Skip to content

[Bug]: openclaw plugins update --all downgrades manually-updated npm plugins to their originally-recorded install version #84256

Description

@FelixIsaac

Description

openclaw plugins update --all uses the internally-recorded install version from the plugin index instead of fetching the latest from npm. This actively downgrades plugins that have been manually updated via npm.

Steps to reproduce

  1. Install Codex plugin — OpenClaw records version 2026.5.12 in its plugin index
  2. Manually update it to latest: npm install --prefix ~/.openclaw/npm @openclaw/codex@latest — now on 2026.5.18
  3. Run openclaw plugins update --all
  4. Codex is silently downgraded back to 2026.5.12

Actual output

Installing @openclaw/[email protected] into /home/felix/.openclaw/npm...
Updated codex: 2026.5.18 -> 2026.5.12.

Expected behavior

openclaw plugins update --all should resolve the latest npm version and update to it, not reinstall the originally-recorded install version.

Environment

  • OpenClaw: 2026.5.18 (50a2481)
  • Node: v24.2.0
  • OS: Ubuntu Linux

Related

Related to #40912 (redundant reinstall on already up-to-date plugins) but this is a more severe variant — it causes an actual version downgrade, not just a wasteful no-op reinstall.

Metadata

Metadata

Assignees

No one assigned

    Labels

    P2Normal backlog priority with limited blast radius.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.impact:data-lossCan lose, corrupt, or silently drop user/session/config data.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.

    Type

    No type

    Fields

    Priority

    None yet

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions