How-Tos & Practical Guides

OpenClaw v2026.2.24 Full Changelog: Android Onboarding, Docker Security Block, Heartbeat DM Restriction OpenClaw v2026.2.24 shipped on February 25, 2026, and it’s a release you need to read before you upgrade — especially if you’re running Docker containers or relying on Heartbeat to send direct messages. This version brings meaningful new features (native Android onboarding) alongside two breaking changes that could disrupt existing workflows. Here’s everything you need to know. What’s New Native Android Onboarding (4-Step Flow + 5-Tab Shell) Android users get a significantly improved first-run experience in v2026.2.24. The new onboarding flow walks through setup in four guided steps, and the mobile shell now features a 5-tab interface for navigating between conversations, tools, memory, settings, and status. ...

How to Configure Multilingual Stop Phrases in OpenClaw v2026.2.24 OpenClaw v2026.2.24 ships with a feature that addresses a real gap in agentic safety: multilingual stop phrases. Where previously the emergency abort system primarily recognized English keywords, it now understands stop commands in nine languages — Spanish, French, Chinese, Hindi, Arabic, Japanese, German, Portuguese, and Russian. This how-to walks you through: What changed in the stop phrase system How the defaults work (and what you get for free) How to customize stop phrases if the defaults don’t fit your setup First look at the new Android 5-tab shell Why This Matters If you’ve followed the Summer Yue inbox incident, you already understand the stakes. When an agent is doing something harmful, your ability to stop it quickly matters. Previous versions of OpenClaw’s stop system had an English-centric blind spot: users who naturally reached for their native language in a panic moment were not well served. ...

Claude Code February 2026 Changelog: Agent Worktree Isolation, Memory Leak Fixes, and Git Worktree Discovery The February 2026 Claude Code update is a substantial one for multi-agent developers. Three changes landed in this release that touch some of the most pain-prone areas of production agentic workflows: declarative git worktree isolation, a memory leak fix in agent teams, and a bug fix for git worktree-based agent and skill discovery. If you’re running parallel agent teams on Claude Code, this release deserves a careful read. ...

Anthropic Releases Claude Sonnet 4.6 — 1M Token Context, Flagship Agentic Performance On February 17, 2026, Anthropic released Claude Sonnet 4.6, and the agentic AI community immediately took notice. This is the model that now powers OpenClaw by default — and for good reason. Sonnet 4.6 brings a 1 million token context window in beta, dramatically improved agentic task performance, and holds its price point at the same level as Sonnet 4.5. Flagship performance at mid-tier cost. ...

GitHub Agentic Workflows Now in Technical Preview — AI Agents as First-Class CI/CD Actors GitHub just made AI coding agents official participants in your CI/CD pipeline. The GitHub Agentic Workflows technical preview, announced February 13, 2026, lets GitHub Copilot, Claude Code, or OpenAI Codex handle repository tasks autonomously inside GitHub Actions — as first-class actors, not just code completion sidekicks. This is GitHub’s “Continuous AI” vision made real. And it’s already in your hands to try. ...

Microsoft Agent Framework Reaches Release Candidate — AutoGen + Semantic Kernel Unified The fragmentation era of Microsoft’s agentic AI tooling is officially ending. On February 19, 2026, Microsoft announced that the Microsoft Agent Framework (MAF) has reached Release Candidate for both .NET and Python — unifying AutoGen and Semantic Kernel into a single, coherent open-source SDK. General Availability is targeted for Q1 2026. If you’ve been running AutoGen or Semantic Kernel in production, the clock is ticking. AutoGen is entering maintenance-only mode. ...

OpenClaw Security: CVE Patches + SecureClaw Open-Source Audit Tool Debuts If you’re running a self-hosted OpenClaw instance, security just got more serious — and, paradoxically, easier to manage. Two CVEs were patched in v2026.1.30, and a free open-source audit tool called SecureClaw has debuted to help you find vulnerabilities before attackers do. Here’s what you need to know and what to do about it. The CVEs: What Was Fixed CVE-2026-25593 Patched in OpenClaw v2026.1.30. Details from SecurityWeek indicate this vulnerability affects the OpenClaw gateway’s HTTP interface when running without authentication (gateway.http.no_auth: true). The specific attack surface involves unauthenticated access to agent execution endpoints, allowing an attacker with network access to the gateway to issue commands to your agents. ...

OpenClaw v2026.2.19: Apple Watch Companion App + 40+ Security Hardening Fixes The latest OpenClaw release is a big one. Version 2026.2.19 ships two major storylines in a single update: a fully functional Apple Watch companion app that brings your AI agent to your wrist, and what the team is calling the most comprehensive security hardening pass in the project’s history — 40+ fixes across gateway exposure, file permissions, authentication boundaries, and more. A follow-up patch (2026.2.21-1) shipped via npm shortly after. ...

OpenClaw Security Hardening Checklist: SSRF, Auth Bypass & RCE Prevention Following today’s dual security disclosures — six patched CVEs from Endor Labs and 40,000+ exposed instances from SecurityScorecard — this guide walks you through exactly what to do to lock down your OpenClaw deployment. Whether you’re running OpenClaw locally, on a VPS, or in a corporate environment, these steps will dramatically reduce your attack surface. Bookmark this. Share it with your team. Run through it today. ...

OpenClaw v2026.2.21: Gemini 3.1, GLM-5, Discord Voice & SHA-256 Security Hardening The latest OpenClaw release is a big one. Version 2026.2.21 lands with expanded model support, a long-requested Discord voice channel feature, and an important security migration from SHA-1 to SHA-256. Here’s everything you need to know — and how to take advantage of it. What’s New in v2026.2.21 Gemini 3.1 and GLM-5 Model Support OpenClaw now natively supports two powerful new models: ...