TAG

#coding-agents

Stories connected through a shared idea, actor, technology or theme.

24 OctClaude Code 2.1.309 closes multiple sandbox and permission bypassesThe release prevents shell startup files and MCP configuration files from being modified outside intended controls, and fixes permission checks that could be bypassed through symlinks or wrapped directory changes. It also hardens worktree isolation and Windows hook behaviour.→24 OctCodex CLI 0.164.0 adds enterprise MCP authentication and reusable presetsThe release adds ten numbered /presets slots, richer /model and /permissions arguments, terminal image previews and a default Amazon Bedrock setup wizard. It also masks credentials in supported remote shell operations and strengthens session recovery and sandbox checks.→17 OctClaude Code 2.1.301 adds safer unattended retries and richer agent telemetryThe release adds CLAUDE_CODE_RETRY_WATCHDOG_MAX_USAGE_LIMIT_WAIT_MS so unattended retry mode can stop instead of waiting indefinitely for a usage limit to reset. It also adds classifier verdict, permission mode, and classifier-category fields to tool-decision telemetry, while fixing unsafe worktree deletion and several search and workflow-reporting failures.→14 OctGitHub Copilot CLI adds agent-scoped hooks and safer autopilot handlingThe release adds agent-scoped declarative hooks, inline image rendering and more robust sandbox settings. It also changes unattended autopilot behavior so a pre-tool hook asking for approval is denied instead of leaving an invisible permission prompt.→14 OctCline moves agent plugins into the hub processPlugins now load in the hub process by default, removing the requirement for a Node or Bun runtime on the user's PATH. Failed plugins remain visible through status commands and session diagnostics instead of silently losing their tools, while sandboxed subprocess loading remains available.→14 OctOpenHands adds browser recording and built-in ACP agentsThe release adds browser session recording for verification workflows and includes OpenCode and Pi as built-in ACP agents on local backends. It also adds configuration changes for automated setup and splash-page behavior.→14 OctQwen Code nightly improves managed-agent coordination and test triageThe release improves managed-agent connector and broker robustness, adds mailbox-style session messaging and improves settlement of child runs after worktree merges. It also adds a test-failure report explorer for extension workflows.→10 Octcc-switch 1.0.13 updates multi-provider coding-agent routingThe release is distributed through the project’s GitHub release channel and updates the desktop and CLI tooling used to select and manage agent providers. It is part of the project’s 1.0 release line.→10 OctAtelier 0.1.8 improves a native workspace for coding agentsThe release adds the latest packaged editor build for macOS and continues Atelier’s agent-session workflow. The project presents agent activity and per-turn changes inside a native development workspace.→8 OctSilicon Labs opens an AI SDK for Copilot, Cursor and Codex embedded developmentSilicon Labs announced a public-beta SDK that gives GitHub Copilot, Cursor and Codex structured access to its device SDKs, tools, documentation and connected hardware. It also introduced Hardware Intent capabilities and Databricks integration for embedded AI workflows.→6 OctQwen Code Desktop adds Linux ARM support and managed-agent controlsThe release adds Linux aarch64 support, an automatic-update opt-out, and new web-shell and managed-runtime capabilities. It also improves MCP media handling, session inspection, worktree management and browser-use packaging.→6 OctOpenCode 2.0.23 strengthens ACP editor integrationVersion 2.0.23 adds a native Cohere provider and fixes system-role request handling for several model providers. It also documents ACP v2 extensions and adds explicit control over automatic skill invocation.→6 OctAgent-Git publishes an early agent-native version-control workflowThe V0.1.0-alpha release introduces an early infrastructure layer designed around agent-managed branches and checkpoints. It is explicitly pre-release, so its implementation and adoption remain unvalidated.→2 OctVS Code 1.140 makes multi-agent development a first-class workflowThe release lets agents work across repositories and remote hosts while sharing session state through the Agent Host Protocol. It also adds HydraFusion model orchestration, managed Auto tiers and controls for minimum AI-feature versions.→2 OctGitHub Copilot CLI adds GPT-6.1 Sol and tighter session controlsThe release lets users restrict GitHub authentication to approved MCP origins and grant path access for individual sessions. Permission prompts remain actionable after resuming sessions, while compaction now returns a summary even when instructions request terse output.→2 OctClaude Code 2.1.286 improves permission and cloud-credential recoveryThe release shows counts such as “2 of 5” when several permission requests are pending and adds mouse navigation for fullscreen lists. It also fixes cases where GCP or AWS credential refreshes opened multiple login browsers and where resumed sessions lost turns.→2 OctCline SDK adds recoverable oversized MCP tool resultsInstead of losing tool output when it exceeds the model context, the SDK stores the complete result in a per-session cache and exposes a cline://cache URI. Agents can retrieve the remaining content by line range, with session-level size and expiry limits.→2 OctOpenCode hardens macOS agent binaries and session identityModel requests now carry session identity that distinguishes nested and parent sessions. The release also improves macOS 27 compatibility by re-signing locally compiled binaries and signing CLI release binaries with a Developer ID.→30 SeptClaude Sonnet 5.5 launches with a major coding-efficiency jumpAnthropic says Sonnet 5.5 is over 30% faster and costs up to 30% less per task than Sonnet 5. It scored 70.6% on Terminal-Bench 4.0, compared with 10.3% for Sonnet 5, while retaining a 1-million-token context window.→30 SeptClaude Code 2.1.284 makes Sonnet 5.5 the default and hardens MCP recoveryVersion 2.1.284 adds Claude Sonnet 5.5 as the default Sonnet model on the Anthropic API, with 1-million-token context and published pricing. It also makes resumed MCP sessions wait for connecting servers, adds bulk MCP reconnect, improves permission and plugin controls, and fixes numerous agent-session failures.→30 SeptGitHub Copilot CLI 1.0.89 expands model choice and MCP resilienceThe release adds GPT-6 Sol, GPT-6 Luna and Claude Opus 5.5 to the model picker when available, and reads Claude Code rule files as custom instructions. It also improves MCP OAuth scope handling, tolerates invalid neighbouring MCP entries, follows repository pull-request templates, and strengthens sandbox and session behaviour.→30 SeptGitHub makes Claude Sonnet 5.5 generally available across CopilotSonnet 5.5 became available to Copilot Pro, Pro+, Max, Business and Enterprise users, subject to gradual rollout and administrator controls. GitHub lists availability across Visual Studio Code, Visual Studio, Copilot CLI, the coding agent, the Copilot app, github.com, mobile, JetBrains, Xcode and Eclipse.→29 SeptCodex CLI 0.158 hardens MCP, sandboxing and terminal approvalsThe release adds support for pre-registered MCP OAuth clients and bearer-token authentication for exec-server WebSocket connections. It also strengthens approval behaviour and fixes Windows, Linux and macOS sandbox and path-handling issues.→29 SeptOpenCode 1.18.33 improves agent gateway reliability and secrecyProvider response and stream timeouts are now honoured for Cloudflare AI Gateway models. The release also prevents credentials and sensitive headers from appearing in debug configuration output and makes MCP launch failures visible to users.→29 SeptRulesync 22.0 changes how agent instructions map to projectsThe release enforces Codex’s 32 KiB instruction-chain limit and warns when generated rule files exceed it. It also converts bearer-token and header variable references into the Codex configuration fields that actually resolve environment values, while making malformed Claude skills non-fatal during import.→26 SeptClaude Code 2.1.282 hardens telemetry, permissions and session recoveryThe release ignores project-level telemetry settings that could enable export or content capture, adds managed Chrome/MCP controls, and improves recovery of extended-thinking sessions. It also fixes permission-rule bypasses, duplicate command execution and several remote-session failures.→26 SeptprotoAgent adds Zed ACP integration and stronger runtime tracingThe release lets developers continue console conversations inside Zed and drive protoAgent through Zed's Agent Panel over the Agent Client Protocol. It also improves boot-gate diagnostics, tracing semantics and default code-pane tool exposure.→18 SeptClaude Code 2.1.274 hardens MCP startup, session recovery and telemetryClaude Code 2.1.274 adds configuration for limiting MCP startup waits, an effort attribute for OpenTelemetry spans and a redacted managed-settings telemetry event. It also improves transcript repair, context compaction, subagent reliability, remote sessions and gateway error handling.→18 SeptCline 4.1.19 blocks planted executables and fixes context exhaustionCline 4.1.19 warns when images are attached to text-only models and improves model capability reporting. It bases compaction on provider-reported token counts, blocks workspace executables from shadowing trusted Windows commands, retries transient failures and prevents several command and credential-handling errors.→18 SeptKilo Code 7.7.3 repairs worktrees and restores browser automationKilo Code 7.7.3 improves worktree discovery, cleanup, diagnostics and deletion performance, while restoring Playwright browser automation under Web Tools. It also adds Codex quota visibility, shared agent-management components and more stable transcript and skills handling.→18 SeptOpenHands 1.20 adds profile-scoped secrets and Docker runtime forwardingOpenHands 1.20 lets agent profiles select the secrets available to them, forwards Docker conversation runtime settings and allows automations to choose saved profiles. The release also isolates mock-LLM profiles from ambient secrets in tests.→18 SeptGitHub Copilot CLI lets custom agents inherit repository instructionsCopilot CLI 1.0.86-1 lets custom agents opt into AGENTS.md, copilot-instructions.md and CLAUDE.md through the `include-custom-instructions: true` frontmatter setting. The release also preserves marketplace plugins and skills when active sessions resume after reload and improves sandbox and background-shell status reporting.→18 SeptGoogle Antigravity CLI 1.2.5 improves subagent guidance and recoveryAntigravity CLI 1.2.5 automatically gives Markdown-defined agents that declare subagent invocation access to the available subagent roster and delegation instructions. It also preserves background task names, clears definitively rejected credentials, records externally interrupted commands as cancelled and fixes frozen thinking frames.→9 SeptDéjà Vu 0.19.4 gives multiple coding agents shared project memoryDéjà Vu 0.19.4 connects shared memory to 23 agent harnesses, including VS Code Copilot Chat, Amp, Prime Agent, Cline, Qwen Code and OpenClaw. The release adds session digests, per-prompt recall, compaction-aware forgetting and same-turn repair context for failed commands.→9 SeptHermes Agent 0.21.1 rolls up major agent-runtime and MCP changesHermes Agent 0.21.1 rolls up 5,139 non-merge commits, 4,364 changed files and 632 merged pull requests since version 0.21.0. The release includes file-operation and startup performance work, desktop session controls, browser annotations, MCP authorisation improvements, cron fixes and more reliable delegation.→9 SeptFimo launches autonomous websites around coding-agent outputFimo says its platform accepts AI-generated code from coding agents and lets native or custom agents publish SEO content, translate pages, repair schema issues and refresh stale content. Changes can move through review processes and custom workflows, keeping human approval in the publishing loop.→7 SeptQwen Code preview adds inspectable multi-agent workflowsThe preview adds Web Shell workflow visualisation, live subagent status, a session resource catalogue, worktree-isolated named tasks and session-turn navigation. It also introduces mandatory conversation writer leases and workspace-scoped skills runtime.→7 SeptClaude Code 2.1.263 fixes background-agent reliability failuresThe release fixes interrupted commands being shown as completed, prevents finished subagents from silently restarting during navigation, and addresses races when opening newly started sessions. It also improves background-session retention and worktree cleanup behaviour.→7 SeptOpenClaw 2026.9.2 makes agent operations more recoverableThe release moves heavy transcript work away from the gateway event loop, expands settings that apply without restarts, adds GPT-6 Astra support and enables Swarm orchestration by default. It also changes cross-agent session visibility defaults, so shared Gateway deployments need to review their access settings.→3 SeptJFrog adds AgentSecOps controls across the agentic software supply chainJFrog announced a suite connecting models, MCP servers, skills, plugins, prompts and other AI assets to its software-supply-chain platform. It includes semantic scanning, an agent-plugin registry, APM package management, project-scoped Agent Guard policies and network-layer routing through Artifactory.→3 SeptGitHub Copilot CLI adds model fallback and proxy-bound Linux sandboxesThe v1.0.83-2 pre-release lets custom agents declare an ordered list of models and enforce a required model policy, and adds support for Claude Fable 5.1. It also restricts Linux sandbox network egress to a configured proxy, with additional host requirements for proxy mode.→3 SeptCline Desktop 0.0.22 imports resumable sessions from other coding agentsCline Desktop 0.0.22 can scan local stores and import selected Claude Code, Codex and OpenCode conversations as fully resumable Cline sessions. The release also folds scheduled runs into the sidebar and adds workflow, tool-call and marketplace fixes.→2 SeptClaude Code 2.1.252 fixes remote-session stalls and oversized failure outputVersion 2.1.252 fixes Remote Control sessions stalling after tools finish when the Claude service connection is degraded. It also prevents very large background-task failure messages from pushing conversations beyond the API request-size limit.→2 SeptCodex CLI 0.152 adds MCP output caps and longer shell-command deadlinesThe release adds per-tool MCP output limits, package-style MCP server names and configurable shell-command timeouts beyond one hour. It also preserves approval context through compaction and rejects untrusted cloud-task URLs and redirects.→2 SeptCline Desktop 0.0.21 makes delegated-agent stops propagateStopping a session now propagates aborts to child agents and teammates, with cancelled teammate tasks persisted as cancelled. The release also refreshes live provider models, distinguishes authentication failures from outages, restores Langfuse tracing in production builds and changes unpinned defaults across about 36 providers.→2 SeptApodex 1.1 pairs an open-weight model with verifiable executionApodex 1.1 combines multi-agent collaboration, tool execution, failure recovery and source-linked verification in a persistent workbench that can process code and other artefacts. The release also includes open weights for Apodex 1.1 Mini and the open-source FrontierAgent framework; its capability comparisons are company-published.→2 SeptPing Identity adds runtime identity controls for Claude and coding agentsEnterprise Personal Agent Access, delivered through PingOne Privilege, associates agent sessions with the user and device behind them and applies allow, deny, logging and approval policies at runtime. Ping said the controls cover desktop assistants such as Claude and coding agents such as Claude Code, including commit attribution without long-lived credentials.→31 AugT3 Code nightly unifies agent activity and composer stateT3 Code version 0.0.37-nightly.20260830.1225 unifies activity logs with composer banners in the web interface. Its mobile changes reduce development-client reloads and Metro startup cost.→31 AugGitHub Copilot CLI 1.0.82 tightens worktree and approval flowsVersion 1.0.82 fixes a failure triggered when users typed during /worktree or /move preparation. It also expands plan approval cards and reports specific authentication failures instead of showing only a generic login prompt.→29 AugClaude Code adds restricted execution and cross-session messagingThe release adds --restricted mode, which removes command-running tools and WebFetch unless explicitly allowed, confines file tools to the working directory, refuses bypassPermissions, and ignores local settings files. It also adds cross-session SendMessage and ListAgents support on Bedrock, Vertex, and Foundry, alongside self-hosted runner labels and prompt-cache fixes.→29 AugClaude Code adds model-switch hooks and remote subagent visibilityThe release adds PreModelSwitch and PostModelSwitch hooks, plus live streaming of foreground subagent tool calls and results to Remote Control clients. It also exposes spend-limit and prompt-cache data and fixes symlink races, plugin path traversal, unsafe workflow paths, and symlink-based search-rule bypasses.→29 AugOpenCode adds Azure Entra sign-in and fixes replayable Bedrock reasoningOpenCode v1.18.24 stops Bedrock reasoning responses from being cached as unreplayable empty messages and lets Azure providers authenticate through Microsoft Entra ID via the Azure CLI. It also reads supported v2 configuration fields, easing mixed-version deployments.→29 AugCline Desktop expands to Windows and improves long-running agent workflowsThe release ships a code-signed x64 Windows installer with auto-updates and adds full indexed session search, inline rendering for tool images, and a GitHub integration step. It also improves scheduled-task persistence, checkpoint restoration, background processes, and remote MCP handling.→29 AugHuawei Cloud moves CodeArts Agent to general availability in Asia PacificThe Basic and Professional editions are now generally available and combine project-level code understanding with autonomous development workflows. CodeArts Agent includes 16 specialised agents spanning requirements, architecture, coding, testing, issue resolution, and code review, plus more than 30 reusable engineering skills and IDE, plugin, CLI, and TUI access.→28 AugHarness launches an agent-ready code repository with AI code reviewHarness launched Agent-Ready Harness Code Repository and AI Code Review for teams adopting coding agents. The release combines agent-scoped RBAC and OPA permissions, MCP and CLI access, risk-grouped review, mandatory checks and one-click remediation with migration paths from major repository platforms.→28 AugOperant launches an intent-aware firewall for coding and enterprise agentsOperant AI launched Semantic Firewall to allow, block or redact prompts, tool calls, commands and data payloads in real time. Its Code Intent Guard is aimed at package installation, MCP and tool setup, shell commands, prompt injection, privilege escalation and hidden directives.→28 AugArs Technica reports a new web-based supply-chain risk for coding agentsArs Technica reported 227 installation commands across more than 100 websites that pointed to unowned executable content in files such as llms.txt and llms-full.txt. The report said Claude, Codex and Hermes agents installed the code, exposing a new route from web documentation to developer workstations and corporate networks.→25 AugOpenAI ships Codex CLI 0.149.1Codex CLI 0.149.1 was released on 24 August. GitHub links the 0.149.0-to-0.149.1 changelog, although the release page does not enumerate the changes.→25 AugZide opens public beta of a native workspace for code, Git, issues and CIThe public beta is available for macOS, Windows and Linux and supports GitHub, GitLab and Bitbucket. Zide Assist can use Claude, Codex and Gemini, while the application is built with Tauri and Rust rather than as a browser wrapper.→18 AugCursor’s coding agents degraded when using non-fast Grok 4.6Cursor’s status API recorded the incident at 09:32:24 UTC, affecting Automations, CLI, Cloud Agents, cursor.com and the IDE. Cursor said users could see slowness and high error rates, while other models were unaffected, and marked the incident resolved at 13:40:26 UTC.→17 AugCursor officially joins SpaceXCursor says the acquisition process begun in April is complete and that it will remain focused on making advanced models useful in software development. The company says SpaceX will provide access to substantial GPU capacity and that Cursor has begun testing Grok 4.6.→17 AugCursor announces AIUC-1 agent-security certificationCursor says Schellman conducted an organisational-controls audit and adversarial testing across thousands of scenarios. The assessment covered secrets protection, secure code generation, MCP security, and agent identity and permissions, with recurring quarterly checks and an annual full audit planned.→17 AugDeepSeek open-sources a plugin-oriented agent harnessThe DeepSeek Harness is built on the Cordis framework and provides components for context handling, tool use, orchestration, state, permissions, and error management. It also supports append-only session logs that can be inspected, forked, searched, and replayed.→