🔒 GitHub Release: openclaw/openclaw v2026.9.4 (11.09.2026)

$ git clone https://github.com/openclaw/openclaw.git

2026.9.4

Highlights

Recover from compatible failed updates: retain the previous package and restore it with the previous configuration and service when schema and configuration checks prove rollback is safe; database migrations still require a verified pre-update backup. (.

Plugins in one place: discover bundled and ClawHub plugins, install them from the Control UI, and manage their setup, settings, and access in a unified Plugins workspace. (, , , ) Thanks , , )

Answer questions in the terminal: use keyboard-driven choices, free-text answers, and multi-question prompts in both Gateway-connected and local TUI sessions. (. () Thanks . (, , , .

Voice that finishes delegated work: return subagent results to Talk and deliver the final answer even after repeated rounds of delegation. () Thanks . (.

Changes

Rollback and recovery: eligible schema-neutral update failures restore the retained package, command shim, service, and pre-activation configuration, then verify the previous Gateway again. Changed database schemas, incompatible new databases, or intervening operator configuration edits block automatic rollback; a recovered update remains a failed update with a recorded rollback outcome. Use a ) Thanks , , , .

Cloud ready workers: eligible local Git projects and public GitHub repository sessions can reuse prepared workers without repeating setup; private repository-only sessions and paired devices remain outside this preparation flow. The default reserve target is one per project/profile, capped at four Gateway-wide. Ready workers incur provider running-machine charges until deleted. Set cloudWorkers.profiles.<id>.readyWorkers or cloudWorkers.preparedPool.maxTotal to zero to disable the corresponding reserves. See , )

Terminal question controls: navigate choices with arrows or numbers, type an Other answer, toggle multi-select choices, and reopen a pending prompt with /question; local-mode questions last only for the running TUI process. (, . (, ) Thanks .

Skill learning: open learning from past work in a normal session that you can inspect and continue. (.

Command review: let the automatic command reviewer allow, deny, or escalate a command using bounded conversation context while retaining the execution policy's authority. ()

Node runtime recovery: offer a Node.js update when the CLI runtime is incompatible and keep diagnostics and update commands available to help repair the installation. () Thanks .

Read-only deployments: honor host-owned OPENCLAW_CONFIG_READONLY=1 across configuration writes, setup, Doctor repairs, plugin changes, and updates; read-only configuration commands continue to work, and this mode does not make runtime state read-only. Related ) Thanks . Related ) Thanks . (, , , , . Related ) Thanks .

Slow session diagnostics: identify the work holding a session lifecycle queue and see which artifact-cleanup preparation stage is taking time. Related . ()

Fixes

Access and content boundaries: preserve existing WhatsApp group allowlists during security repairs, continue blocking cloud-metadata addresses when private IPv6 exceptions are enabled, bound Slack HTTP request bodies, and restrict Tlon citation retrieval to the cited post. Reject stale signed Feishu webhook callbacks, prevent attachment reads from sibling agent sandboxes, and stop pipelined MCP calls after a rejected upload. Related , , , ) Thanks , .

Workspace and backup safety: preserve concurrent workspace edits, include required external configuration files in full backups, keep private update captures out of ordinary exports even after they move, and tolerate a disappearing live SQLite sidecar after its database is snapshotted. Related . (, , , , .

Migration recovery: recover markerless multi-agent configurations, leave ambiguous Skill Workshop migrations available for review, explain hard-linked session migration refusals, and preserve normalized media when republishing migrated archives. Retain legacy Codex assistant messages during session SQLite import and repair the dangling Workshop review index. Related , , . (, , ) Thanks , , , .

Doctor and authentication: preserve source state during full lint, keep saved authentication profiles aligned during migration, scope legacy auth-profile refusals to affected providers, recover legacy node tokens with invalid scopes, and prevent stale shared OAuth refresh generations from overwriting newer credentials. Restore Zalo User policy promotion and stop Moonshot China setup from repeatedly reinstalling its provider. Related , . (, , , , , , .

Reply delivery and history: recover final replies from terminated streams and earlier tool errors, retain partial failed-turn text and timeout outcomes, preserve paragraph and code-block boundaries, and report truncated Responses replies as incomplete. Preserve long transcript history across sessions_yield, avoid duplicate final replies during history hydration and duplicate user turns after Claude CLI resume, and retain final ChatGPT Responses frames at stream end. Related , , , , , , ) Thanks , , , , , , .

Chat continuity: keep submitted images visible during history handoff, prevent cold-session switching flashes, and reconcile concurrent session updates consistently. (, .

Claude CLI session reuse: keep warm sessions alive when skills-watcher readiness changes but prepared skill content is unchanged, while invalidating reuse after real skill-content changes. Related ) Thanks , , , , , , and , , , , , and , , , , , , , and . (, , .

Mattermost and Signal: keep sibling Mattermost accounts connected during secret-reference reloads, preserve replacement previews while retracting earlier messages, and retain Signal reply quotes when streamed delivery fails. (, and , , , , , , , .

Android chat and folding screens: wait for picked attachments before sending their captions, restore completed tool activity, distinguish connection state from chat readiness, and keep thinking controls, background tasks, and the branch picker inside their fold panes. Related , , , , .

Mobile connection feedback: show failures and recovery for unreachable Gateways and report battery fractions as the intended percentage. Related , , .

Provider and model selection: preserve authored catalog rows, exact model identities, metadata, and credentials when aliases coexist or catalogs refresh. Keep model overrides, context limits, thinking choices, vision, compaction, and tool inventories tied to the selected model and provider; hide unsupported thinking or Fast choices and preserve session lists after fallback. (, , , , , , , , , , , , ) Thanks , , , , ) Thanks , , , .

Memory: use the selected fallback provider’s embedding model and index status, observe external LanceDB writes, and retain recall through trigger timeouts. Keep top search results stable as result limits change, give managed local embedding startup its own readiness budget, honor bounded provider cooldowns, require real query diversity for promotion, and skip unnecessary recall for inter-session deliveries. Preserve first-run setup after empty dreaming and bound pre-compaction flush context while recording when no memory-write tool exists. Related , , , . (, , , , , ) Thanks , , , , , , , , .

Update handoff and restart: keep older updaters and Git installs upgrading from 2026.9.1 able to restart the Gateway; accept shipped 2026.9.2/2026.9.3 service handoffs without weakening current service-owner checks. Preserve pnpm-generation handoff and schema-upgrade restart intent, prepare managed helper schemas before readiness, replace unsupported service Node runtimes, retain restored-version verification, and prevent systemd restart hangs. Related , , , , , ) Thanks , , , and , , ) Thanks , and , ) Thanks . (, , , , ) Thanks .

Gateway responsiveness: move cold history planning, integrity checks, and archive pruning off the main thread; keep prepared updates and post-eviction maintenance responsive; reduce memory spikes when inspecting long sessions. Reduce unused plugin and model catalog preparation, bound parallel remote workspace hashing, avoid unnecessary diagnostic copies, and keep automation delivery previews responsive. (, , , , , )

Session retention: stop excess cleanup once disk pressure clears, preserve history that becomes protected during cleanup, and avoid premature daily resets around daylight-saving gaps. (, , , and . (, and , . (, , , , , , , , .

Paired devices and Linux: expose window discovery on the first computer action, preserve activation and observation results, open chat desktops on their assigned machines, and identify who took desktop control. Honor SSH alias ports, retain remote credential references on reconnect, and keep background-update results actionable. Related , , , , , .

Plugin schema typing: preserve catchall input and output types, including transformations, in multi-account channel schemas. Related ) Thanks , . Thanks . (, , , .

Provider routing and search: preserve stable routing identities for standalone OpenCode and OpenCode Go turns, retain provider turn headers for explicit sessions, preserve local-model request prefixes, and keep Gemini web search available with new API keys. Global web-search disable remains effective in session controls. Related , , , , , , , , .

Update ownership and cloud continuity: stop plugin persistence and rollback actions after updater authority is lost, reject unverified Gateway replacements, preserve cloud machines across Gateway updates, and continue submitted turns across worker-runtime updates. Related . (, , and , , , , ) Thanks , and , , , , , , , and , , , , , , and .., , , , , , , , , ).

Pull requests
- PR Thanks
- PR
- PR Related and .
- PR .
- PR Thanks Related
- PR
- PR .
Release verification

Signed source: 3a9d69db306cd7f081e06254cb89c4bcc14a7107.

: passed; exact qualified bytes, registry signatures, provenance and fresh install verified.

90 npm plugins and 3 core companion packages: published at latest, exact bytes verified.

: failed during npm propagation readback. GitHub finalized through manual recovery; no package republish.

Telegram and Parallels checks: explicitly waived by the release owner, not passed.

Pending: ClawHub recovery, npm beta-selector synchronization, native app assets, and stable main closeout. macOS signed/notarized artifacts are ready for promotion. Android native qualification failed. Windows historical-upgrade and Vercel mirror advisory failures remain recorded.

Full beta-selector verification and automated split-recovery verification have not passed; details and exact publication identities are retained in the attached postpublish evidence. This GitHub publication does not mark those follow-ups complete.

Vollständiger Original-Bericht

Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf github.com.

↗ Original-Artikel auf github.com lesen

Wie bewertest du diesen Beitrag?
1 Klick Feedback

Teilen mit Netzwerk & Team:

Hat Ihnen dieser Tipp / Anleitung geholfen?

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.

Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf „ Eigene Analyse verfassen“!

Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum

🔴 Akute Relevanz 0%

🟡 In Evaluierung 0%

🟢 Keine Auswirkung 0%

Spannende Innovation 0%

Verwandte Story-Cluster & Quellen (Vektor-KI)

Port 8095 Engine

3 Quellen
Use custom web fonts in Google Sheets charts

↗ Analyse öffnen

2 Quellen
Introducing the new 1Password App for Google Chat

↗ Analyse öffnen

1 Quelle
Context-aware access controls are available for Gemini Enterprise in the Admin console

↗ Analyse öffnen

◀ VORHERIGER BEITRAG 1 Min

iPhone 18 Pro (Max) ist da: Das können der A20 Pro und die Kamera mit variabler Blende

4

NÄCHSTER BEITRAG 1 Min

One Wireless Charger for iPhone 18 Pro, AirPods 5 and Apple Watch? What Apple’s 25W Ceiling Allows

23 Weiterlesen ▶

Tipp: Mit Pfeiltasten [ ← ] und [ → ] blättern

tsecurity.de LIVE

tsecurity.de Live Threat Radar

GitHub Release: openclaw/openclaw v2026.9.4 (11.09.2026)

2026.9.4

Highlights

Changes

Fixes

Pull requests

Release verification

Community-Analysen & Experten-Meinungen 0

Verwandte Story-Cluster & Quellen (Vektor-KI)

🔖 Gespeicherte Artikel

tsecurity.de App

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen

tsecurity.de LIVE

Themen-Radar & Intelligence Matrix

tsecurity.de Live Threat Radar

GitHub Release: openclaw/openclaw v2026.9.4 (11.09.2026)

2026.9.4

Highlights

Changes

Fixes

Pull requests

Release verification

Community-Analysen & Experten-Meinungen 0

Verwandte Story-Cluster & Quellen (Vektor-KI)

🔖 Gespeicherte Artikel

tsecurity.de App

Community Radar & Live Chat

Aktivitäten deiner Analysten

Neues Thema oder Eilmeldung einreichen

Heiß diskutierte Einreichungen Aktualisieren

Heiß diskutierte Einreichungen