Cherry-pick: Native app updates (24 commits) #1912
Description
Cherry-pick from upstream — Native app updates
Source: openclaw/openclaw main branch
Scan session: 2026-03-24 (rescan)
Commits: 24 (7 clean, 17 partial)
Commits
| # | Hash | Subject | Author | Files | Tier |
|---|---|---|---|---|---|
| 1 | 0125ce1f44 |
Gateway: fail closed unresolved local auth SecretRefs (openclaw#42672) | Josh Avant | 20 | PARTIAL |
| 2 | 089a43f5e8 |
fix(security): block build-tool and glibc env injection vectors in host exec sandbox (openclaw#49702) | Andrew Demczuk | 4 | PARTIAL |
| 3 | 0e397e62b7 |
chore: bump version to 2026.3.10 | Peter Steinberger | 50 | PARTIAL |
| 4 | 16ececf0a6 |
chore: bump version to 2026.3.13 | Peter Steinberger | 50 | PARTIAL |
| 5 | 1dcef7b644 |
Infra: block GIT_EXEC_PATH in host env sanitizer (openclaw#43685) | Vincent Koc | 4 | PARTIAL |
| 6 | 2afd65741c |
fix: preserve talk provider and speaking state | Ayaan Zaidi | 3 | PARTIAL |
| 7 | 47e412bd0b |
fix(review): preserve talk directive overrides | Ayaan Zaidi | 7 | PARTIAL |
| 8 | 4a0341ed03 |
fix(review): address talk cleanup feedback | Ayaan Zaidi | 2 | PARTIAL |
| 9 | 6bcf89b09b |
feat(ios): refresh home canvas toolbar | Nimrod Gutman | 7 | PARTIAL |
| 10 | 7c889e7113 |
Refactor: trim duplicate gateway/onboarding helpers and dead utils (openclaw#43871) | Vincent Koc | 8 | PARTIAL |
| 11 | a76e810193 |
fix(gateway): harden token fallback/reconnect behavior and docs (openclaw#42507) | Josh Avant | 21 | PARTIAL |
| 12 | a94ec3b79b |
fix(security): harden exec approval boundaries | Peter Steinberger | 29 | PARTIAL |
| 13 | b125c3ba06 |
build: bump openclaw to 2026.3.11-beta.1 | Peter Steinberger | 3 | PARTIAL |
| 14 | ce5dd742f8 |
build: sync versions to 2026.3.11 | Peter Steinberger | 44 | PARTIAL |
| 15 | e7d9648fba |
feat(cron): support custom session IDs and auto-bind to current session (openclaw#16511) | kkhomej33-netizen | 33 | PARTIAL |
| 16 | ecec0d5b2c |
build(android): add play and third-party release flavors | Ayaan Zaidi | 4 | PARTIAL |
| 17 | f84a41dcb8 |
fix(security): block JVM, Python, and .NET env injection vectors in host exec sandbox (openclaw#49025) | Andrew Demczuk | 4 | PARTIAL |
| 18 | 1f9cc647f8 |
build: upload Android native debug symbols | Ayaan Zaidi | 1 | PICK |
| 19 | 3fb629219e |
build(android): add auto-bump signed aab release script | Ayaan Zaidi | 4 | PICK |
| 20 | 4c60956d8e |
build(android): update Gradle tooling | Ayaan Zaidi | 2 | PICK |
| 21 | 96485701a7 |
docs: update 2026.3.11 release examples | Peter Steinberger | 3 | PICK |
| 22 | c2e41c57c9 |
fix(ios): make pairing instructions generic | Nimrod Gutman | 2 | PICK |
| 23 | f1d9fcd407 |
build(android): strip unused dnsjava resolver service before R8 | Ayaan Zaidi | 1 | PICK |
| 24 | f251e7e2c2 |
build: shrink Android app release bundle | Ayaan Zaidi | 2 | PICK |
Execution
Pick up with: /pick-from-openclaw execute issue #N
Recommended strategy: staging branch
Note: 17 PARTIAL commits — some files may need discarding.