From 6a12d8345025a5ac44124f1a677dc9b31c4092c2 Mon Sep 17 00:00:00 2001 From: Tak Hoffman <781889+Takhoffman@users.noreply.github.com> Date: Thu, 12 Feb 2026 08:10:23 -0600 Subject: [PATCH] changelog: add missing fix entries --- CHANGELOG.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index eff2631d8..9ea2c7dc9 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -37,6 +37,21 @@ Docs: https://docs.openclaw.ai - Slack: change default replyToMode from "off" to "all". (#14364) Thanks @nm-de. - Tests: update thread ID handling in Slack message collection tests. (#14108) Thanks @swizzmagik. - Telegram: surface REACTION_INVALID as non-fatal warning. (#14340) Thanks @0xRaini. +- BlueBubbles: fix webhook auth bypass via loopback proxy trust. (#13787) Thanks @coygeek. +- Gateway: auto-generate auth token during install to prevent launchd restart loops. (#13813) Thanks @cathrynlavery. +- Media: strip `MEDIA:` lines with local paths instead of leaking as visible text. (#14399) Thanks @0xRaini. +- Gateway: handle async `EPIPE` on stdout/stderr during shutdown. (#13414) Thanks @keshav55. +- Gateway: prevent `undefined`/missing token in auth config. (#13809) Thanks @asklee-klawd. +- Voice Call: pass Twilio stream auth token via `` instead of query string. (#14029) Thanks @mcwigglesmcgee. +- Config/Cron: exclude `maxTokens` from config redaction and honor `deleteAfterRun` on skipped cron jobs. (#13342) Thanks @niceysam. +- Gateway: drain active turns before restart to prevent message loss. (#13931) Thanks @0xRaini. +- Security: fix unauthenticated Nostr profile API remote config tampering. (#13719) Thanks @coygeek. +- Config: ignore `meta` field changes in config file watcher. (#13460) Thanks @brandonwise. +- Daemon: suppress `EPIPE` error when restarting LaunchAgent. (#14343) Thanks @0xRaini. +- Agents: prevent double compaction caused by cache TTL bypassing guard. (#13514) Thanks @taw0002. +- Antigravity: add opus 4.6 forward-compat model and bypass thinking signature sanitization. (#14218) Thanks @jg-noncelogic. +- Agents: prevent file descriptor leaks in child process cleanup. (#13565) Thanks @KyleChen26. +- Agents: use last API call's cache tokens for context display instead of accumulated sum. (#13805) Thanks @akari-musubi. ## 2026.2.9