OpenClaw v2026.4.2: Copilot, interface notes

v2026.4.2 changes a surface that users can see. The release record describes a skills, plugin, marketplace, or SDK change; this article follows the state behind the screen instead of treating a new button as proof that the workflow is complete.

This is a stable release line; read the exact record for migrations and fixes before applying it to a live Gateway. The release body cannot certify every local combination of provider, channel, platform, and account; use the bounded test below for the path you actually run.

State that a reader can see

The wiring behind the screen

Providers/Copilot

classify native GitHub Copilot API hosts in the shared provider endpoint resolver and harden token-derived proxy endpoint parsing so Copilot base URL routing stays centralized and fails closed on malformed hints.

Providers/Copilot lives at the handoff between the Gateway and a conversation. Send one harmless message, reconnect once, and compare the account, thread, sender, and final transcript.

A bounded check for this version

1. Start with a disposable checkpoint: record the version, host, provider, and workspace tied to Tasks/Task Flow.
2. Check the release's migration notes and make a restorable backup before changing persistent state.
3. Ask the same small question through the affected route and record the account, model id, context, and response time.
4. Compare the answer, tool permissions, and fallback behavior with the baseline before changing a default.
5. If the result differs from the release body, stop the rollout and attach the log, screenshot, or transcript to the version record.

openclaw --version
openclaw gateway status
openclaw security audit

Close the loop with evidence

A useful maintenance record names the changed behavior, the behavior that stayed stable, the identity that approved the test, and the step that would undo it. Preserve that record beside the release tag.

Edge cases in this tag

Providers/transport policy. centralize request auth, proxy, TLS, and header shaping across shared HTTP, stream, and websocket paths, block insecure TLS/runtime transport overrides, and keep proxy-hop TLS separate from target mTLS settings. Record the failure that this correction addresses before declaring the upgrade complete.

Providers/Copilot. classify native GitHub Copilot API hosts in the shared provider endpoint resolver and harden token-derived proxy endpoint parsing so Copilot base URL routing stays centralized and fails closed on malformed hints. This is the edge case to include in a regression check, especially when the release is pre-release.

The authoritative record is the v2026.4.2 GitHub release. The release index gives the surrounding sequence, while the skills documentation supplies the operational background.