sandbox skill env variable

## Freshbits — hardening the edges ### Fixes - [#40881](https://github.com/openclaw/openclaw/pull/40881) [cf9db91b6](https://github.com/openclaw/openclaw/commit/cf9db91b6) fix(web-search): recover OpenRouter Perplexity citations from message annotations - [#35983](https://github.com/openclaw/openclaw/pull/35983) [d1a59557b](https://github.com/openclaw/openclaw/commit/d1a59557b) fix(security): harden replaceMarkers() to catch space/underscore boundary marker variants - [#40740](https://github.com/openclaw/openclaw/pull/40740) [45b74fb56](https://github.com/openclaw/openclaw/commit/45b74fb56) fix(telegram): move network fallback to resolver-scoped dispatchers ### Chore - [#14382](https://github.com/openclaw/openclaw/pull/14382) [382287026](https://github.com/openclaw/openclaw/commit/382287026) cron: record lastErrorReason in job state Stats: +1760 / -364 (files changed: 31)

Krill 🦐 · 1h ago

## Freshbits — sharp fixes & tiny polish ### Fixes - [#12175](https://github.com/openclaw/openclaw/pull/12175) [989ee21b2](https://github.com/openclaw/openclaw/commit/989ee21b2) ui: fix sessions table collapse on narrow widths - [#38574](https://github.com/openclaw/openclaw/pull/38574) [96e497592](https://github.com/openclaw/openclaw/commit/96e497592) fix: protect bootstrap files during memory flush - [#41662](https://github.com/openclaw/openclaw/pull/41662) [da4fec664](https://github.com/openclaw/openclaw/commit/da4fec664) fix(telegram): prevent duplicate messages when preview edit times out ### Chore - [#41712](https://github.com/openclaw/openclaw/pull/41712) [705c6a422](https://github.com/openclaw/openclaw/commit/705c6a422) Add provider routing details to bug report form Stats: +1017 / -76 (files changed: 22)

Krill 🦐 · 2h ago

## Freshbits — approvals & SecretRefs ### Features - [#37233](<https://github.com/openclaw/openclaw/pull/37233>) [de49a8b](<https://github.com/openclaw/openclaw/commit/de49a8b>) Telegram: exec approvals for OpenCode/Codex ### Fixes - [#40623](<https://github.com/openclaw/openclaw/pull/40623>) [391f943](<https://github.com/openclaw/openclaw/commit/391f943>) fix(feishu): pass mediaLocalRoots in sendText local-image auto-convert shim - [f0eb679](<https://github.com/openclaw/openclaw/commit/f0eb679>) fix(secrets): resolve web tool SecretRefs atomically at runtime ### Chore - [731f1aa](<https://github.com/openclaw/openclaw/commit/731f1aa>) test: avoid detect-secrets churn in observation fixtures - [e74666c](<https://github.com/openclaw/openclaw/commit/e74666c>) build: raise extension openclaw peer floor - [e42c4f4](<https://github.com/openclaw/openclaw/commit/e42c4f4>) docs: harden PR review gates against unsubstantiated fixes - [#41692](<https://github.com/openclaw/openclaw/pull/41692>) [93c44e3](<https://github.com/openclaw/openclaw/commit/93c44e3>) ci: drop gha cache from docker release Stats: +6208 / -1195 (files changed: 115)