OpenClaw v2026.11.2 keeps secrets and conversations out of its logs

Your diagnostic logs stop collecting private data. Configuration secrets, conversation content, tool errors and channel payloads now stay out of them, and a secret you set with the config set command stays redacted even when options come before the value.

Slide text

01 02 03 04 Privacy

openclaw/openclaw · CHANGELOG/2026.11.2.md

OpenClaw v2026.11.2 keeps your secrets and conversations out of its logs

Config secrets Conversation content Tool errors Channel payloads

Chrome MCP navigation now follows a strict redirect policy. A workspace's environment roots can no longer slip local tools onto your PATH. And the Gateway gives back MCP grants once a warm CLI turn ends.

Part two: messages that go out from the right account.

When a message is retried or sent on a schedule, it keeps the sender and account it started with. Scheduled announcements without an account used to aim at a Discord account called default that didn't exist.

WhatsApp direct messages now retry while the identity lookup is down. In Microsoft Teams, allowlisted senders and channels survive a config reload, and one named account on the default path no longer keeps every other account from starting.

Part three: a Gateway that keeps answering.

With diagnostic content capture on, large sessions could stall the Gateway after every model call. Capture now caps payload sizes and drops oversized images, so diagnostics carry less detail. Prompts and history are untouched.

Reloading a plugin no longer blocks the Gateway while it cleans up. A Telegram table reply with a long zero-width cell no longer stalls it. And shutting down now cancels any channel that is still starting.

Part four: updates and the apps.

An update no longer breaks a plugin you pointed at its own executable. Environment references in plugin settings also survive the settings migration.

An interrupted update no longer hangs when the Gateway is healthy. Update repair stops locking itself out. And on macOS, Gateway repair now works when access to the Trash is denied.

On iOS, the chat screen used to ignore every tap while it reconnected to an unreachable Gateway. Android chat now keeps its state at startup. And Apple Foundation Models and computer-use recording recover after a failed setup.

The browser extension installs again under Ubuntu's default file permissions. On Windows, OpenClaw matches state directories regardless of letter case. And PostgreSQL agent stores keep their database ownership when reserving worktree capacity or logging failed sign-ins.

When the OpenCode Go endpoint goes down, its models stay available. A model with reasoning turned off now stays off, and provider quotas keep their reset times and weekly periods.

The Android app stays on its August build, and plugin publishing to ClawHub is still pending. Every change is in the release changelog. If you run content capture or Microsoft Teams, I'd update today.