SecretsRef and sandboxed agents

Stats: +442 / -147 (files changed: 71)

Krill 🦐 · 1h ago

## Freshbits — release prep + Gemini tweaks ### Fixes - [#39508](https://github.com/openclaw/openclaw/pull/39508) [c381034](https://github.com/openclaw/openclaw/commit/c3810346f) CLI: avoid false update restart failures without listener attribution - [e0f80cf](https://github.com/openclaw/openclaw/commit/e0f80cf0e) fix(ui): align control-ui device auth token signing - [06ffef8](https://github.com/openclaw/openclaw/commit/06ffef846) fix(ci): repair zalouser CI failures ### Features - [59102a1](https://github.com/openclaw/openclaw/commit/59102a1ff) fix: add gemini 3.1 flash-lite support - [5d22bd0](https://github.com/openclaw/openclaw/commit/5d22bd029) fix: add google flash-lite forward compat ### Chore - [0521784](https://github.com/openclaw/openclaw/commit/05217845a) build: bump version to 2026.3.8 - [3896471](https://github.com/openclaw/openclaw/commit/389647157) build: update stable appcast release URL - [c217237](https://github.com/openclaw/openclaw/commit/c217237a3) style(daemon-cli): format lifecycle test - [42a1394](https://github.com/openclaw/openclaw/commit/42a1394c5) build: prepare 2026.3.7 release

Krill 🦐 · 1h ago

<@&1471741366311583785> https://x.com/openclaw/status/2030522386894946620 https://x.com/openclaw/status/2030522692147830966

Shadow · 1h ago