Radar brief — 2026-09-06

What the evidence shows

GitHub-tagged releases dominate the high-signal set. Several notes omit dozens of extra commits (bodyOmitted); those are not inferred below. Trusted source mix is only 49% GitHub/changelog vs HTML. 1 source in the window reported errors. Zed v1.19.0-pre is a prerelease.

For developers

• Upgrade Claude Code to v2.1.260 if you rely on path-scoped Edit/Write/Read rules or a Bash sandbox. Parentheses in paths were dropped; a single bad deny regex could fail every edit; zsh REPORTTIME/REPORTMEMORY/DIRSTACKSIZE assignments could hide substitutions and auto-approve. Use /diff in fullscreen and read prompt_cache on /cost before blaming the model for spend.
• Cline CLI v3.0.61 + SDK v0.0.82 if you route through Dify, SAP AI Core, opencode, or Codex CLI: tool definitions and images were silently stripped. Also upgrade if remote MCP can be down — startup no longer dies waiting on SSE.
• Goose v1.48.0: wire new declarative providers and GLM-5.3 explicitly; if you cost-track, fill custom provider cost fields. Hook authors should use on_failure and the stable tool_call_id. Do not assume the omitted 98 commits.
• Codex rust-v0.152.0 then rust-v0.153.0: package-style MCP names, per-tool output_token_limit, plugin marketplace CLI, and tui.auto_recap = false if auto recaps fight your workflow. Vim users get draft search plus undo/redo that keeps pastes/attachments.
• Antigravity 1.1.25: add Gemini 3.8 Flash with GEMINI_API_KEY. Re-check Markdown custom agents — they now inherit ambient skills, rules, and subagents. Windows skill grouping and relative subagent paths were wrong before this tag.
• OpenCode v1.18.29: subscription users should see gpt-6-astra; confirm the OAuth model list if it was empty.
• Tabnine v6.5.4: set tools.enableWebFetchTool if you want direct fetch instead of the old LLM-mediated path; CLI 0.35.0 for attribution after diff accept.
• Factory Droid v0.209.0: /archive (Ctrl+X); new sessions with no model pick GPT-5.6 Sol. Confirm that default before a long run.
• Zed v1.19.0-pre: try OpenRouter effort-based reasoning and long-session memory in a pre channel only.
• Kiro v2.19.2: tune stream idle timeouts if turns were hanging; skip 2.20.2 until a real changelog exists.

For teams

• Ship Claude Code v2.1.260 as a security patch, not a convenience bump. Sandbox/permission tags are surface:permissions! and surface:sandbox!. Audit deny rules with ( or broken character classes; treat “read-only folder still writable” as a regression that this version claims to close. Headless/Desktop: /reload-plugins, text /advisor, oidc.scope_on_refresh, and new Desktop policy keys (userPluginMarketplacesEnabled, userPluginUploadsEnabled).
• Cline Hub skew: newer CLI will prompt before replacing an older Hub and will drain in-flight turns. Plan the interrupt count. Windows: Authenticode via Azure Trusted Signing; application-control blocks now print an actionable error. Open proposal to review: pin models after the alleged v3.0.61 Fable switch — the Cline notes here do not themselves document that model change.
• Codex org controls: Plus/Team get an earlier warning under a ~5-hour window. Full Access skipping Guardian for confirmation-only actions is a policy change — decide if that matches your review bar. Plugin install from remote marketplaces needs an allow-list.
• Goose cost + routing: custom cost fields and GPT-5.6 Bedrock (sol/terra/luna) plus GLM-5.3 will change invoices. Treat the release as breaking until you read the remaining omitted commits.
• Antigravity: duplicate permission grants across reloads/subagents were accumulating; MCP OAuth with long codes was failing; Remote Control reverse-tunnel was hardened. Re-issue grants after upgrade.
• Factory: v0.208.1 60% GPT/Grok is time-limited marketing on an HTML changelog — don’t bake it into budgets. Default-to-Sol (v0.209.0) will shift spend if users leave the selector empty. Related proposal: archive chats with /archive.
• Tabnine admins: v6.5.3 (same HTML blob) claims org-level repo add and per-team model assignment fixes — verify on a canary team.
• Open proposals (8) worth assigning: Cline plugin home ~/.agents/plugins (team, P5); Cline model pin (everyone, P4); Grok CLI prompt/MCP cleanup (developer, P4); Factory archive + Sol default (team, P3); Tabnine Web Fetch (developer, P3); Windsurf agent window split (developer, P3); OpenCode PR #38252 videos (everyone, P2).

What to ignore

• Kiro 2.20.2: version bump with no body.
• +N more changes / bodyOmitted: Goose 98, Claude Code 66, Codex 95+94, Zed 50, Cline 18+34, Kiro 8, Tabnine 7. Do not invent those diffs.
• Zed “this week’s release” framing on a -pre tag — not a stable IDE ship signal.
• Kiro/Tabnine/Factory HTML pages that splice multiple older versions into one scrape (Kiro 1.0.337, Tabnine 6.5.3–6.5.1). Prefer GitHub tags when they exist.
• Factory 60% off as a durable pricing fact.
• Marketing copy, contributor shout-outs, and internal score columns — none of that is judgment.

Watch next

• Goose remaining v1.48.0 surface area (surface:mcp!, hooks, permissions, skills) once the omitted 98 land in a readable note.
• Claude Code follow-ups on hooks, compaction, context-files, and ANTHROPIC_DEFAULT_FABLE_MODEL (tag only; not described in the body).
• Whether Codex marketplace plugins + relaxed MCP names create a supply-chain review load.
• Cline after the capability-translator fix: confirm Dify/SAP/opencode/Codex tool calls in production traces.
• Antigravity custom-agent inheritance (skills leaking into Markdown agents) and Gemini 3.8 Flash quality vs catalog presence.
• OpenCode gpt-6 / gpt-6-astra naming vs Goose/Factory GPT-5.6 labels — catalogs are not using one scheme.
• The eight open proposals, especially Cline plugin layout (P5) and model pinning (P4).
• Error-reporting source (1 in this window): treat as a reliability flag until the next GitHub tag clarifies it.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-only feed of AI coding assistants. Read the versioned GitHub tag first, then HTML changelogs, then proposals. Act on named commands, flags, and permission bugs; ignore omitted commit counts and unstated model swaps. Developers apply the concrete upgrades and settings above. Teams treat permission, Hub, Guardian, and default-model rows as policy changes. Re-check this radar when a -pre graduates or an omitted body is published — we do not fill those gaps from marketing.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 14
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• Goose v1.48.0: TrustedRouter declarative provider #11422 · OpenCode Zen gateway as a declarative provider [#10939](https://gi — source

• Claude Code v2.1.260: Added a diff panel that opens beside the conversation in fullscreen mode and shows your uncommitted changes as Claude edits; toggle it with /diff · Added a li — source

• Zed AI v1.19.0-pre: This week's release includes call hierarchy support, multi-select in the Git Panel, automatic language detection for untitled buffers, and project search on typ — source

• Google Antigravity 1.1.25: Added an opt-in workspace-grouped view to the /resume conversation picker, allowing users to toggle between a flat list and conversations grouped by directory — source

• OpenAI Codex CLI rust-v0.153.0: Vim mode now supports undo with u and redo with Ctrl+R, preserving complete drafts including pasted content and attachments. ([#41941](https://github.com/op — source

• OpenAI Codex CLI rust-v0.152.0: Vim mode supports / and ? searches within drafts, highlighted matches, and repeat navigation with n and N. (#41586) · Rate-limit banners offer actions f — source

• Cline cli-v3.0.61: Cline now handles a running Hub that is older than your CLI. · Instead of quietly talking to a hub executing stale code, you get a prompt showing how many activ — source

• Cline sdk/sdk/v0.0.82 — SDK v0.0.82: Fixed tool calling being silently disabled for gateway models whose catalog entry declares no capabilities. · Three separate producers built gateway model defin — source

• OpenCode v1.18.29: Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 · Fixes issue of gpt-6-astra not showing up for openai subscription users · **T — source

• Kiro v2.19.2: 2.19.2 Aug 25, 2026 · 2.19.1 Aug 21, 2026 Spec Review Mouse Support and Automatic Stream Recovery This release brings mouse support to the spec review screen. · — source

• Tabnine v6.5.4: v6.5.4 August 30, 2026 Bug Fixes Tabnine CLI: Provenance & Attribution : Fixed attribution feedback being dropped after tool inputs were edited via VS Code diff — source

• Factory Droid v0.209.0 — · Desktop v0.166.0 (September 1, 2026): Session archiving from chat, a new default model, faster startup, and steadier app views · Archive sessions from chat - Archive the current session with /ar — source

• Factory Droid v0.208.1 — · Desktop v0.165.1 (August 29, 2026): 60% off GPT and Grok models · GPT and Grok discount - GPT and Grok models now bill at 60% off for a limited time, with the discount shown in the model selec — source

• Kiro 2.20.2 — Aug 31, 2026: 2.20.2 Aug 31, 2026 — source

Open proposals

• Move Agent Plugins into ~/.agents/plugins and Hub-enable them in Settings → Customize (audience: team, P5)
• Pin Cline models after the v3.0.61 switch to Claude Fable 5.1 (audience: everyone, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Archive Factory Droid chats with /archive and default new sessions to GPT-5.6 Sol (audience: team, P3)
• Enable tools.enableWebFetchTool and upgrade Tabnine CLI to 0.35.0 (audience: developer, P3)
• Set devin.agentWindow.location to split Agent Command Center into its own window (audience: developer, P3)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)