OpenClaw Files

This is a gateway-only extended-stable release, which is our current equivalent to LTS. This release is OpenClaw from the end of August 2026, plus critical security updates, reliability and performance fixes, and features like new model support. The current latest version of OpenClaw is 2026.9.6

2026.8.33

Highlights

• Current flagship models: add Meta Muse Spark 1.3, Anthropic Fable 5.1, OpenAI GPT-6 Astra, and OpenAI/fal GPT Image 2.5 support to the extended-stable line. (#135638, [#136553], [#137550], [#143068], [#143069])
• Complete GPT-5.6 family support: preserve Sol, Terra, and Luna catalog, routing, migration, image, vision, and thinking behavior, including Ultra reasoning across model-runtime boundaries and Bedrock tool-result images. (#135397, [#149336])
• Extended-stable security rollup: reconcile all repository advisories that affect 2026.8.2, harden Prometheus metrics authorization and Discord asset/voice ownership, and clear the production Nodemailer advisory gate. (#136700, [#137433], [#140334], [#140903])

Changes

• Extended-stable release preparation: normalize OpenClaw, all publishable plugins, and native version metadata to 2026.8.33 while retaining the release-line-compatible publication workflows from 2026.8.2.

Fixes

• Anthropic reasoning continuity: preserve Fable 5.1 reasoning through model switches and runtime events. (#136782)
• OpenAI discovery: require successful model discovery before offering GPT-6 Astra through OAuth. (#137561)
• Doctor skill state: preserve explicitly enabled skills during automatic updates. (#138730)
• Generated media: retain generated images when a later tool call fails. (#131226)
• Matrix verification: refresh verification state before reporting device trust. (#136226)
• Prometheus authorization: reject metric scrapes that lack the configured operator-read scope. (#140903)
• Discord media policy: enforce sender media policy for guild asset uploads. (#140334)
• Discord realtime ownership: preserve speaker and playback ownership across voice lifecycle transitions. (#137433)
• Discord consult cancellation: record host-cancelled realtime consults as cancellation, suppress the generic error fallback, and keep the voice session ready for the next request. (#134924, [#135380])
• Dependency security: override the IMAP dependency graph to Nodemailer 9.1.1, clearing the address-parser denial-of-service and related domain/content-access advisories. (#136700)
• iOS release validation: update the WebRTC binary dependency to 152.0.0 after the 151.0.0 artifact was withdrawn. (#134942)