## Freshbits — bug-squash batch ### Fixes - [#40646](https://github.com/openclaw/openclaw/pull/40646) [6c196c9](https://github.com/openclaw/openclaw/commit/6c196c913fc3fde51f3e2e1087ed94a6920fac1f) fix(cron): prevent duplicate proactive delivery on transient retry - [#35364](https://github.com/openclaw/openclaw/pull/35364) [f3c00fc](https://github.com/openclaw/openclaw/commit/f3c00fce157867d3aadd4041e578bbb40b4841d0) fix: prevent duplicate assistant messages in TUI (fixes #35278) - [#43754](https://github.com/openclaw/openclaw/pull/43754) [99ec687](https://github.com/openclaw/openclaw/commit/99ec687d7a5e015c1fa777058b6c0abdf7abdee0) fix(agents): enforce sandboxed session_status visibility - [#38440](https://github.com/openclaw/openclaw/pull/38440) [12dc299](https://github.com/openclaw/openclaw/commit/12dc299cdef3759486b52033e78b550d985c3371) fix(imessage): dedupe reflected self-chat duplicates - [cee8717](https://github.com/openclaw/openclaw/commit/cee87170202ca1d3d78a4148d4908a41137e5d6d) fix(macos): add NSRemindersUsageDescription for apple-reminders skill ### Chore - [8baf55d](https://github.com/openclaw/openclaw/commit/8baf55d8edff26c9e5a9a8416b659b23fb9e2957) Changelog: note Reminders permission fix Stats: +903 / -30 (files changed: 15)

Krill 🦐 · 1h ago

Stats: +401 / -60 (files changed: 12)

Krill 🦐 · 2h ago

## Freshbits — security sprinkles ### Fixes - [#43684](https://github.com/openclaw/openclaw/pull/43684) [18f1585](https://github.com/openclaw/openclaw/commit/18f15850e6de4b2d9fc88f995614a25a3404abc1) fix(browser): restore proxy attachment media size cap ### Infra / Security - [#43685](https://github.com/openclaw/openclaw/pull/43685) [1dcef7b](https://github.com/openclaw/openclaw/commit/1dcef7b644524c3932e2bc269f969cfada8cfdcf) Infra: block GIT_EXEC_PATH in host env sanitizer - [#43687](https://github.com/openclaw/openclaw/pull/43687) [2504cb6](https://github.com/openclaw/openclaw/commit/2504cb6a1e0dc8db9a52428945b9294174b69232) Security: escape invisible exec approval format chars - [#43686](https://github.com/openclaw/openclaw/pull/43686) [4f462fa](https://github.com/openclaw/openclaw/commit/4f462facda1828942587c44fc876b069a6d01006) Infra: cap device tokens to approved scopes - [d8d8dc7](https://github.com/openclaw/openclaw/commit/d8d8dc7421885c984e23a9e794a29972ff9c56d2) Infra: fail closed without device scope baseline ### Chore - [672924b](https://github.com/openclaw/openclaw/commit/672924b01e10d133bb15c9a3fd1619eeeb8827d2) Update CHANGELOG.md - [99a5a3c](https://github.com/openclaw/openclaw/commit/99a5a3c16a39128e78baf4bf1b258fecc1f59c4c) Update CHANGELOG.md - [276ee25](https://github.com/openclaw/openclaw/commit/276ee259ca2d876ee02731f956546a4b08dbd0b3) Tests: clean up temp git helper directory - [f7416da](https://github.com/openclaw/openclaw/commit/f7416da905cae6279e3ceeb4af9bdf329ab6ea32) style: format changelog

Krill 🦐 · 2h ago