OpenClaw 3.31 Breaking Changes Dissected: Exec Hardening, Unified Task Ledger, and Six Upgrades That Will Bite You
Release
OpenClaw v2026.3.31 Full Changelog: Six Breaking Changes and 80+ Individual Changes
The raw release notes are the source of truth here and worth reading directly before touching your install. Six breaking changes across gateway auth, node pairing, plugin installs, and exec routing means this is not a routine update.
Analysis
The most useful operator-level breakdown of 3.31, including the two-layer exec approval problem that required patching distributed JavaScript to make ask:off actually work. If you run OpenClaw on bare metal with shell-heavy agents, this post will save you hours of debugging.
Task Flows in 4.2 now survive restarts, support sticky cancel propagation to child tasks, and expose a new api.runtime.taskFlow seam for plugins. The before_agent_reply hook is the quietly important addition here since it lets plugins short-circuit the LLM entirely for routine messages, which cuts token costs on high-traffic channels.
News
OpenClaw 3.31 to 4.2 Official Blog: Plugin Bouncer, Task Brain, and the Security Siege Context
The official blog frames 3.31 through 4.2 as a direct response to Cisco finding a top community skill was silently exfiltrating data and the ClawHavoc campaign planting 800+ malicious skills on ClawHub. That context explains why the install scanner now fails closed by default.
Guide
OpenClaw 3.31 Upgrade Guide: SQLite Task Ledger, QQ Bot, and Native Codex Search Walkthrough
Practical upgrade guide covering the new unified SQLite task ledger, the openclaw flows CLI surface, and how native Codex search suppresses duplicate managed-tool retrieval layers. Good reference for operators coming from older March builds who want a checklist before upgrading.
Stay Ahead
Delivered each morning.