openclaw v2026.6.5 release notes: what's new & changelog

openclaw v2026.6.5 delivers a new bundled web-search provider, enhanced transparency for iOS voice interactions, and critical stability improvements for MCP tool results and Anthropic extended-thinking sessions.

Key Changes

New Parallel Web-Search Provider

Parallel is now a bundled web_search provider designed for agentic search, returning LLM-optimized dense excerpts. It is configured via the PARALLEL_API_KEY environment variable or plugins.entries.parallel.config.webSearch.apiKey config. The provider includes guarded endpoint handling, cache-safe session IDs, and a dedicated onboarding picker.

iOS Talk Transparency and Fallback

Realtime voice interactions on iOS now clearly distinguish between the configured mode and the active runtime mode. When gateway realtime fails, the app surfaces a visible fallback banner and a detailed issue sheet, explicitly notifying users when the system has fallen back to native iOS speech recognition and TTS. This prevents silent failures and provides diagnostics for credential or provider issues.

MCP and Agent Stability

• Tool Result Coercion: MCP tool results now coerce resource_link, resource, and audio blocks into text at the materialize boundary. This prevents Anthropic 400 errors and poisoned session history caused by malformed image blocks.
• Anthropic Recovery: Extended-thinking sessions now recover after prompt-cache expiry or Gateway restarts. This is achieved by deferring stream start events until message_start, allowing pre-generation signature errors to trigger existing recovery retries.
• Lease Management: MCP lease release no longer refreshes lastUsedAt, preventing idle runtimes from accumulating linearly over gateway uptime.

Channel and Integration Updates

• QQBot: Now strips model reasoning and thinking scaffolding (e.g., <thinking> tags) before delivery to prevent raw internal model narration from leaking into channel replies.
• Matrix: Added voice-message preflight and thread-aware read/reply behavior, including pagination for Matrix relations.
• Feishu: Implemented bounded retries (max 2, linear backoff) for send-time rate-limit errors (HTTP 429 and codes 11232, 230020).
• WhatsApp: Fixed a bug where captured replies were bound to stale controllers after a restart; they now route through the successor controller. Additionally, connection startup waits are now bounded by the configured socket timeout.
• iMessage: Decoupled send timeouts (now 150s) from probe timeouts to handle intermittent private-API bridge stalls on macOS 26.

Infrastructure and Security

• State Storage: Auth profiles, Matrix crypto sidecars, and Memory Core dreaming state have been migrated from JSON files to SQLite-backed storage for improved durability.
• Gateway Security: Restored sender-owner gating for owner-only core tools (gateway, cron, nodes) via POST /tools/invoke to prevent non-owner identity-bearing callers from accessing server-credential wrappers.
• Docker: Fully qualified base image references (docker.io/) to prevent hangs on Podman hosts with short-name-mode = "enforcing".

Impact

Users will experience more reliable agentic web searches with the addition of Parallel and significantly better visibility into voice failures on iOS. The migration to SQLite for auth and plugin state increases system durability and reduces the risk of state corruption. Security is tightened around Gateway tool invocation, ensuring that sensitive core tools are restricted to owners and admins.

FAQ

What's new in v2026.6.5?

This release adds Parallel as a bundled web-search provider, introduces a fallback banner and transparency for iOS Talk, and includes stability fixes for MCP tool results, Anthropic extended-thinking, and various channel integrations (QQBot, Matrix, Feishu, WhatsApp, iMessage).

Are there any breaking changes?

No breaking changes are reported; however, non-owner identity-bearing callers will now find owner-only core tools (gateway, cron, nodes) unavailable on Gateway tool invocation surfaces.

How do I upgrade?

Upgrade instructions are not explicitly provided in the source, but the release includes automatic migrations for legacy cron JSON stores and auth profiles into SQLite during the doctor config preflight.