Radar brief — 2026-09-20

What the evidence shows

Fifteen curated signals across 23 tracked assistants. GitHub/changelog-style sources are only 49% of the mix, one source reported errors, and several HTML changelogs collapse multiple versions into one page. Prefer the GitHub tags below; treat Windsurf, Kiro, Tabnine, and Factory as noisier.

High-confidence versioned releases:

Lower-confidence HTML changelogs (often multi-version pages):

For developers

• If you already live in AGENTS.md, Claude Code v2.1.277 will pick it up only when CLAUDE.md is absent. Change the mapping under Project instructions in /config. Do not assume Bedrock, Vertex, or Foundry.
• Codex: try isolated checkouts with --worktree//worktree on rust-v0.154.0, then the archive/delete/ownership controls in rust-v0.155.0. Keep /voice behind /experimental. On a Mac, expect Touch ID prompts for MCP in the local TUI.
• Goose v1.50.0: Snowflake without HTTPS will fail; session naming is path-trusted. If you launch goose-agent, tool calling is now a first-class path.
• Antigravity 1.2.1: use excludeDefaultComponents: true when a custom agent should drop default prompt/tool sections but keep hooks. Prefer --continue after a crash or from a subdir—it should resume the latest non-empty workspace conversation.
• OpenCode v1.18.29 if GPT-6 Astra was missing on a ChatGPT/Codex subscription.
• Cline desktop: install and sign in gh if you want the PR/CI row; it will not push. Upgrade to 0.0.27 before debugging “signed in” ghosts after logout.
• Zed v1.21.0-pre only: agent.prevent_idle_sleep is default; SuperGrok and DeepSeek Flash 4.1 are opt-in experiments, not a stable IDE pin.
• Ignore the +N more changes tails. Those bodies were omitted; do not guess sandbox, skills, or pricing details from tags alone.

For teams

• Patch first: Windsurf v3.10.31 for CVE-2026-81376 (nested Restricted Mode bypass). Tabnine v6.6.0 for CVE-2026-64642, and stop assuming team managers can mint Admins via invite.
• Claude Code gateways that only egress through a forward proxy: set CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 and, if you terminate in front of a provider, use the new upstream headers: map. Mixed old IDE-bundled CLIs on the same machine were logging people out—standardize the binary.
• Codex: Bedrock can now take AWS creds from a configured command with cache/expiry/recovery. Review MCP OAuth refresh/reconnect copy so people do not “fix” it by replaying rejected tools. macOS sandbox now blocks terminal input injection; do not weaken that to unstick a workflow.
• Goose: enforce the HTTPS Snowflake requirement, keep subagent platform guards, and treat preserved permission revocations as the intended state across managers.
• Tabnine: CLI agent is on for all customers; IDE beta agent stays off until an installation admin and a team lead enable it. Use the new MCP-server/tool usage breakdown before a broad rollout.
• Factory: org managers can remove Web Search and block individual models while leaving Allow All for new ones. MCP allowlist autocomplete now writes a permit for the selected server—audit those entries.
• Kiro V3: cloud Steering/agents/Skills/Powers/Hooks can load into new local CLI sessions without landing in .kiro. That is convenient and a config-drift risk; decide whether local sessions may inherit cloud policy.
• Open team proposals already filed: install Windsurf v3.10.31 (P5), enable Tabnine CLI/IDE beta under Teams > Features (P4).

What to ignore

• Marketing residue in otherwise useful notes (Zed Guild, Cline “Create PR” that does not create a PR, Factory animation polish).
• Kiro 2.21.4 vs 2.21.3 as two events—they repeat the same V3 dashboard/config/sync story.
• Windsurf’s changelog blob as a single v3.10.31 feature list; older 3.10.27/3.10.23 items are mixed in.
• OpenCode’s Chinese docs bold-fix and console quota-reset thanks-line; the release that matters is the gpt-6 filter.
• Grok CLI prompt/MCP cleanup proposals in the queue: they are not backed by a Grok signal in this evidence window.
• Internal scores, omitted changelog tails, and any “23 assistants” claim beyond “we only have 15 signals.” One source errored; coverage is incomplete.

Watch next

• Whether Claude Code AGENTS.md ships on Bedrock, Vertex, and Foundry, and whether other CLIs treat AGENTS.md as the shared instruction file instead of a fallback.
• GPT-6 Astra moving from picker/catalog/OAuth-filter availability (Codex 0.154, Goose 1.50, OpenCode 1.18.29) into default routing.
• Codex /voice leaving /experimental, and whether worktree isolation becomes the normal session model on Windows daemons.
• Confirmation that Windsurf CVE-2026-81376 and Tabnine CVE-2026-64642 are closed in production images, not just changelog lines.
• Zed 1.21.0 stable: keep-awake, SuperGrok, DeepSeek Flash 4.1.
• Remaining proposals: Zed Agent Panel defaults (developer, P4), Grok CLI prompt/MCP cleanup (developer, P4), OpenCode PR #38252 verification videos (P2).

How to use DevAgentRadar

DevAgentRadar is a public evidence radar, not a vendor roundup. Read GitHub-style version tags before HTML changelogs; if a body is omitted, do not fill the gap from memory or marketing. Use For developers as local upgrade/config actions and For teams as patch, identity, MCP, and policy actions. Open proposals are suggested next steps with an audience and priority—they are not proof the change is done. Re-check the next brief before pinning models, instruction filenames, or security controls that this window only showed in preview, HTML, or partial notes.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.277: Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Be — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.50.0: Support GPT-6 Astra models #11869 · Tool calling for goose-agent [#11627](https://github.com/aaif-goose/goose/ — source

• OpenAI Codex CLI rust-v0.154.0: GPT-6-Astra is now available in the model picker and Amazon Bedrock catalogs. (#42879, #42619) · Experimental worktree support lets you create isolated checkout — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.29: Allow Codex OAuth model filtering to recognize integer GPT versions like gpt-6 · Fixes issue of gpt-6-astra not showing up for openai subscription users · **T — source

• Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

• Factory Droid v0.215.0 — · Desktop v0.172.0 (September 8, 2026): Streaming terminal responses, organization Web Search control, unified connector settings, and steadier sessions · Stream responses as they arrive - A new t — source

Open proposals

• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Enable Tabnine CLI and IDE Beta Agent under Teams > Features (audience: team, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)