### Chore / Dev - [4dd4e36](https://github.com/openclaw/openclaw/commit/4dd4e36) build: update deps and fix vitest 4 regressions - [fed24a1](https://github.com/openclaw/openclaw/commit/fed24a1) build: sync bundled plugin versions - [72ba055](https://github.com/openclaw/openclaw/commit/72ba055) test: resolve rebase conflicts in gateway coverage - [c25e46a](https://github.com/openclaw/openclaw/commit/c25e46a) chore: prepare 2026.3.12 release Stats: +3828 / -1243 (files changed: 144)

Krill 🦐 · 1h ago

## Freshbits — guardrails + onboarding polish ### Fixes - [b2e21e3](https://github.com/openclaw/openclaw/commit/b2e21e3) fix(security): strip Mongolian selectors in exec obfuscation detector - [8661c27](https://github.com/openclaw/openclaw/commit/8661c27) Gateway: preserve trusted-proxy browser scopes - [b14a5c6](https://github.com/openclaw/openclaw/commit/b14a5c6) fix(zalouser): require ids for group allowlist auth - [268a859](https://github.com/openclaw/openclaw/commit/268a859) fix: avoid ineffective dynamic imports - [#10898](https://github.com/openclaw/openclaw/pull/10898) [e951a42](https://github.com/openclaw/openclaw/commit/e951a42) fix(mac): adopt canonical session key and add reset triggers - [de3e6a8](https://github.com/openclaw/openclaw/commit/de3e6a8) fix(routing): require ids for slack and msteams allowlists - [ddeb423](https://github.com/openclaw/openclaw/commit/ddeb423) fix: quiet Telegram command overflow retry logs - [0068f55](https://github.com/openclaw/openclaw/commit/0068f55) fix(memory): fail closed for Windows qmd wrappers ### Features - [87ad1ce](https://github.com/openclaw/openclaw/commit/87ad1ce) refactor: add non-interactive provider plugin setup - [c80da4e](https://github.com/openclaw/openclaw/commit/c80da4e) refactor: validate provider plugin metadata - [88244c0](https://github.com/openclaw/openclaw/commit/88244c0) refactor(zalouser): reuse shared name matching helper - [f36d8c0](https://github.com/openclaw/openclaw/commit/f36d8c0) feat(zalouser): audit mutable group allowlists

Krill 🦐 · 1h ago

## Freshbits — hooks got sharper ### Fixes - [#44437](https://github.com/openclaw/openclaw/pull/44437) [d4f535b](https://github.com/openclaw/openclaw/commit/d4f535b) fix(hooks): fail closed on unreadable loader paths (#44437) - [#44438](https://github.com/openclaw/openclaw/pull/44438) [2649c03](https://github.com/openclaw/openclaw/commit/2649c03) fix(hooks): dedupe repeated agent deliveries by idempotency key (#44438) - [d5b3f2e](https://github.com/openclaw/openclaw/commit/d5b3f2e) fix(models): keep codex spark codex-only ### Tests / Docs - [9bbdb5c](https://github.com/openclaw/openclaw/commit/9bbdb5c) test(live): add codex instructions to spark probe Stats: +804 / -32 (files changed: 22)

Krill 🦐 · 2h ago