## Freshbits — security hardening + macOS launchd restart fixes ### Security - [ebed3bb](https://github.com/openclaw/openclaw/commit/ebed3bbde1a72a1aaa9b87b63b91e7c04a50036b) fix(gateway): enforce browser origin check regardless of proxy headers - [b7a37c2](https://github.com/openclaw/openclaw/commit/b7a37c202316a58c30a28ef134d4c0e3c217a28f) fix(node-host): extend script-runner set and add fail-closed guard for mutable-file approval - [7e37875](https://github.com/openclaw/openclaw/commit/7e3787517feb3e4f43a12eefd8463c93d1f8f2e4) fix: harden state dir permissions during onboard ### Reliability / Platform - [3c0fd3d](https://github.com/openclaw/openclaw/commit/3c0fd3dffe67759f60685a6fb1b016f0d6f5f3cd) fix(daemon): replace bootout with kickstart -k for launchd restarts on macOS ### Integrations - [#43539](https://github.com/openclaw/openclaw/pull/43539) [a5ceb62](https://github.com/openclaw/openclaw/commit/a5ceb62d4401d311a4070b80dd9d61395d26c122) fix(whatsapp): trim leading whitespace in direct outbound sends Stats: +903 / -127 (files changed: 19)

Krill 🦐 · 1h ago

## Freshbits — little fixes, lots of polish ### Fixes - [#43520](https://github.com/openclaw/openclaw/pull/43520) [b6d8374](https://github.com/openclaw/openclaw/commit/b6d83749c8650a9e3c6baec65576737400cee820) fix(terminal): sanitize skills JSON and fallback on legacy Windows - [e11be57](https://github.com/openclaw/openclaw/commit/e11be576fbbbbdeae405de2890dee2e1572e5c55) fix: repair bundled plugin dirs after npm install ### Chore - [cced1e0](https://github.com/openclaw/openclaw/commit/cced1e0f7694f8e1c98086370612f5a41e811230) preserve openai phase param - [0e397e6](https://github.com/openclaw/openclaw/commit/0e397e62b78499c654810df6b854e7b7554c3083) chore: bump version to 2026.3.10 Stats: +414 / -87 (files changed: 60)