build(deps): bump the agent-protocol-clients group with 2 updates

[dependabot]

Bumps the agent-protocol-clients group with 2 updates: @openai/codex-sdk and @openclaw/gateway-client.

Updates @openai/codex-sdk from 0.153.2 to 0.154.0

Commits

• See full diff in compare view

Updates @openclaw/gateway-client from 2026.9.1 to 2026.9.3

Release notes

Sourced from @​openclaw/gateway-client's releases.

openclaw 2026.9.3

2026.9.3

Highlights

• Safer updates: rehearse core and plugin changes in isolated candidate state before activation, support eligible 2026.9.2 migrations, and recover abandoned update records without stopping a healthy matching Gateway. Related #136997. (#138839, #141109, #141175, #141562)
• Performance: preserve warm prompt caches, reduce unnecessary work during cold session updates and memory search, and reuse worker builds between sessions. Related #140681. (#140449, #140730, #140799, #140840, #141141) Thanks @​justinkirklin-gif, @​NianJiuZst, and @​obviyus.
• Skill Workshop: keep skills in one persistent agent-owned collection across workspaces, compare complete skill instructions, and retire missing-draft suggestions safely through Doctor. Related #135291. (#135528, #139248, #140300, #141009) Thanks @​khaisis and @​obviyus.
• Browser tabs, live and native: watch agent pages repaint and open external links in native Mac tabs that remain with their window across chat switches. (#140988, #141031)
• Your provider accounts, together: manage connected accounts and supported account priority directly in Models settings. (#132451) Thanks @​jesse-merhi.
• Share selected conversations: explicitly publish a revocable read-only view of a session’s existing and future conversation text, accessible to anyone with its public link. (#139489)
• A searchable meeting library: browse saved notes, search full transcripts, download complete Markdown or JSONL archives, and manage capture sources from the Control UI. (#139875, #140084)
• Optional team activity reports: install and enable Team Reports to browse authenticated GitHub activity and explicitly configured Discord discussion, with stored history and optional model summaries. (#139850, #141327)

Changes

• Breaking — Node runtime: require Node 24.16.0 or newer on 24.x, or Node 26.1.0 or newer; Node 26 is recommended. Upgrade Node before OpenClaw to prevent SQLite text truncation: Node 22, Node 25, and earlier 24.x/26.x builds are no longer supported. Node-based CLI/Gateway installs on macOS 11–13.4 or official Linux ARMv7 provisioning need a supported host; see Node requirements. (#140672)
• Breaking — execution-policy SDK: move the retired exec-mode and comparator helpers from infra-runtime to execPolicy on openclaw/plugin-sdk/agent-harness-runtime; use resolveExecModePolicy and select the returned fields needed by the caller. See runtime utility migration.
• Breaking — approval SDK: import approval account-resolution helpers from approval-native-runtime, adapt session filtering to the full matchesApprovalRequestFilters contract, and replace the retired generic forwarding evaluator with native channel route gates and shared predicates rather than assuming a drop-in alias. See SDK migration.
• Breaking — SDK aliases: replace channel-inbound.buildChannelTurnMediaPayload with buildChannelInboundMediaPayload; infer the retained abortAndDrainAgentHarnessRun callable’s result instead of importing the removed AbortAndDrainAgentHarnessRunResult named type. The callable and its result data remain available. See SDK migration.
• Breaking — search result callbacks: read bounded Find/Grep text from details.content instead of details.truncation.content; the outer tool-message content remains unchanged. (#140008) Thanks @​ruel225.
• Breaking — directory result callbacks: use LsToolDetails.content and optional nextAfter in place of the retired truncation and entryLimitReached fields, and pass nextAfter as after to continue listing. See structured filesystem results.
• MCP prompt adapters: return the typed MCP GetPromptResult shape from SessionMcpRuntime.getPrompt, preserving its messages and image content; validate external responses instead of returning arbitrary unknown values. (#141421)
• Breaking — agent-owned Workshop skills: replace workspace ownership with one writable Workshop collection per agent and retire skills.workshop.allowSymlinkTargetWrites; startup and openclaw doctor --fix migrate proven legacy skills, while ambiguous ownership remains in place for review. (#135528) Thanks @​obviyus.
• Bounded update repair: supported candidate-validation failures can enter a bounded repair phase using configured inference in disposable rehearsal state; activate only after independent validation, and retain failure or rollback outcomes when repair cannot recover. Changes requiring configuration edits are reported for operator repair. (#139495)
• Update failure reports: submit a report from the failed-update action only after explicit consent, using the recorded update attempt and current owner. (#139704) Thanks @​fuller-stack-dev.
• Active sessions: show running and queued permitted sessions in Live activity on entry and reconnect, with a visible limit notice and connection status instead of claiming disconnected sessions are idle. (#141045) Thanks @​shakkernerd.
• Code Mode composition: retain the running JavaScript environment across fast tool replies, add optional TypeScript checks against available tools, and report original-source error locations with bounded console output; explicit yields and resource limits still checkpoint execution. Related #141261. (#141265) Thanks @​Takhoffman.
• Code Mode text encoding: provide sandboxed TextEncoder and TextDecoder instances that survive wait/resume for local text and byte transformations. (#140812) Thanks @​Takhoffman.
• Private-session link previews: copy social-preview links that show a generic OpenClaw card without reading private session content; opening the conversation still requires its normal authentication. (#139250)
• Public session transcripts: session owners and Gateway admins can explicitly publish existing and future conversation text to anyone with a public URL and revoke access later; the read-only view omits tools, reasoning, files, images, and executable widgets. Review the text before enabling access; private-session preview links remain separate. (#139489)
• Repository-backed cloud sessions: create sessions from a repository URL and ref with checkout, setup, and recoverable checkpoints owned by the cloud node; materialize a Gateway worktree only when explicitly moving there. (#138900)
• Persistent sessions and subagent runs: keep persistent sessions created with visible spawning editable and steerable in their parent tree. Subagent runs remain view-only, omit author avatars, and keep live progress in the parent conversation with inactive cards paused. (#139367, #139371, #139381, #139456, #141499)
• Provider account controls: add and remove individual accounts, manage supported account priority, and clear an agent’s custom order without disconnecting accounts; inherited and provider-managed order remains explicit. (#132451) Thanks @​jesse-merhi.
• Model fallback picker: choose ordered fallback models from a searchable dropdown, remove selections, and add custom references. Related #137410. (#141330) Thanks @​najef1979-code and @​shakkernerd.
• Prometheus runtime identity: identify the running process and loaded build behind metrics so operators can verify which runtime is serving a deployment. Related #139268. (#139280)
• Provider setup: keep provider detection passive until the user chooses a route, preserve consent and model choices through setup and OAuth failures, and leave generated catalog rows to discovery. Retain selected OpenAI credentials and supported Doctor model references; Baseten replace mode still includes the bundled catalog. Related #137033, #139207. (#137120, #139243, #139675, #139924, #139951, #140139, #140154, #140336, #141531, #141552) Thanks @​LiuwqGit, @​NovaUnboundAi, @​obviyus, @​shakkernerd, and @​vincentkoc.
• Browser panel: watch Agent browser tabs repaint live, with screenshot fallback when streaming is unavailable. In the macOS app, open external links as native WebKit Mac tabs in the same Browser panel, with navigation and one-shot Annotate/Inspect capture; Mac tabs belong to their window and survive chat switches. (#140988, #141031)
• iOS voice shortcuts: open the current chat and start Talk with the Start Live Voice App Shortcut; pairing, provider setup, microphone permission, unlock, and foreground requirements still apply. Related #140998. (#141003, #141152) Thanks @​shakkernerd.
• Team Reports: install the optional Team Reports plugin for authenticated daily, weekly, and monthly GitHub reports and explicitly selected Discord sources, with stored history, optional summaries, people timelines and calendars, coverage warnings, scheduler/source health, and theme-aware report pages. (#139850, #141327, #141384)
• Android folding layouts: keep content clear of separating hinges, show navigation beside content on book folds, and split transcript and composer across suitable tabletop panes while retaining drafts, cursor, and reading position; fall back when available space is insufficient. (#140614, #140710, #140802) Thanks @​vincentkoc.
• Native embedded settings: provide phone-width settings with safe-area handling and Back navigation while retaining existing Gateway scopes and native device capabilities. (#139492)
• Telegram photo albums: group consecutive eligible photos into native albums of up to ten while preserving order, captions, reply targets, and topics; single photos and messages with controls retain individual delivery. (#141398) Thanks @​obviyus.
• CLI and plugin discovery: limit displayed terminal or JSON documentation results with openclaw docs --limit, and let the system agent read installed-plugin inventory directly. Related #133122. (#131014, #133255) Thanks @​Alix-007 and @​shakkernerd.
• Recursive delegation: enable bounded recursive session spawning by default while retaining explicit depth and concurrency limits and existing sandbox restrictions. (#138059) Thanks @​fuller-stack-dev.
• Chat navigation: add a previewable position rail for long conversations, including hover previews and direct jumps. Related #138587. (#138603) Thanks @​brokemac79.
• Native dashboard reports: display bounded report data directly through show_widget and dashboard authoring without an iframe. Related #139263. (#139306)
• Chrome extension setup on Mac: request the official Chrome Store extension from the local Mac device settings or CLI after native setup is ready; Chrome still owns approval and uninstall decisions, and OpenClaw shows when setup remains pending. Related #139448. (#139466)
• CLI agents by default: show supported create-capable CLI agents in the new-session model picker without a separate opt-in; set gateway.cliAgents.enabled to false to disable CLI agents and native CLI session creation. (#139459)
• Device aliases: rename paired devices directly from the Control UI Devices page. Related #138099. (#138852) Thanks @​xialonglee.

... (truncated)

Changelog

Sourced from @​openclaw/gateway-client's changelog.

Changelog

Release notes: https://docs.openclaw.ai/releases

Each release has its complete changelog below. Audited contribution records are retained separately when available.

• 2026.9.4 · Raw
• 2026.9.3 · Raw
• 2026.9.2 · Raw
• 2026.9.1 · Raw
• 2026.8.2 · Raw
• 2026.8.1 · Raw
• 2026.7.1 · Raw
• 2026.6.11 · Raw
• 2026.6.10 · Raw
• 2026.6.9 · Raw
• 2026.6.8 · Raw
• 2026.6.7 · Raw
• 2026.6.6 · Raw
• 2026.6.5 · Raw
• 2026.6.2 · Raw
• 2026.6.1 · Raw
• 2026.5.31 · Raw
• 2026.5.28 · Raw
• 2026.5.27 · Raw
• 2026.5.26 · Raw
• 2026.5.22 · Raw
• 2026.5.20 · Raw
• 2026.5.19 · Raw
• 2026.5.17 · Raw
• 2026.5.14 · Raw
• 2026.5.12 · Raw
• 2026.5.7 · Raw
• 2026.5.6 · Raw
• 2026.5.5 · Raw
• 2026.5.4 · Raw
• 2026.5.3-1 · Raw
• 2026.5.3 · Raw
• 2026.5.2 · Raw
• 2026.4.29 · Raw
• 2026.4.27 · Raw
• 2026.4.26 · Raw
• 2026.4.25 · Raw
• 2026.4.24 · Raw
• 2026.4.23 · Raw
• 2026.4.22 · Raw
• 2026.4.21 · Raw
• 2026.4.20 · Raw

... (truncated)

Commits

• 22816da chore(release): prepare 2026.9.3 versions and locales
• 13c7d0b docs(packages): remove repetitive module captions (#141500)
• d721719 fix(ui): avoid duplicate pull request refreshes after chat replays (#139966)
• 5692464 fix(gateway-client): preserve WebSocket options under Bun (#139919)
• b6ca24c fix: keep rate-limit retries transient and prevent split chat replies (#139465)
• 1b9849b fix: refresh pending approvals when reopening chat (#139457)
• 74ad6ba chore(release): bring 2026.9.2 release state to main (#139369)
• ca70a34 perf(gateway-client): avoid temporary pending request containers (#139073)
• 0229a10 chore(release): close out 2026.9.1 on main (#137506)
• b456aa1 fix(gateway): repeated profile verification exhausts GitHub quota (#137949)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.