What changed
OpenClaw 2026.6.35 is the final June 2026 Extended Stable release. It bounds untrusted response bodies, rejects oversized inputs before expensive work, improves safe transport recovery and backports fixes for cancellation, retries, partial sends, process streams, bundled plugins and malformed tool or workspace payloads.
Why it matters
Long-term-support operators gain bounded-input and recovery fixes without adopting the current feature line. The changes target paths where hostile payloads, interrupted transport or repeated retries can cause memory pressure, duplicate work or inconsistent agent state.
What to do
Back up state and canary an oversized response, oversized request, timeout, cancellation, partial send, retry, malformed plugin payload and failed process stream. Compare logs and resource ceilings, then prove downgrade or restore before production rollout.
Caveat
The security and reliability claims are project-reported and have no published independent audit. This release is relevant only to deployments intentionally remaining on the June LTS line; newer feature-line users should not downgrade to obtain it.