OpenClaw Releases Latest Version with Enhanced Features and Security

OpenClaw has launched version v2026.3.2 of its open-source AI Agent framework on March 3, introducing several new features, security enhancements, and over 150 bug fixes. According to BlockBeats, the update involved contributions from 93 developers. Key features include a native PDF analysis tool that supports Anthropic and Google as PDF processing backends, configurable extraction fallback strategies, and page/size limits. The SecretRef credential reference mechanism now extends to 64 targets, covering runtime collectors and the entire planning/execution/audit process, with unresolved references triggering immediate errors on active interfaces. Additionally, a new STT (speech-to-text) API allows audio file transcription through configured service providers, and Telegram message streaming defaults to "partial" mode for real-time previews. The provider directory now includes the MiniMax-M2.5-highspeed model. The update introduces four disruptive changes: the default tool configuration for new installations shifts from a broad programming toolset to a "messaging" configuration; ACP scheduling is enabled by default; the plugin HTTP route registration API changes from registerHttpHandler to registerHttpRoute, requiring explicit authentication declaration; and Zalo Personal no longer relies on external CLI binaries, opting for a pure JS runtime instead. Security improvements address issues such as Gateway loopback WebSocket hardening, plugin route registration duplication prevention, pre-authentication parsing for webhooks, and protection against symbolic link escapes in skill workspaces.