[Release] openclaw/openclaw v2026.5.12-beta.5: openclaw 2026.5.12-beta.5

OpenClaw v2026.5.12-beta.5 is a comprehensive bug-fix release addressing gateway protocol improvements, security hardening, plugin dependency management, channel integrations (WhatsApp, Telegram, Discord, WeCom), session transcript redaction, and agent execution reliability. Key fixes include OAuth token exchange for Copilot, device pairing approval requirements, media size enforcement across plugins, and LLM idle watchdog timeout escalation. The release improves stability across multiple integrations while strengthening security controls for trusted proxies, admin scopes, and sensitive data redaction.

Key Points

• •Gateway protocol now requires v4 clients and streams explicit chat deltaText/replace frames for SDK consumption without local diffing
• •Implement device pairing approval requirements for setup-code, browser, and Control UI access to enforce security gates
• •Enforce inbound media size caps across Feishu, WhatsApp, and Line plugins to prevent full buffering of oversized attachments
• •Centralize semantic config mutation serialization and retry logic to prevent concurrent command conflicts and data clobbering
• •Redact sensitive message content in centralized JSONL append path across CLI turns, gateway injection, and transcript mirrors
• •Escalate LLM idle watchdog timeouts through profile rotation and model fallback to prevent stuck agent turns on silent streams
• •Preserve third-party peer dependencies during plugin installs and prune them after plugin removal without blocking cleanup
• •Require admin scope for node device token management, memory-wiki ingestion, and restrict chat sender allowlist matching
• •Externalize WhatsApp as ClawHub/npm plugin and bump Baileys to 7.0.0-rc11 to resolve libsignal from registry
• •Nest subagent sessions under parent sessions in Control UI picker with visual prefix to clarify parent-child relationships

Workflow Diagram

Concepts