Sourced from form-data's changelog.

v4.0.6 - 2026-06-12

Commits

• [Fix] escape CR, LF, and " in field names and filenames 8dff42c
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape f31d21e
• [Deps] update hasown, mime-types 92ae0eb
• [Dev Deps] update js-randomness-predictor 67b0f65

• 64190db v4.0.6
• 92ae0eb [Deps] update hasown, mime-types
• f31d21e [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape
• 8dff42c [Fix] escape CR, LF, and " in field names and filenames
• 67b0f65 [Dev Deps] update js-randomness-predictor
• See full diff in compare view

Sourced from openclaw's releases.

openclaw 2026.6.11

Highlights

• More capable channel control: Slack relay mode, native Mattermost /oc_queue, and per-DM model overrides make channel operations easier to automate and tune. (#94707, #95546, #95120) Thanks @​sjf-oa, @​amknight, @​xydigit-zt, @​thomaszta, and @​gandalf-at-lerian.
• Richer operator workflows: openclaw agent --message-file and the RAFT CLI wake bridge add practical file-driven and remote wake-up paths. (#93351, #95497) Thanks @​ooiuuii and @​vincentkoc.
• Safer plugin distribution: additional official plugins are externalized cleanly, with bundled plugin icon metadata available to installed clients. (#95683, #95845) Thanks @​vincentkoc and @​Patrick-Erichsen.
• Stronger mobile operations: Android settings detail panels improve configuration visibility and control on mobile. (#95148) Thanks @​Tosko4.
• More reliable agent turns: Codex partial deltas, harness activation, and long-context prompt-cache stability reduce lost progress and inconsistent runs. (#95404, #95652, #95624) Thanks @​agonza1 and @​vincentkoc.

Changes

• Gateway and plugin tooling: channel identity hook context and per-agent usage-cost reporting give integrations and operators more precise routing and accounting. (#91903, #94483) Thanks @​lanzhi-lee, @​vincentkoc, and @​ly-wang19.
• Provider and model coverage: catalog parsing, reasoning controls, provider model resolution, and encrypted reasoning support now handle more live provider variants. (#95283, #95710, #95268, #95744, #95686, #93956) Thanks @​ZengWen-DT, @​vincentkoc, @​Marvinthebored, @​Darren2030, @​daniel-alejandro-t, @​parveshsaini, @​geraint0923, @​fuller-stack-dev, and @​jason-allen-oneal.

Fixes

• Channel delivery: Telegram progress rendering, webhook lifecycle, reaction directives, duplicate mirror writes, queued update draining, and WhatsApp durable reply targets are now more reliable. (#95532, #93002, #95183, #94506, #94977, #95069, #95577, #95007, #95914) Thanks @​amknight, @​snowzlmbot, @​zhangguiping-xydt, @​shadow-enthusiast, @​xialonglee, @​travellingsoldier85, @​obviyus, @​hugenshen, @​Cuttingwater, @​heichaowo, @​LiuwqGit, @​freidrich-goldenflow, @​mcaxtr, and @​vincentkoc.
• WhatsApp and message identity: native quotes, Baileys group reliability, and approval reactions across JID drift now preserve the intended conversation context. (#95483, #94338, #95935) Thanks @​mcaxtr, @​xialonglee, and @​octopuslabs-fl.
• Gateway and session safety: stuck release claims, draining-state reporting, remote probe timeouts, malformed paired access lists, and non-delivery session identity are handled without silent routing loss. (#95299, #94915, #89859, #92178, #95467) Thanks @​mikasa0818, @​kriegerbangerz-ship-it, @​markoub, @​vincentkoc, @​maxschachere, @​mushuiyu886, @​gozzbb2, @​wangmiao0668000666, @​ly-wang19, @​EmilioNicolas, @​yetval, and @​hellocli.
• Agent and fallback behavior: aborted runs stop cleanly, provider response bodies stay bounded, Claude CLI credit failures continue through fallback, and Codex usage-limit responses classify correctly. (#94412, #95218, #95508, #95420, #95418, #95417, #95400) Thanks @​szsip239, @​vincentkoc, @​Alix-007, @​mikasa0818, @​sallyom, @​riazrahaman, and @​jason-allen-oneal.
• Provider and model edge cases: OpenRouter IDs, Ollama discovery and embeddings, Gemini freshness, and model-catalog prefixes now resolve against the right runtime metadata. (#95268, #94811, #93956, #95682, #95744) Thanks @​Darren2030, @​daniel-alejandro-t, @​mushuiyu886, @​jason-allen-oneal, @​Sunjae-k, @​parveshsaini, @​vincentkoc, and @​shakkernerd.
• Configuration and UI guardrails: non-interactive configure fails closed, TLS paths reject empty values, memory artifacts are sanitized, and the UI uses the patched DOMPurify release. (#94238, #94054, #95791, #95691) Thanks @​ruomuxydt, @​NianJiuZst, @​miorbnli, @​vincentkoc, @​SweetSophia, and @​YB0y.
• Cron and delivery validation: no-config delivery checks, thread-aware dedupe, and pending recurring runs retain their intended destinations. (#95754, #95794, #94323) Thanks @​vincentkoc and @​yetval.

Complete contribution record

This audited record covers the complete v2026.6.10..0a4d0daa8cc99e9b2c6bc78c2e67357272a9fd53 history: 308 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

• PR #95406 test(qa): make release scorecard categories explicit. Thanks @​RomneyDa.
• PR #94700 test: fold HTTP API script proof into QA Lab. Thanks @​RomneyDa.
• PR #95499 fix(test): unit-fast flow mocks. Thanks @​RomneyDa.
• PR #95308 fix(ci): filter ClawSweeper comment dispatches before token minting. Thanks @​vincentkoc.
• PR #95532 fix(telegram): materialize rich message line breaks as . Related #95409. Thanks @​amknight and @​snowzlmbot.
• PR #91786 fix(plugins): reconcile managed npm root overrides with managed peer pins. Related #91772. Thanks @​amknight and @​mkdelta221.
• PR #93002 Fix Telegram progress draft cleanup before tool output. Related #90753. Thanks @​zhangguiping-xydt and @​shadow-enthusiast.
• PR #95175 fix: route mobile exec approvals to reviewer device. Thanks @​joshavant.
• PR #94506 fix(telegram): stop clearing registered webhook on channel restart. Related #90254. Thanks @​xialonglee and @​travellingsoldier85.
• PR #95183 fix(telegram): materialize streaming progress placeholders. Related #95004. Thanks @​snowzlmbot and @​obviyus.
• PR #95483 fix(whatsapp): preserve native quote replies. Thanks @​mcaxtr.
• PR #94338 fix(whatsapp): wire missing Baileys retry/cache hooks for group message reliability. Related #7433. Thanks @​xialonglee and @​mcaxtr and @​octopuslabs-fl.
• PR #94707 feat(slack): add relay mode for incoming messages. Thanks @​sjf-oa.
• PR #94977 fix(telegram): honor outbound reaction directives. Related #71140. Thanks @​hugenshen and @​Cuttingwater.
• PR #95069 fix(telegram): skip mirror write when primary reply already exists (#94930). Thanks @​heichaowo.
• PR #95550 Preserve inherited channel account policies during migration. Thanks @​amknight.
• PR #95390 fix #95378: openclaw/openclaw#95378. Thanks @​mikasa0818 and @​obviyus and @​MaiDuy708.
• PR #93143 fix(imessage): keep split-send coalescing opt-in. Thanks @​omarshahine.
• PR #95008 fix(claude-cli): also disable native background Bash and Monitor in --print runs. Thanks @​anagnorisis2peripeteia.

... (truncated)

• e085fa1 ci(release): stabilize anthropic live smoke selection
• cf64cf7 test(qa): make memory channel scenario wait for final answer
• 848c4e6 test(qa): accept crabline multi-channel capabilities
• d377c0f fix(release): use workspace host deps in release lockfile
• 9b703d0 test(qa): accept async image fixture coverage
• 5f4fa97 test(codex): harden run-attempt temp cleanup
• 65e4b0a chore(release): prepare 2026.6.11
• 4e8ddf7 ci: bump ClawHub package publish workflow (#97909)
• 9c154ff ci(release): restore plugin npm token env
• 866fc34 ci(release): restore trusted plugin npm publishing
• Additional commits viewable in compare view

This version adds preinstall, postinstall scripts and modifies prepare script that run during installation. Review the package contents before updating.

• cf21338 7.5.16
• 21a8220 do not apply PAX header fields to meta entries
• 52632cf update project deps
• 302f51f fix inconsequential typo in PENDINGLINKS symbol name
• 55dbb99 remove some uses of mutate-fs
• 87cc309 7.5.15
• 7aef486 fix: regression in pending links detection
• 6244eb3 7.5.14
• 9704d8c stricter protection against hardlinks preempting their targets
• 700734f update workflows and deps
• See full diff in compare view

Sourced from undici's releases.

v8.5.0

⚠️ Security Release

This release line addresses 8 security advisories. Most are fixed in v8.5.0; the SOCKS5 pool-reuse issue was fixed earlier in v8.2.0.

Action required: Upgrade to undici 8.5.0 or later.

npm install undici@^8.5.0

Summary

Advisory	CVE	Severity (CVSS)	Fixed in	Fix commit
GHSA-vxpw-j846-p89q	CVE-2026-12151	High (7.5)	8.5.0	32dbf0b3
GHSA-38rv-x7px-6hhq	CVE-2026-9675	High (7.5)	8.5.0	b4c287b3
GHSA-vmh5-mc38-953g	CVE-2026-9697	High (7.4)	8.5.0	42d49559
GHSA-hm92-r4w5-c3mj	CVE-2026-6734	High (7.5)	8.2.0	a516f870
GHSA-pr7r-676h-xcf6	CVE-2026-9678	Moderate (5.9)	8.5.0	cb105d7c
GHSA-p88m-4jfj-68fv	CVE-2026-9679	Moderate (5.9)	8.5.0	5655ea43
GHSA-g8m3-5g58-fq7m	CVE-2026-11525	Low (3.7)	8.5.0	5655ea43
GHSA-35p6-xmwp-9g52	CVE-2026-6733	Low (3.7)	8.5.0	6ea54ef8

---

High severity

WebSocket DoS via fragment count bypass — CVE-2026-12151

GHSA-vxpw-j846-p89q · CWE-400, CWE-770 Fix: 32dbf0b3 websocket: limit the number of fragments in a message (also c5ed7875 handle empty fragments and stream limits)

A malicious WebSocket server can stream a large number of small or empty continuation frames. Undici enforced a limit on cumulative payload size but did not limit the number of fragments per message, leading to unbounded memory growth and denial of service.

• Affected: applications using new WebSocket(...) or WebSocketStream against untrusted endpoints.
• Workaround: none — upgrade is required.

WebSocket DoS via cumulative fragment bypass — CVE-2026-9675

GHSA-38rv-x7px-6hhq · CWE-400, CWE-770 Fix: b4c287b3 fix(websocket): enforce max payload size across fragments

Undici validated the size of individual frames but did not track cumulative size across a fragmented message. An attacker could send many small fragments that each pass per-frame validation but collectively exceed the configured limit, causing memory exhaustion. This is a regression introduced in 8.1.0 (the

... (truncated)

• a0806e1 Bumped v8.5.0 (#5429)
• 8a0392c test: detect available python command in wpt runner (#5427)
• f4045b9 ci: increase Node.js workflow timeout (#5426)
• 363e44f chore: removed repro-h2-pipelining-default.mjs and lint (#5420)
• c5ed787 websocket: handle empty fragments and stream limits
• e114e77 align EventSource with spec (#5418)
• 6df53c5 fix: preserve h2 queue on out-of-order completion (#5410)
• 32dbf0b websocket: limit the number of fragments in a message
• 0d6ecc5 add bodymixin.textStream() (#5416)
• 42d4955 fix: honor requestTls when proxy is SOCKS5
• Additional commits viewable in compare view

Sourced from ws's releases.

8.21.0

Features

• Introduced the maxBufferedChunks and maxFragments options (2b2abd45).

Bug fixes

• Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).

A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a ws server or client due to OOM.

import { WebSocket, WebSocketServer } from 'ws';
const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(ws://localhost:${port});
ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(client close - code: ${code} reason: ${reason.toString()});
});
});
wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(server close - code: ${code} reason: ${reason.toString()});
});
});

The vulnerability was responsibly disclosed and fixed by Nadav Magier.

In vulnerable versions, the issue can be mitigated by lowering the value of the maxPayload option if possible.

8.20.1

... (truncated)

• bca91ad [dist] 8.21.0
• 2b2abd4 [security] Limit retained message parts
• 78eabe2 [security] Add latest vulnerability to SECURITY.md
• 5d9b316 [dist] 8.20.1
• c0327ec [security] Fix uninitialized memory disclosure in websocket.close()
• ce2a3d6 [ci] Test on node 26
• 58e45b8 [ci] Do not test on node 25
• 5f26c24 [ci] Run the lint step on node 24
• See full diff in compare view

Sourced from form-data's changelog.

v4.0.6 - 2026-06-12

Commits

• [Fix] escape CR, LF, and " in field names and filenames 8dff42c
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape f31d21e
• [Deps] update hasown, mime-types 92ae0eb
• [Dev Deps] update js-randomness-predictor 67b0f65

• 64190db v4.0.6
• 92ae0eb [Deps] update hasown, mime-types
• f31d21e [Dev Deps] update @ljharb/eslint-config, auto-changelog, tape
• 8dff42c [Fix] escape CR, LF, and " in field names and filenames
• 67b0f65 [Dev Deps] update js-randomness-predictor
• See full diff in compare view

Sourced from openclaw's releases.

openclaw 2026.6.11

Highlights

• More capable channel control: Slack relay mode, native Mattermost /oc_queue, and per-DM model overrides make channel operations easier to automate and tune. (#94707, #95546, #95120) Thanks @​sjf-oa, @​amknight, @​xydigit-zt, @​thomaszta, and @​gandalf-at-lerian.
• Richer operator workflows: openclaw agent --message-file and the RAFT CLI wake bridge add practical file-driven and remote wake-up paths. (#93351, #95497) Thanks @​ooiuuii and @​vincentkoc.
• Safer plugin distribution: additional official plugins are externalized cleanly, with bundled plugin icon metadata available to installed clients. (#95683, #95845) Thanks @​vincentkoc and @​Patrick-Erichsen.
• Stronger mobile operations: Android settings detail panels improve configuration visibility and control on mobile. (#95148) Thanks @​Tosko4.
• More reliable agent turns: Codex partial deltas, harness activation, and long-context prompt-cache stability reduce lost progress and inconsistent runs. (#95404, #95652, #95624) Thanks @​agonza1 and @​vincentkoc.

Changes

• Gateway and plugin tooling: channel identity hook context and per-agent usage-cost reporting give integrations and operators more precise routing and accounting. (#91903, #94483) Thanks @​lanzhi-lee, @​vincentkoc, and @​ly-wang19.
• Provider and model coverage: catalog parsing, reasoning controls, provider model resolution, and encrypted reasoning support now handle more live provider variants. (#95283, #95710, #95268, #95744, #95686, #93956) Thanks @​ZengWen-DT, @​vincentkoc, @​Marvinthebored, @​Darren2030, @​daniel-alejandro-t, @​parveshsaini, @​geraint0923, @​fuller-stack-dev, and @​jason-allen-oneal.

Fixes

• Channel delivery: Telegram progress rendering, webhook lifecycle, reaction directives, duplicate mirror writes, queued update draining, and WhatsApp durable reply targets are now more reliable. (#95532, #93002, #95183, #94506, #94977, #95069, #95577, #95007, #95914) Thanks @​amknight, @​snowzlmbot, @​zhangguiping-xydt, @​shadow-enthusiast, @​xialonglee, @​travellingsoldier85, @​obviyus, @​hugenshen, @​Cuttingwater, @​heichaowo, @​LiuwqGit, @​freidrich-goldenflow, @​mcaxtr, and @​vincentkoc.
• WhatsApp and message identity: native quotes, Baileys group reliability, and approval reactions across JID drift now preserve the intended conversation context. (#95483, #94338, #95935) Thanks @​mcaxtr, @​xialonglee, and @​octopuslabs-fl.
• Gateway and session safety: stuck release claims, draining-state reporting, remote probe timeouts, malformed paired access lists, and non-delivery session identity are handled without silent routing loss. (#95299, #94915, #89859, #92178, #95467) Thanks @​mikasa0818, @​kriegerbangerz-ship-it, @​markoub, @​vincentkoc, @​maxschachere, @​mushuiyu886, @​gozzbb2, @​wangmiao0668000666, @​ly-wang19, @​EmilioNicolas, @​yetval, and @​hellocli.
• Agent and fallback behavior: aborted runs stop cleanly, provider response bodies stay bounded, Claude CLI credit failures continue through fallback, and Codex usage-limit responses classify correctly. (#94412, #95218, #95508, #95420, #95418, #95417, #95400) Thanks @​szsip239, @​vincentkoc, @​Alix-007, @​mikasa0818, @​sallyom, @​riazrahaman, and @​jason-allen-oneal.
• Provider and model edge cases: OpenRouter IDs, Ollama discovery and embeddings, Gemini freshness, and model-catalog prefixes now resolve against the right runtime metadata. (#95268, #94811, #93956, #95682, #95744) Thanks @​Darren2030, @​daniel-alejandro-t, @​mushuiyu886, @​jason-allen-oneal, @​Sunjae-k, @​parveshsaini, @​vincentkoc, and @​shakkernerd.
• Configuration and UI guardrails: non-interactive configure fails closed, TLS paths reject empty values, memory artifacts are sanitized, and the UI uses the patched DOMPurify release. (#94238, #94054, #95791, #95691) Thanks @​ruomuxydt, @​NianJiuZst, @​miorbnli, @​vincentkoc, @​SweetSophia, and @​YB0y.
• Cron and delivery validation: no-config delivery checks, thread-aware dedupe, and pending recurring runs retain their intended destinations. (#95754, #95794, #94323) Thanks @​vincentkoc and @​yetval.

Complete contribution record

This audited record covers the complete v2026.6.10..0a4d0daa8cc99e9b2c6bc78c2e67357272a9fd53 history: 308 merged PRs. The generation manifest also supplies direct commits as editorial input; the grouped notes above prioritize user impact.

Pull requests

• PR #95406 test(qa): make release scorecard categories explicit. Thanks @​RomneyDa.
• PR #94700 test: fold HTTP API script proof into QA Lab. Thanks @​RomneyDa.
• PR #95499 fix(test): unit-fast flow mocks. Thanks @​RomneyDa.
• PR #95308 fix(ci): filter ClawSweeper comment dispatches before token minting. Thanks @​vincentkoc.
• PR #95532 fix(telegram): materialize rich message line breaks as . Related #95409. Thanks @​amknight and @​snowzlmbot.
• PR #91786 fix(plugins): reconcile managed npm root overrides with managed peer pins. Related #91772. Thanks @​amknight and @​mkdelta221.
• PR #93002 Fix Telegram progress draft cleanup before tool output. Related #90753. Thanks @​zhangguiping-xydt and @​shadow-enthusiast.
• PR #95175 fix: route mobile exec approvals to reviewer device. Thanks @​joshavant.
• PR #94506 fix(telegram): stop clearing registered webhook on channel restart. Related #90254. Thanks @​xialonglee and @​travellingsoldier85.
• PR #95183 fix(telegram): materialize streaming progress placeholders. Related #95004. Thanks @​snowzlmbot and @​obviyus.
• PR #95483 fix(whatsapp): preserve native quote replies. Thanks @​mcaxtr.
• PR #94338 fix(whatsapp): wire missing Baileys retry/cache hooks for group message reliability. Related #7433. Thanks @​xialonglee and @​mcaxtr and @​octopuslabs-fl.
• PR #94707 feat(slack): add relay mode for incoming messages. Thanks @​sjf-oa.
• PR #94977 fix(telegram): honor outbound reaction directives. Related #71140. Thanks @​hugenshen and @​Cuttingwater.
• PR #95069 fix(telegram): skip mirror write when primary reply already exists (#94930). Thanks @​heichaowo.
• PR #95550 Preserve inherited channel account policies during migration. Thanks @​amknight.
• PR #95390 fix #95378: openclaw/openclaw#95378. Thanks @​mikasa0818 and @​obviyus and @​MaiDuy708.
• PR #93143 fix(imessage): keep split-send coalescing opt-in. Thanks @​omarshahine.
• PR #95008 fix(claude-cli): also disable native background Bash and Monitor in --print runs. Thanks @​anagnorisis2peripeteia.

... (truncated)

• e085fa1 ci(release): stabilize anthropic live smoke selection
• cf64cf7 test(qa): make memory channel scenario wait for final answer
• 848c4e6 test(qa): accept crabline multi-channel capabilities
• d377c0f fix(release): use workspace host deps in release lockfile
• 9b703d0 test(qa): accept async image fixture coverage
• 5f4fa97 test(codex): harden run-attempt temp cleanup
• 65e4b0a chore(release): prepare 2026.6.11
• 4e8ddf7 ci: bump ClawHub package publish workflow (#97909)
• 9c154ff ci(release): restore plugin npm token env
• 866fc34 ci(release): restore trusted plugin npm publishing
• Additional commits viewable in compare view

This version adds preinstall, postinstall scripts and modifies prepare script that run during installation. Review the package contents before updating.

• cf21338 7.5.16
• 21a8220 do not apply PAX header fields to meta entries
• 52632cf update project deps
• 302f51f fix inconsequential typo in PENDINGLINKS symbol name
• 55dbb99 remove some uses of mutate-fs
• 87cc309 7.5.15
• 7aef486 fix: regression in pending links detection
• 6244eb3 7.5.14
• 9704d8c stricter protection against hardlinks preempting their targets
• 700734f update workflows and deps
• See full diff in compare view

Sourced from undici's releases.

v8.5.0

⚠️ Security Release

This release line addresses 8 security advisories. Most are fixed in v8.5.0; the SOCKS5 pool-reuse issue was fixed earlier in v8.2.0.

Action required: Upgrade to undici 8.5.0 or later.

npm install undici@^8.5.0

Summary

Advisory	CVE	Severity (CVSS)	Fixed in	Fix commit
GHSA-vxpw-j846-p89q	CVE-2026-12151	High (7.5)	8.5.0	32dbf0b3
GHSA-38rv-x7px-6hhq	CVE-2026-9675	High (7.5)	8.5.0	b4c287b3
GHSA-vmh5-mc38... Description has been truncated