OpenClaw 2026.9.9 adds newer model support while repairing failed updates, session archives, scheduled jobs and plugin recovery. It also adds paired-computer input policies, preserves secret protections during rotation, rejects missing A2A credentials and blocks cross-origin MCP credential redirects.
Why it matters: The release moves several high-risk failure paths from ambiguous recovery or placeholder behavior to explicit checks. It also documents cases where interrupted one-shot jobs can run twice and where prior plaintext secrets are not automatically removed.
LiteLLM's signed 1.103.0-rc.1 builds on the earlier development releases with forced closure of live MCP sessions and stored credential revocation, gateway client allowlisting, JWT key-mapping cache eviction after identity or key deletion, login rate limiting, stricter config ownership, shared rate-limit enforcement, fallback guardrail and budget preservation, and a 429 response when all deployment concurrency slots are occupied.
Why it matters: The release candidate materially improves revocation, cache invalidation, configuration ownership and overload behavior at an AI gateway authority boundary. It also expands a very large prerelease surface, so operators need targeted proof that the specific…