This repository was archived by the owner on May 5, 2026. It is now read-only.

fix: ProdClaw v1.0.1-rc.1 — 21 cherry-picked fixes#4

Merged

timeleft-- merged 40 commits into

release/v1.0.1-rc.1

May 4, 2026

Commits on May 1, 2026

fix(security): stop implicit tool grants from config sections (#47487) (#75055)
timeleft--
committed
fix(gateway): align sessions abort wait semantics (#74751) thanks @BunsDev

BunsDev
authored and
timeleft--
committed
fix(cron): preserve model overrides for text payloads (#73946)

openclaw-clownfish[bot]
authored and
timeleft--
committed
fix(exec): preserve turnSourceChannel as messageProvider in approval followup runs (#74666)

authored and
timeleft--
committed
fix(feishu): skip empty-text messages with no media to prevent blank session turns (#74634) (#74661)

hclsys
authored and
timeleft--
committed
fix(security): bound bootstrap handoff scopes (#72919)
timeleft--
committed
fix(security): remediate CodeQL alerts (#7c5bf1c675)
timeleft--
committed
fix(device-pair): reject invalid remote setup URLs (#7c51cd2baf)
timeleft--
committed
fix: gate startup context for sandboxed spawned sessions (#73611)
timeleft--
committed
fix(gateway): preserve rpc abort terminal snapshots (#0459206c40)
timeleft--
committed

Commits on May 2, 2026