OpenClaw releases v2026.3.2, adding a native PDF analysis tool, including 150+ fixes and multiple breaking changes

BlockBeats News, March 3 — The open-source AI Agent framework OpenClaw released version v2026.3.2, which includes multiple new features, security enhancements, and over 150 bug fixes, contributed by 93 developers.

Major new features in this release include a native PDF analysis tool supporting Anthropic and Google as PDF processing backends, with configurable extraction fallback strategies and page/size limits; the SecretRef credential referencing mechanism extended to 64 targets, covering runtime collectors, planning/execution/audit workflows, with unresolved references immediately causing errors on active interfaces; a new STT (Speech-to-Text) API supporting transcription of audio files via configured service providers; Telegram message streaming default switched to "partial" mode for real-time preview; and a new MiniMax-M2.5-highspeed model added to the provider directory.

This version introduces four breaking changes: the default tool configuration for new installations switched from a broad programming toolset to "messaging"; ACP scheduling enabled by default; the plugin HTTP routing registration API changed from registerHttpHandler to explicitly declared registerHttpRoute requiring authentication; Zalo Personal no longer depends on external CLI binaries, now running purely on JS runtime.

Security fixes include reinforcement of Gateway loopback WebSocket, prevention of duplicate plugin route registration, pre-parse Webhook authentication, and protection against symbol link escape in skill workspaces.