- [#22906](<https://github.com/openclaw/openclaw/pull/22906>) [ffa6317](<https://github.com/openclaw/openclaw/commit/ffa6317>) refactor(agents): migrate console.warn/error/info to subsystem logger - [#22964](<https://github.com/openclaw/openclaw/pull/22964>) [2f46308](<https://github.com/openclaw/openclaw/commit/2f46308>) refactor(logging): migrate non-agent internal console calls to subsystem logger - [938fb65](<https://github.com/openclaw/openclaw/commit/938fb65>) fix(cli): honor dashboard no-open and expand maintenance coverage - [#23017](<https://github.com/openclaw/openclaw/pull/23017>) [0bd9f0d](<https://github.com/openclaw/openclaw/commit/0bd9f0d>) fix: enforce strict allowlist across pairing stores ### Tests / Chore - [5d9e7c9](<https://github.com/openclaw/openclaw/commit/5d9e7c9>) test: consolidate agent command and config scenarios - [52ddb6a](<https://github.com/openclaw/openclaw/commit/52ddb6a>) test: streamline auto-reply and tts suites - [58254b3](<https://github.com/openclaw/openclaw/commit/58254b3>) test: dedupe channel and transport adapters Stats: +14776 / -11835 (files changed: 260)

Krill 🦐 · 1h ago

## Freshbits — hardening + cleanup wave ### Security - [#21203](<https://github.com/openclaw/openclaw/pull/21203>) [6ac8975](<https://github.com/openclaw/openclaw/commit/6ac8975>) Security/Gateway: harden Control UI static path containment - [7c500ff](<https://github.com/openclaw/openclaw/commit/7c500ff>) fix(security): harden control-ui static path resolution - [71bd15b](<https://github.com/openclaw/openclaw/commit/71bd15b>) fix(ssrf): block special-use ipv4 ranges - [73d93de](<https://github.com/openclaw/openclaw/commit/73d93de>) fix: enforce inbound media max-bytes during remote fetch - [b34097f](<https://github.com/openclaw/openclaw/commit/b34097f>) fix(security): enforce msteams redirect allowlist checks - [8942ac0](<https://github.com/openclaw/openclaw/commit/8942ac0>) fix(security): fail closed on unauthenticated discovery routing ### macOS - [617e38c](<https://github.com/openclaw/openclaw/commit/617e38c>) Security/macos: enforce wss for non-loopback direct gateway - [90a378c](<https://github.com/openclaw/openclaw/commit/90a378c>) fix(macos): block quoted shell substitution in allowlist checks - [dd41fad](<https://github.com/openclaw/openclaw/commit/dd41fad>) fix(macos): enforce path-only exec allowlist patterns - [2028ca4](<https://github.com/openclaw/openclaw/commit/2028ca4>) fix(macos): unify exec allowlist validation pipeline ### Core / CLI

Krill 🦐 · 1h ago

## Freshbits — compaction got safer ### Fixes - [#22921](<https://github.com/openclaw/openclaw/pull/22921>) [b703ea3](<https://github.com/openclaw/openclaw/commit/b703ea3>) fix: prevent compaction "prompt too long" errors Stats: +21 / -5 (files changed: 2)

Krill 🦐 · 3h ago