每日版本追踪

OpenClaw

个人 AI 助手平台：Gateway、Skills、Memory，接得上多种聊天软件。

GitHub 发布记录最近检查：2026年11月01日每日自动刷新

2026年10月29日v2026.10.10-beta.5最新

openclaw 2026.10.10-beta.5

OpenClaw v2026.10.10-beta.5 的更新说明还没有整理成中文，改动请看下面的官方要点。

Cron: missed slots with a stale stored next run time are no longer dropped, and startup catch-up runs are admitted after a restart. (#179928; related #179927) Thanks @andrewbowlds, @RomneyDa, and @shakkernerd.
iOS: connect manually when the host includes `https://` or `wss://`, and prevent history recall during composition or selection. (#169875, #143056; related #144678) Thanks @masatohoshino, @RomneyDa, @bjesuiter, and @vincentkoc.
Complete contribution record
PR #172691 Thanks @joshavant.

2026年10月29日v2026.9.36

OpenClaw v2026.9.36 的更新说明还没有整理成中文，改动请看下面的官方要点。

Microsoft Teams allowlists stay restrictive: name-keyed `teams` or `groupAllowFrom` entries that do not resolve now grant nothing instead of opening the bot to every team or group. (#184989) Thanks @eleqtrizit, @RomneyDa, and @shakkernerd.
Replies keep their text: comparison prose after emoji and other astral characters is no longer stripped from outbound replies. (#187415) Thanks @RomneyDa.
Certificate trust and Docker images: the eMudhra trust remediation is applied, and Docker release images carry source/version-bound evidence with more reliable architecture builds. (#186639) Thanks @RomneyDa.
Reply delivery: keep comparison prose after astral characters in the outbound sanitizer. (#187415) Thanks @RomneyDa.

2026年10月29日v2026.10.9

OpenClaw v2026.10.9 的更新说明还没有整理成中文，改动请看下面的官方要点。

Apply `tools.fs.workspaceOnly` to Gateway-built tools, so delegate changes still require approval and media tools stay inside the workspace. (#185094) Thanks @eleqtrizit, @RomneyDa, and @shakkernerd.
Keep live credentials out of MCP CLI inspection and mask Google OAuth client secrets in logs. (#180321, #180308, #183193) Thanks @brandon-julio-t, @wr-web, @LeizhenZhang, and @RomneyDa.
Recover intact agent databases and stale full-text indexes after SQLite tokenizer changes, including update snapshots. (#176234, #176220, #176833, #181206) Thanks @ndakota79 and @RomneyDa.
Repair publication-complete updates after a remount while retaining the original launcher and sealed recovery helper. (#186557, #186527) Thanks @ericcaiwx-star, @sennyhoney, and @RomneyDa.

2026年10月27日v2026.10.8

OpenClaw v2026.10.8 的更新说明还没有整理成中文，改动请看下面的官方要点。

Fresh OpenAI setup: first-run model metadata no longer restricts the model picker to one model. (#175945) Thanks @matthematics1137 and @jb-dev1.
Channel accounts: default Slack, Google Chat, X, Nextcloud Talk and Zalo accounts keep starting and keep their secrets after a named account is added. (#176267, #180450, #182608) Thanks @555aaditya, @progerjkd, and @masatohoshino.
Slack: an isolated `invalid_auth` is retried before a socket-mode channel is disabled, and silent relay network drops reconnect. (#181056, #182368) Thanks @mushuiyu886 and @marns.
Remote access and history: Tailscale Serve and Funnel recover after tailscaled restarts, and cron history stays readable after provider changes. (#180081, #181311) Thanks @enki, @saariuslystoned, and @xtimor.

2026年10月26日v2026.10.10-beta.4

OpenClaw v2026.10.10-beta.4 的更新说明还没有整理成中文，改动请看下面的官方要点。

Gateway security: keep an environment-referenced `hooks.token` out of agent host-exec and CLI child environments at startup and across config reloads, while preserving explicit per-command overrides. (#179199) Thanks @VACInc and @RomneyDa.
Model refresh: let explicit catalog refreshes use their existing extended discovery budget through HTTP acquisition while ordinary preparation remains bounded. (#177313) Thanks @jlapenna and @RomneyDa.
Runtime security: backport patched embedded runtimes to the 2026.10.10 line. (#181074) Thanks @RomneyDa and @joshavant.
Claude CLI: stop prompt-cache prefix churn after a child completion. (#172026) Thanks @Marvinthebored and @VACInc.

2026年10月26日v2026.9.35

OpenClaw v2026.9.35 的更新说明还没有整理成中文，改动请看下面的官方要点。

SQLite 3.54 data safety: Doctor and update snapshots now repair stale full-text indexes left by the SQLite tokenizer change instead of quarantining agent databases. Fixes #176220. (#176234, #181206)
Kimi K3.1 Pro: `moonshot/kimi-k3.1-pro`, `kimi/k3.1-pro`, and their Highspeed variants get the K3 thinking, effort, and video controls; K3.1 rejects `off` locally instead of returning a provider 400. (#181923) Thanks @obviyus.
Gateway responsiveness: bound regex and tag scans for Microsoft Teams HTML, tool-call-shaped replies, and long streamed markup. (#183438, #183252, #174833, #175472, #180765) Thanks @LeizhenZhang and @JasonBuildAI.
Plugins: replace dangling dependency junctions instead of refusing plugin migration, copy native captures across filesystems, and tolerate ctime-only stat drift in native companion admission. (#179549, #179445, #179949) Thanks @coaiMax.

2026年10月24日v2026.9.34