @RomneyDa。 - **PR #171172** 感谢 @ly85206559、@RomneyDa 和 @obviyus。 - **PR #171092** 感谢 @zhangguiping-xydt、@RomneyDa 和 @obviyus。 - **PR #181528** 感谢 @RomneyDa。 - **PR #185692** 感谢 @RomneyDa。 - **PR #179085** 感谢 @RomneyDa。 - **PR #179097** 感谢 @RomneyDa。 - **PR #179104** 感谢 @RomneyDa。 - **PR #179125** 感谢 @RomneyDa。 - **PR #179077** 感谢 @RomneyDa。 - **PR #179112** 感谢 @RomneyDa。 - **PR #179109** 感谢 @RomneyDa。 - **PR #179083** 感谢 @RomneyDa。 - **PR #179093** 感谢 @RomneyDa。 - **PR #179079** 感谢 @RomneyDa。 - **PR #180250** 感谢 @RomneyDa。 - **PR #180238** 感谢 @RomneyDa。 - **PR #180257** 感谢 @RomneyDa。 - **PR #180245** 感谢 @RomneyDa。 - **PR #180249** 感谢 @RomneyDa。 - **PR #185160** 相关 #184889。感谢 @LiuwqGit、@RomneyDa、@shakkernerd 和 @syxscott。 - **PR #187259** 感谢 @RomneyDa 和 @shakkernerd。 - **PR #182010** 感谢 @RomneyDa 和 @shakkernerd。 - **PR #184270** 相关 #184237。感谢 @shakkernerd 和 @RomneyDa。 - **PR #185094** 感谢 @eleqtrizit、@RomneyDa 和 @shakkernerd。 - **PR #187412** 感谢 @RomneyDa。 - **PR #187430** 感谢 @RomneyDa。 - **PR #187459** 感谢 @RomneyDa。 - **PR #187487** 感谢 @RomneyDa。 - **PR #187294** 感谢 @RomneyDa。 - **PR #187496** 感谢 @RomneyDa。 ### 发布验证 - npm 包：https://www.npmjs.com/package/openclaw/v/2026.10.9 - registry tarball：https://registry.npmjs.org/openclaw/-/openclaw-2026.10.9.tgz - 完整性校验：`sha512-KbIl0/7an0/nKBo92FnJg7LFcEpFVQyOgSRfHNE9yxELg1Ebql7BmBsdLL+1dDOLZnQtuwjt6Hy45CCrmYdJNA==` - 发布 SHA：`8b18b5578f66eab1501cba4cef2310d88bfb9a41` - 完整发布 CI 报告：https://github.com/openclaw/releases/blob/main/evidence/2026.10.9/release-evidence.md - 发布任务：https://github.com/openclaw/openclaw/actions/runs/40896462808 - npm 预检：https://github.com/openclaw/openclaw/actions/runs/40863629738 - 完整发布验证：https://github.com/openclaw/openclaw/actions/runs/40862370666 - 插件 npm 发布：https://github.com/openclaw/openclaw/actions/runs/40898170961 - 插件 ClawHub 提交：https://github.com/openclaw/openclaw/actions/runs/40898180399；待终端发布父流程完成后，再进行公开最终确认和精确制品验证 - 插件 ClawHub 引导：不需要 - OpenClaw npm 发布：https://github.com/openclaw/openclaw/actions/runs/40899799314 - npm Telegram beta E2E：未提供 - Android APK：已跳过；`apps/android/version.json` 为 2026.8.2，与发布序列 2026.10.9 不符；下一个标签发布前运行 `pnpm android:version:pin -- --from-gateway`。

## 2026.10.9 ### Highlights - Patch vulnerable runtime dependencies: fast-uri 4.2.3 rejects malformed URI schemes and hosts in MCP schema validation, oversized Zod collections are rejected early in A2UI and the Discord embedded app SDK, IMAP sender parsing uses nodemailer 10.1.4 so spoofed senders cannot pass the sender token gate, and Microsoft Teams uses patched MSAL Node 7.1.1. (#187294) Thanks @RomneyDa. - Apply `tools.fs.workspaceOnly` to Gateway-built tools, so delegate changes still require approval and media tools stay inside the workspace. (#185094) Thanks @eleqtrizit, @RomneyDa, and @shakkernerd. - Keep live credentials out of MCP CLI inspection and mask Google OAuth client secrets in logs. (#180321, #180308, #183193) Thanks @brandon-julio-t, @wr-web, @LeizhenZhang, and @RomneyDa. - Make failed update rollbacks safe: Git-source rollbacks preserve operator edits instead of resetting the checkout, and npm rollbacks retry transient Windows denials and report the exact move that restores a bootable install instead of stranding the package root. (#185201, #184887, #185160, #184889) Thanks @wr-web, @syxscott, @LiuwqGit, @shakkernerd, and @RomneyDa. - Recover intact agent databases and stale full-text indexes after SQLite tokenizer changes, including update snapshots. (#176234, #176220, #176833, #181206) Thanks @ndakota79 and @RomneyDa. - Repair publication-complete updates after a remount while retaining the original launcher and sealed recovery helper. (#186557, #186527) Thanks @ericcaiwx-star, @sennyhoney, and @RomneyDa. - Migrate large transcript archives without exceeding Node.js string limits. (#170853, #170847) Thanks @iamonlv426 and @RomneyDa. - Allow agents to recover after a full disk once space becomes available, without requiring a restart. (#176902) Thanks @RomneyDa. ### Changes This maintenance release focuses on security dependency patches, recovery, data preservation, and reliability fixes. ### Fixes - Resolve local media in Codex steering messages from the session's own workspace instead of the agent's default workspace. (#181528) Thanks @RomneyDa. - Report uncertain process cleanup from buffered commands, such as local CLI speech providers, instead of presenting it as an ordinary command failure. (#184270, #184237) Thanks @shakkernerd and @RomneyDa. - Keep reapproved node connections alive by publishing the approval with its committed pairing facts before the request resumes. Thanks @RomneyDa. - Recover stopped Gateways when service activation cannot be verified; retain untouched-recovery behavior in Windows triage. (#172784, #181577, #181698) Thanks @SMF12138 and @RomneyDa. - Avoid uninstalling a Gateway service during a passive macOS stop when no service is installed. (#181257) Thanks @shakkernerd, @LiuwqGit, @eleqtrizit, @syxscott, and @RomneyDa. - Recover CLI Node runtimes when launched from the filesystem root, including launchd jobs. (#178112, #177739) Thanks @downingkeys and @RomneyDa. - Start new ACP sessions in the requested working directory instead of the default workspace. (#176852, #123557) Thanks @yinx65588-boop, @crappier, and @RomneyDa. - Prevent overlapping model refreshes from failing requests. (#179144) Thanks @RomneyDa. - Honor an explicit SSH port 22 in `openclaw gateway probe --ssh` instead of the alias's configured port. (#171092) Thanks @zhangguiping-xydt, @obviyus, and @RomneyDa. - Keep skill metadata such as icons and homepages when an inline YAML metadata value has a trailing comment. (#171224) Thanks @zhangguiping-xydt, @Takhoffman, and @RomneyDa. - Show provider-ignored options in `openclaw infer video generate` text and JSON output. (#171172) Thanks @ly85206559, @obviyus, and @RomneyDa. ### Complete contribution record This audited record covers the complete v2026.10.8..c213740c8338a05ac1a6db036e0d11060e70bf5d history: 48 in-range PRs + 0 retained seed-only PRs = 48 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact. Shipped baseline exclusions: v2026.10.8 (3 PRs: #180390, #180668, #181596). #### Pull requests - **PR #185538** Thanks @RomneyDa. - **PR #170853** Related #170847. Thanks @iamonlv426 and @RomneyDa. - **PR #185201** Related #184887. Thanks @wr-web and @RomneyDa and @syxscott. - **PR #176902** Thanks @RomneyDa. - **PR #176852** Related #123557. Thanks @yinx65588-boop and @RomneyDa and @crappier. - **PR #178112** Related #177739. Thanks @RomneyDa and @downingkeys. - **PR #179144** Thanks @RomneyDa. - **PR #180321** Related #180308. Thanks @brandon-julio-t and @wr-web and @RomneyDa. - **PR #183193** Thanks @LeizhenZhang and @RomneyDa. - **PR #176833** Related #176220. Thanks @RomneyDa and @ndakota79. - **PR #181698** Related #181577. Thanks @RomneyDa and @SMF12138. - **PR #172784** Related #181577. Thanks @RomneyDa and @SMF12138. - **PR #185541** Related #181577. Thanks @RomneyDa and @SMF12138. - **PR #176234** Related #176220. Thanks @RomneyDa and @ndakota79. - **PR #181206** Related #176220. Thanks @RomneyDa and @ndakota79. - **PR #186557** Related #186527. Thanks @ericcaiwx-star and @RomneyDa and @sennyhoney. - **PR #181257** Related #184889, #184237. Thanks @shakkernerd and @RomneyDa and @LiuwqGit and @eleqtrizit and @syxscott. - **PR #171224** Thanks @zhangguiping-xydt and @Takhoffman and @RomneyDa. - **PR #171172** Thanks @ly85206559 and @RomneyDa and @obviyus. - **PR #171092** Thanks @zhangguiping-xydt and @RomneyDa and @obviyus. - **PR #181528** Thanks @RomneyDa. - **PR #185692** Thanks @RomneyDa. - **PR #179085** Thanks @RomneyDa. - **PR #179097** Thanks @RomneyDa. - **PR #179104** Thanks @RomneyDa. - **PR #179125** Thanks @RomneyDa. - **PR #179077** Thanks @RomneyDa. - **PR #179112** Thanks @RomneyDa. - **PR #179109** Thanks @RomneyDa. - **PR #179083** Thanks @RomneyDa. - **PR #179093** Thanks @RomneyDa. - **PR #179079** Thanks @RomneyDa. - **PR #180250** Thanks @RomneyDa. - **PR #180238** Thanks @RomneyDa. - **PR #180257** Thanks @RomneyDa. - **PR #180245** Thanks @RomneyDa. - **PR #180249** Thanks @RomneyDa. - **PR #185160** Related #184889. Thanks @LiuwqGit and @RomneyDa and @shakkernerd and @syxscott. - **PR #187259** Thanks @RomneyDa and @shakkernerd. - **PR #182010** Thanks @RomneyDa and @shakkernerd. - **PR #184270** Related #184237. Thanks @shakkernerd and @RomneyDa. - **PR #185094** Thanks @eleqtrizit and @RomneyDa and @shakkernerd. - **PR #187412** Thanks @RomneyDa. - **PR #187430** Thanks @RomneyDa. - **PR #187459** Thanks @RomneyDa. - **PR #187487** Thanks @RomneyDa. - **PR #187294** Thanks @RomneyDa. - **PR #187496** Thanks @RomneyDa. ### Release verification - npm package: https://www.npmjs.com/package/openclaw/v/2026.10.9 - registry tarball: https://registry.npmjs.org/openclaw/-/openclaw-2026.10.9.tgz - integrity: `sha512-KbIl0/7an0/nKBo92FnJg7LFcEpFVQyOgSRfHNE9yxELg1Ebql7BmBsdLL+1dDOLZnQtuwjt6Hy45CCrmYdJNA==` - release SHA: `8b18b5578f66eab1501cba4cef2310d88bfb9a41` - full release CI report: https://github.com/openclaw/releases/blob/main/evidence/2026.10.9/release-evidence.md - release publish: https://github.com/openclaw/openclaw/actions/runs/40896462808 - npm preflight: https://github.com/openclaw/openclaw/actions/runs/40863629738 - full release validation: https://github.com/openclaw/openclaw/actions/runs/40862370666 - plugin npm publish: https://github.com/openclaw/openclaw/actions/runs/40898170961 - plugin ClawHub submission: https://github.com/openclaw/openclaw/actions/runs/40898180399; public finalization and exact artifact verification follow terminal release-parent completion - plugin ClawHub bootstrap: not needed - OpenClaw npm publish: https://github.com/openclaw/openclaw/actions/runs/40899799314 - npm Telegram beta E2E: not supplied - Android APK: skipped — apps/android/version.json is 2026.8.2, release train is 2026.10.9; run pnpm android:version:pin -- --from-gateway before the next tag.