[dependabot]

Bumps the npm-minor-patch group with 1 update: openclaw.

Updates openclaw from 2026.10.8 to 2026.10.9

Release notes

Sourced from openclaw's releases.

openclaw 2026.10.9

2026.10.9

Highlights

• Patch vulnerable runtime dependencies: fast-uri 4.2.3 rejects malformed URI schemes and hosts in MCP schema validation, oversized Zod collections are rejected early in A2UI and the Discord embedded app SDK, IMAP sender parsing uses nodemailer 10.1.4 so spoofed senders cannot pass the sender token gate, and Microsoft Teams uses patched MSAL Node 7.1.1. (#187294) Thanks @​RomneyDa.
• Apply tools.fs.workspaceOnly to Gateway-built tools, so delegate changes still require approval and media tools stay inside the workspace. (#185094) Thanks @​eleqtrizit, @​RomneyDa, and @​shakkernerd.
• Keep live credentials out of MCP CLI inspection and mask Google OAuth client secrets in logs. (#180321, #180308, #183193) Thanks @​brandon-julio-t, @​wr-web, @​LeizhenZhang, and @​RomneyDa.
• Make failed update rollbacks safe: Git-source rollbacks preserve operator edits instead of resetting the checkout, and npm rollbacks retry transient Windows denials and report the exact move that restores a bootable install instead of stranding the package root. (#185201, #184887, #185160, #184889) Thanks @​wr-web, @​syxscott, @​LiuwqGit, @​shakkernerd, and @​RomneyDa.
• Recover intact agent databases and stale full-text indexes after SQLite tokenizer changes, including update snapshots. (#176234, #176220, #176833, #181206) Thanks @​ndakota79 and @​RomneyDa.
• Repair publication-complete updates after a remount while retaining the original launcher and sealed recovery helper. (#186557, #186527) Thanks @​ericcaiwx-star, @​sennyhoney, and @​RomneyDa.
• Migrate large transcript archives without exceeding Node.js string limits. (#170853, #170847) Thanks @​iamonlv426 and @​RomneyDa.
• Allow agents to recover after a full disk once space becomes available, without requiring a restart. (#176902) Thanks @​RomneyDa.

Changes

This maintenance release focuses on security dependency patches, recovery, data preservation, and reliability fixes.

Fixes

• Resolve local media in Codex steering messages from the session's own workspace instead of the agent's default workspace. (#181528) Thanks @​RomneyDa.
• Report uncertain process cleanup from buffered commands, such as local CLI speech providers, instead of presenting it as an ordinary command failure. (#184270, #184237) Thanks @​shakkernerd and @​RomneyDa.
• Keep reapproved node connections alive by publishing the approval with its committed pairing facts before the request resumes. Thanks @​RomneyDa.
• Recover stopped Gateways when service activation cannot be verified; retain untouched-recovery behavior in Windows triage. (#172784, #181577, #181698) Thanks @​SMF12138 and @​RomneyDa.
• Avoid uninstalling a Gateway service during a passive macOS stop when no service is installed. (#181257) Thanks @​shakkernerd, @​LiuwqGit, @​eleqtrizit, @​syxscott, and @​RomneyDa.
• Recover CLI Node runtimes when launched from the filesystem root, including launchd jobs. (#178112, #177739) Thanks @​downingkeys and @​RomneyDa.
• Start new ACP sessions in the requested working directory instead of the default workspace. (#176852, #123557) Thanks @​yinx65588-boop, @​crappier, and @​RomneyDa.
• Prevent overlapping model refreshes from failing requests. (#179144) Thanks @​RomneyDa.
• Honor an explicit SSH port 22 in openclaw gateway probe --ssh instead of the alias's configured port. (#171092) Thanks @​zhangguiping-xydt, @​obviyus, and @​RomneyDa.
• Keep skill metadata such as icons and homepages when an inline YAML metadata value has a trailing comment. (#171224) Thanks @​zhangguiping-xydt, @​Takhoffman, and @​RomneyDa.
• Show provider-ignored options in openclaw infer video generate text and JSON output. (#171172) Thanks @​ly85206559, @​obviyus, and @​RomneyDa.

Complete contribution record

This audited record covers the complete v2026.10.8..c213740c8338a05ac1a6db036e0d11060e70bf5d history: 48 in-range PRs + 0 retained seed-only PRs = 48 unique PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Shipped baseline exclusions: v2026.10.8 (3 PRs: #180390, #180668, #181596).

Pull requests

• PR #185538 Thanks @​RomneyDa.
• PR #170853 Related #170847. Thanks @​iamonlv426 and @​RomneyDa.
• PR #185201 Related #184887. Thanks @​wr-web and @​RomneyDa and @​syxscott.
• PR #176902 Thanks @​RomneyDa.
• PR #176852 Related #123557. Thanks @​yinx65588-boop and @​RomneyDa and @​crappier.
• PR #178112 Related #177739. Thanks @​RomneyDa and @​downingkeys.
• PR #179144 Thanks @​RomneyDa.
• PR #180321 Related #180308. Thanks @​brandon-julio-t and @​wr-web and @​RomneyDa.
• PR #183193 Thanks @​LeizhenZhang and @​RomneyDa.
• PR #176833 Related #176220. Thanks @​RomneyDa and @​ndakota79.

... (truncated)

Changelog

Sourced from openclaw's changelog.

Changelog

Release notes: https://docs.openclaw.ai/releases

Each release has its complete changelog below. Audited contribution records are retained separately when available.

• Unreleased · Raw
• 2026.10.9 · Raw
• 2026.10.8 · Raw
• 2026.10.7 · Raw
• 2026.10.6 · Raw
• 2026.10.5 · Raw
• 2026.10.4 · Raw
• 2026.10.3 · Raw
• 2026.10.2 · Raw
• 2026.10.1 · Raw
• 2026.9.9 · Raw
• 2026.9.8 · Raw
• 2026.9.7 · Raw
• 2026.9.6 · Raw
• 2026.9.5 · Raw
• 2026.9.4 · Raw
• 2026.9.3 · Raw
• 2026.9.2 · Raw
• 2026.9.1 · Raw
• 2026.8.2 · Raw
• 2026.8.1 · Raw
• 2026.7.1 · Raw
• 2026.6.11 · Raw
• 2026.6.10 · Raw
• 2026.6.9 · Raw
• 2026.6.8 · Raw
• 2026.6.7 · Raw
• 2026.6.6 · Raw
• 2026.6.5 · Raw
• 2026.6.2 · Raw
• 2026.6.1 · Raw
• 2026.5.31 · Raw
• 2026.5.28 · Raw
• 2026.5.27 · Raw
• 2026.5.26 · Raw
• 2026.5.22 · Raw
• 2026.5.20 · Raw
• 2026.5.19 · Raw
• 2026.5.17 · Raw
• 2026.5.14 · Raw
• 2026.5.12 · Raw
• 2026.5.7 · Raw

... (truncated)

Commits

• 8b18b55 docs(changelog): refresh 2026.10.9 notes (#187583)
• c213740 [2026.10.9] test(state): keep startup FTS fixtures until the suite ends (#187...
• d5481b3 test(plugins): expect scoped npm overrides in plugin installs (#187487)
• 653ca36 test(cron): clarify unavailable tool fallback in live probe (#187459)
• 1300a3c fix(gateway): keep reapproved node connections alive (#187461)
• 83b90b0 [2026.10.9] fix(security): bound A2UI Zod 3 traversal on stable (#187303)
• 8358419 fix(ci): recognize standalone release security test roots (#187430)
• 9381233 [2026.10.9] fix(msteams): scope patched MSAL on stable train (#187294)
• 6628377 fix(ci): restore 2026.10.9 nonce diagnostic checks (#187412)
• 489d183 [2026.10.9] Preserve filesystem policy in Gateway-built tools (#187276)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions