Pulled from GitHub Releases

Changelog

Every release of netclaw-dev/netclaw. Pick a version from the sidebar — this page rebuilds whenever a new release is published.

v0.26.0-beta.1

Pre-release

Netclaw 0.26.0-beta.1

0.26.0-beta.1 (2026-08-09)

Features

  • MCP OAuth surfaced at add time — netclaw mcp auth now runs before permission prompts when adding a server (#1773)
  • Mention-required thread replies — Slack, Discord, and Mattermost channels can gate thread replies on an @-mention, with per-channel control (#1783)
  • Mention-triggered thread history backfill — Thread history is backfilled when a mention arrives on mention-gated channels (#1798)
  • File reads reach as far as the shell — File-read tool permission scope now matches the shell tool's reach (#1770)
  • TUI state preserved across navigation — Provider and model pages keep their state when navigating or refreshing (#1804)
  • Background job and one-shot reminder cleanup — Completed background job definitions and successful one-shot reminders are pruned automatically (#1821)

Bug Fixes

  • Approval prompts: already-granted candidates skipped — Shell candidates with existing grants no longer re-trigger approval (#1830)
  • Approval: safe shell stages compose with grants — Pipelines of safe stages now compose correctly with one-time grants (#1828)
  • Approval: background job control bypasses prompts — check_background_job and cancellation no longer demand approval (#1817)
  • Reminders: failed one-shot executions retained — Failed one-shot reminders retry instead of being dropped, with execution history recorded (#1812)
  • Approval: phantom directory scopes removed — Stored approval patterns no longer fabricate fake directory scopes (#1799)
  • Approval: quoted free-text operands dropped from stored patterns — Quoted free-text arguments are no longer baked into stored approval patterns (#1815)
  • Approval: trailing-slash globs scoped to parent — dir/-style globs are scoped to their parent directory, closing a scope-expansion gap (#1785)
  • Approval: immediate-retry bypass seeded per approved scope — Every approved scope now gets the immediate-retry bypass (#1800)
  • Sessions: tool-batch wedge fixed — Unanswered tool calls are closed out before the error reply is sent (#1796)
  • TUI: stale provider/model state refreshed — Provider and model manager pages no longer show stale data (#1827)
  • Security: ToolAccessPolicy fail-closed — Deny-list and protected-path policies are now required; a policy missing them can no longer silently allow blocked commands (#1787)

Dependency Updates

  • Bump Termina — 0.16.0 → 0.16.1
  • Bump SkiaSharp.NativeAssets.Linux.NoDependencies — 4.151.0 → 4.151.1
  • Bump Verify.XunitV3 — 31.20.0 → 31.28.0