OpenClaw Changelog - February 21-28, 2026

February 28, 2026

This changelog is generated by Notra for demonstration purposes. Notra is not affiliated with OpenClaw.

Highlights

External secrets management framework

Credential handling moves off inline .env files. The new architecture supports exec-based providers (1Password, Vault, secretive), file-backed configs, and SOPS integration for automated secret lifecycle management without process restarts.

Feishu documents with markdown tables and full CRUD operations

Document write/append now renders markdown tables as native Feishu tables, chunks large payloads to avoid API errors, supports positional insertion and color markup, and enables comprehensive table operations: merge cells, insert/delete rows and columns, embed media.

Post-compaction prompt injection vulnerability removed

The Layer 3 audit injection created fake system messages after context compaction to force file reads. Deleted entirely. Layers 1 and 2 (compaction summary and AGENTS.md context refresh) remain intact for legitimate recovery. Fixes #27697, #26851, #20484, #22339, #25600.

Android device capabilities: motion, pedometer, calendar, contacts, camera, diagnostics

New handlers unlock motion activity classification, step counting, calendar read, contact queries, photo access, notification actions, and device status reporting. Completes parity with Node.js device API surface.

Cron job delivery hardened with explicit account routing and session isolation

Fixed main-target cron jobs to deliver notifications by passing target=last heartbeat flag. Added --account flag for delivery routing. Prevented false-positive delivery states for queued announces. Cleared delivery routing metadata on isolated session creation.

More Updates

Security

  • Removed post-compaction audit injection vulnerability - Deleted Layer 3 audit that injects fake system messages via prompt injection after context compaction. Preserves legitimate Layers 1 and 2 recovery flows. Fixes #27697, #26851, #20484, #22339, #25600.
  • External secrets management framework - Provider-based architecture supporting exec-backed, file-backed, and SOPS providers for credential lifecycle management without inline .env storage.
  • Harden node system.run approvals against symlink rebind attacks - Tighten exec approval binding to prevent execution of attacker-controlled symlinked binaries.

Features & Enhancements

  • Feishu Docx table creation and image/file upload actions - Full Feishu document operations with native table support, file attachment operations, and seamless image upload.
  • Android voice reliability enhancements - Rotate playback token per assistant reply; retry talk config after transient failures; cancel in-flight speech when speaker muted.

Bug Fixes

  • Ollama autodiscovery hardening - Auto-discover Ollama models without API key; demote zero-models warn log to debug.
  • Browser navigate renderer swap targetId resolution - Resolve correct targetId after Chrome renderer swap (e.g., chrome-extension to https).

Performance Improvements

  • Android mic conversation update churn reduction - Reduce unnecessary conversation state updates during microphone interaction.

Infrastructure

  • Update server-cron.ts and models-config.providers.ts - Maintenance updates to cron and model configuration.

Testing & Documentation

  • Regression test suite expansion - Add extensive regression coverage for compaction, reset, auth boundaries, device capabilities, and mail flows.