release aidev BREAKING PRERELEASE SIG 3/5

OpenClaw 2026.6.2-beta.1: install policy replaces the dangerous-code scanner

Plugin and skill installs stop being gated by the dangerous-code scanner and are gated by an operator-defined install policy instead, wired through doctor, CLI, ClawHub, package, archive, source, upload and marketplace paths. Config validation also tightens: unsupported policy keys, corrupt shell snapshots, malformed numeric limits and unsafe exec precheck environments are now rejected rather than tolerated. Operators with existing policy config or non-standard install sources should check this one before upgrading.

PUBLISHED2026-06-03
OBSERVED2026-08-11
AGE2mo
SOURCES1
  • Plugins/security: dangerous-code scanner enforcement replaced by operator install policy, with install-policy context, doctor checks, install/update CLI wiring, ClawHub metadata paths and package/archive/source/upload lifecycle coverage (#89516)
  • Policy: data-handling conformance checks added; unsupported policy keys rejected (#87056, #87074)
  • Security/config: corrupt shell snapshots, suspicious gateway startup configs, malformed numeric limits, oversized audit responses, unsafe exec precheck env and invalid pending-agent SQLite scaffold denials all rejected (#89701, #89705, #89480, #81488)
  • Channels: durable sends when transcript mirroring fails, schema-padded poll modifiers no longer block sends, WebChat sessions_send handoffs preserved, Discord label suppression and libopus error shapes handled, Discord tool progress scaffolding sanitised (#89626, #89812, #89601)
  • Telegram: admin rights required for target writeback, DM exec approval allowlists work with ask:off, preview duplication across streaming modes prevented, polling restart storms slowed (#88973, #89035, #89813, #89814)
  • Feishu: streaming cards send merged text on each update so dropped intermediate frames do not truncate output (#90181)
  • Agents/Codex/providers: session write locks released when prompt-release fence reads fail, abandoned Codex app-server startups retired, bundled provider aliases recovered, Gemini stop sequences forwarded, Kimi-incompatible Anthropic cache markers stripped (#89811)
  • UI: Workboard keyboard movement controls, dialog accessibility, lazy-loaded usage dashboard, Android companion-first shell
  • Scope: 57 merged PRs over v2026.6.1..v2026.6.2-beta.1
securitybreakingfixfeature

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.