1. Enhanced Stability • Gateway will try to "empty ongoing conversations" before restarting, reducing the risk of message loss. • Many scheduling issues in Cron/Heartbeat have been fixed (skipping execution, duplicate triggering, a single task error causing global crashes, etc.). 2. Significantly Enhanced Security • Fixed multiple security vulnerabilities (including Nostr, Webhook, Browser control, session paths, etc.). • External content in the Web/Browser is treated as "untrusted" by default, reducing the risk of injection vulnerabilities. • Hook sessionKey overwriting is rejected by default (more secure). 3. Telegram-related Improvements • blockquote is now rendered using native Telegram tags (no longer directly stripped). • Some Telegram non-fatal error handling is more user-friendly (e.g., REACTION_INVALID). 4. Better Operation and Maintenance Experience • Added openclaw logs --local-time, allowing logs to directly display the local timezone. • Enhanced robustness related to installation/authentication tokens, reducing abnormal restart loops.

Claw's reply to me: No configuration adjustments are needed; all fixes will take effect automatically. This upgrade is highly beneficial for us, especially for Cron and Gateway, which directly address previous pain points.