[Release] openclaw/openclaw v2026.3.23: 2026.3.23

OpenClaw v2026.3.23 is a maintenance release focused on stability and bug fixes across browser automation, authentication, plugins, channels, and gateway components. Key improvements include fixing Chrome MCP session handling, ClawHub macOS authentication, skill browsing token resolution, message tool schema validation, model pricing recursion, and numerous provider-specific issues. The release also addresses security concerns with exec approvals and improves gateway supervision and probe handling.

Key Points

• •Fixed Chrome MCP handshake to wait for browser tabs to become usable after attach, reducing user-profile timeouts and consent churn on macOS
• •Resolved ClawHub authentication on macOS by honoring both native auth config and XDG paths for credential persistence
• •Fixed skill browsing by resolving local ClawHub auth tokens and switching to search requests to prevent 429 rate-limit errors
• •Made Discord `components` and Slack `blocks` optional in message tool, and fixed Feishu media routing for file/image attachments
• •Prevented OpenRouter auto pricing from infinite recursion during bootstrap to restore cached pricing and usage cost calculations
• •Lowered Mistral max-token defaults to safe budgets and added `openclaw doctor --fix` repair for legacy Mistral configs
• •Fixed web_search provider selection to use active runtime config instead of stale defaults
• •Bootstrapped HTTP/HTTPS proxy dispatchers before OAuth flows for MiniMax and OpenAI Codex in proxy-required environments
• •Improved Telegram message handling with debounce ordering preservation and added `asDocument` alias for image/GIF sends
• •Enhanced security by requiring auth for canvas routes and admin scope for agent session reset, and improved shell-wrapper exec approval validation

Workflow Diagram

Concepts