chore: bump openclaw to 2026.7.1-2

[tropibot]

Automated version bump triggered by release v2026.7.1-2.

Changes

• upstream version (openclaw/openclaw) → 2026.7.1-2
• version 0.1.4 → 0.1.5
• UPSTREAM_VERSION → 2026.7.1-2

[tropibot]

Dappnode bot has built and pinned the built packages to an IPFS node, for commit: 5aa331e

This is a development version and should only be installed for testing purposes.

1. Package openclaw.dnp.dappnode.eth

Install link

Hash: /ipfs/QmRvvnhxUkhSwBKtP8D9Vay6H5T5BYvqaqPPcj82Myk14L

(by dappnodebot/build-action)

[tropibot]

⚠️ Package harness completed with warnings

Both versions stabilized; advisory log analysis found a critical candidate-only signature

Package	Verdict	Reason	Duration	Cleanup
openclaw.dnp.dappnode.eth	⚠️ Warning	Candidate containers stable (candidate_containers_stable)	35m 52s	✅ Passed

Run overview

Context	Value
Pull request	dappnode/DAppNodePackage-openclaw#77
Tested commit	2d5eb7a1b3e0
Candidate artifact	Install on DAppNode · /ipfs/QmQ5i2tBmcXNXKkyF3SYw5ymRdipSVxudbdaTQoaX5sRLg
Baseline request	automatic
Worker	worker-01
Run ID	gh-pr-77-2d5eb7a1b3e0-37eac73fb3b473a8
Execution	2026-08-04T01:58:52.772013968+00:00 → 2026-08-04T02:34:45.417063805+00:00 (✅ Completed)

Baseline vs candidate

Check	Baseline	Candidate
Version	0.1.4	0.1.5
Install	✅ Passed · 17m 43s	✅ Passed · 16m 22s
Hard check	✅ Passed · 5 stable samples	✅ Passed · 5 stable samples
Containers	1 observed	1 observed
Stabilization	22s	22s
Log collection	✅ Passed · 1 container	✅ Passed · 1 container

Container comparison

• Added: none
• Removed: none
• Baseline inventory: DAppNodePackage-gateway.openclaw.dnp.dappnode.eth
• Candidate inventory: DAppNodePackage-gateway.openclaw.dnp.dappnode.eth
• Baseline non-running states: none
• Candidate non-running states: none
• Deterministic regressions: ✅ none

Container inventory

Baseline

Container	Service	State	Image	Created
DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	gateway	✅ Running	gateway.openclaw.dnp.dappnode.eth:0.1.4	1785809796

Candidate

Container	Service	State	Image	Created
DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	gateway	✅ Running	gateway.openclaw.dnp.dappnode.eth:0.1.5	1785810806

Runtime analysis _advisory

❌ Critical — Heuristic and Nexus analysis: Candidate doctor run is incomplete and missing critical security-permission hardening and skill-disabling steps present in baseline.

Analyzer	Status	Summary
Composite	❌ Critical	Heuristic and Nexus analysis: Candidate doctor run is incomplete and missing critical security-permission hardening and skill-disabling steps present in baseline.
Heuristic	✅ Clean	No configured candidate-only suspicious signature was found
Nexus	❌ Critical	Candidate doctor run is incomplete and missing critical security-permission hardening and skill-disabling steps present in baseline.
Baseline evidence	✅ Clean	No configured suspicious signature was found
Candidate evidence	✅ Clean	No configured suspicious signature was found

Severity	Container	Finding	Evidence
❌ Critical	DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	Without default config creation, the gateway may fail to start if configuration is missing.	Candidate log missing 'Creating default OpenClaw config...' step present in baseline.
❌ Critical	DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	This omission means security-permission hardening is not performed, leaving the state directory and config file with overly permissive access.	State integrity section in candidate lacks the permission warnings ('State directory permissions are too open', 'Config file is group/world readable') and the subsequent tightening ('Doctor changes - Tightened permissions').
⚠️ Warning	DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	The doctor may no longer detect and disable non-functional skills, potentially leading to runtime errors or misleading status.	Candidate doctor output lacks the detailed listing of missing-requirement skills and the subsequent 'Doctor changes' disabling them; Skills status now shows 'Missing requirements: 0' despite baseline showing 32 missing.
❌ Critical	DAppNodePackage-gateway.openclaw.dnp.dappnode.eth	Indicates that the doctor command may have crashed or terminated prematurely, failing to complete its expected tasks.	Candidate log ends abruptly after 'Plugins' summary, missing the 'Shell completion' section and other later sections present in baseline.

Cleanup and diagnostics

Check	Result
Cleanup	✅ Passed
Leftover packages	none
Cleanup error	none

✅ No run errors were recorded.

---

_{Deterministic checks decide the verdict. Runtime log analysis is advisory. TropiBot publishes bounded summaries and never posts raw logs.}