2026.5.26 是近期体量最大的一次正式版更新，重点集中在 Gateway 性能、Transcript 核心能力、多渠道消息、Talk 语音、安全边界和 Provider 稳定性。
版本：OpenClaw 2026.5.26 正式版。定位：2026.5.26 是近期体量最大的一次正式版更新，重点集中在 Gateway 性能、Transcript 核心能力、多渠道消息、Talk 语音、安全边界和 Provider 稳定性。
一句话看懂这个版本
2026.5.26 是近期体量最大的一次正式版更新，重点集中在 Gateway 性能、Transcript 核心能力、多渠道消息、Talk 语音、安全边界和 Provider 稳定性。
核心更新速览
| # | 重点变化 |
|---|---|
| 1 | Gateway 启动和可见回复链路明显减负，减少插件、渠道、session、usage-cost 与文件系统重复扫描。 |
| 2 | Transcript 被提升为核心能力，会议摘要、来源片段、媒体来源、Codex mirror、WebChat 回复和 CLI/TUI replay 走向统一路径。 |
| 3 | Telegram、iMessage、WhatsApp、Discord、Signal 等渠道获得生产级增强，移动审批与语音体验更完整。 |
| 4 | 安全边界、Provider/Codex/local model、安装更新、发布验证与可观测性同步加强。 |
为什么这个正式版值得关注？
这次整理只看 npm 与官方 CHANGELOG 中的正式版本号，不纳入带预发布后缀或尚未对应正式包的顶部草稿。OpenClaw 2026.5.26 的价值不只是新增功能，而是把实际运行中的启动速度、渠道投递、权限边界、运行时恢复和多模型连接继续打磨得更稳。
官方 Changes 摘要
- Transcripts: add core transcript capture and source-provider support for transcript-backed meeting summaries, including the renamed Transcripts docs, CLI surface, source-provider chunks, and cleaned user-turn persistence.
- Auth: add named model login profiles and supported credential migration for Hermes, OpenCode, and Codex auth profiles, with explicit opt-out and non-interactive controls.
- Diagnostics: trace gateway secret preparation, classify skill/tool usage, surface model stream progress, add OpenTelemetry LLM content spans, and expose alertable telemetry for blocked tools, failover, stale sessions, liveness, oversized payloads, and webhook ingress.
- Channels: add Signal reaction approvals, iMessage thumb approval reactions, and WhatsApp thumb approval reaction support so mobile approval flows work without textual `/approve` commands.
- Agents/API: forward OpenAI sampling params through the Gateway and expose estimated context-budget status for active agent runs.
- TUI/status: queue prompts submitted while an agent is busy and show explicit fast-mode state plus richer systemd Gateway hygiene in status output.
- Exec approvals: hide durable approval actions that are unavailable for the current prompt and keep approval runtime tokens local-only so stale prompts cannot offer misleading controls.
- Plugin SDK: add reaction approval helpers and keep diagnostic event root exports discoverable across function-name and alias-bound module graphs.
官方 Fixes 摘要
- Memory/security: reject prompt-like text submitted through the explicit `memory_store` tool before embedding or storage, matching the existing auto-capture prompt-injection filter.
- Gateway/security: enable the default auth rate limiter for remote non-browser and HTTP gateway auth failures when `gateway.auth.rateLimit` is unset, while preserving the loopback exemption.
- Security/content boundaries: validate Browser snapshot tab URLs against SSRF policy before ChromeMCP or direct CDP reads, sanitize queued system-event text so untrusted plugin/channel labels cannot spoof nested prompt markers, wrap fetched file text and metadata as external content, apply ClickClack `allowFrom` sender allowlists before agent dispatch, reject RPCs from invalidated device-token clients during rotation, require staged sandbox media refs, and scrub serialized tool-call text from replies.
- Transcripts/user turns: persist CLI, WebChat, media, follow-up, hook, and Codex-mirror user turns to the admitted session target; keep cleaned transcript text, inline image routing, provenance metadata, replay hooks, and fallback paths idempotent when runtimes fail or restart.
- TUI/status/onboarding/UI: queue busy TUI prompts instead of dropping them, preserve the configured default model during onboarding, show failed tool results as errors, show config-open failures in Control UI, keep status JSON plugin scans healthy, preserve xAI usage-limit errors locally, and expose explicit fast-mode/systemd state.
- Plugin commands/SDK: preserve plugin LLM command auth, bind native plugin command dispatch to the host agent's LLM auth, keep `onDiagnosticEvent` exports discoverable through `Function.name`, stabilize diagnostic event root aliases, correlate pathless read diagnostics, suppress transient runner failures in channel command paths, and repair local approval resolution.
- Codex/providers: keep WebChat delivery hints out of user prompts, avoid false queued-terminal idle timeouts, share the native hook relay registry, quarantine unsupported dynamic tool schemas, preserve Claude resumed-session system prompts, normalize greedy Ollama `top_p`, preserve per-agent thinking defaults for ingress runs, and avoid native compaction takeover on budget-triggered Codex turns.
- Gateway/perf/release: reuse startup-warning metadata and prepared auth stores, avoid cloning live-switch and lifecycle session caches on read paths, defer warning and scheduled-service fallback imports, trim Gateway session/startup/runtime CPU churn, skip duplicate turn session touches, stop chat timeout fallback cascades, drop stale subagent announce history, bound benchmark/watch/kitchen-sink teardown waits, bound macOS/package/onboarding/plugin smoke commands, bound install finalization probes, resolve Parallels npm-update commands from guest `PATH`, and bootstrap raw AWS macOS Node/pnpm commands through `/usr/bin/env`.
对用户的实际影响
- 更稳：多个修复都指向真实部署中的超时、恢复、缓存、队列和运行时状态问题。
- 更安全：工具调用、外部内容、认证、设备、渠道与执行审批边界更清楚。
- 更适合长期运行：Gateway、插件、Provider、Transcript 与渠道链路都在向生产级长期运行靠拢。
- 更容易排障：Doctor、日志、文档、CLI 和发布验证持续补齐，失败时更容易定位。
升级建议
如果你已经把 OpenClaw 接入多个聊天渠道、Cron 自动化、语音、Codex、插件或本地模型，建议优先阅读该版本说明并安排升级验证。若只是轻量体验，也可以先关注与自己相关的渠道和 Provider 修复。
写在最后
近期 OpenClaw 的更新方向很清晰：从“功能覆盖”继续走向“长期稳定、跨渠道可恢复、安全边界清晰”。这类正式版更新虽然不一定每条都显眼，但对日常可靠性很关键。
参考来源
- OpenClaw 官方 CHANGELOG：https://github.com/openclaw/openclaw/blob/main/CHANGELOG.md
- OpenClaw GitHub Releases：https://github.com/openclaw/openclaw/releases
- OpenClaw npm package：https://www.npmjs.com/package/openclaw
