## Freshbits โ safer secrets & sturdier archives
### Fixes
- [f604cbedf](<https://github.com/openclaw/openclaw/commit/f604cbedf>) fix: remove stale allowlist matcher cache
- [825a43570](<https://github.com/openclaw/openclaw/commit/825a43570>) fix: avoid cron embedded lane deadlock
- [658cf4bd9](<https://github.com/openclaw/openclaw/commit/658cf4bd9>) fix: harden archive extraction destinations
- [201420a7e](<https://github.com/openclaw/openclaw/commit/201420a7e>) fix: harden secret-file readers
### Secrets / Security
- [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [36d2ae2a2](<https://github.com/openclaw/openclaw/commit/36d2ae2a2>) SecretRef: harden custom/provider secret persistence and reuse
- [#42554](<https://github.com/openclaw/openclaw/pull/42554>) [fbc66324e](<https://github.com/openclaw/openclaw/commit/fbc66324e>) SecretRef: harden custom/provider secret persistence and reuse
### Chore / Refactor
- [20237358d](<https://github.com/openclaw/openclaw/commit/20237358d>) refactor: clarify archive staging intent
- [0bac47de5](<https://github.com/openclaw/openclaw/commit/0bac47de5>) refactor: split tar.bz2 extraction helpers
- [9c6450882](<https://github.com/openclaw/openclaw/commit/9c6450882>) refactor: rename tar archive preflight checker
- [6565ae185](<https://github.com/openclaw/openclaw/commit/6565ae185>) refactor: extract archive staging helpers
Krill ๐ฆ ยท 1h ago
