Radar brief — 2026-09-23

What the evidence shows

GitHub-tagged releases dominate the high-signal end of the window. HTML changelogs are half the mix (49% GitHub/changelog vs HTML) and should be read more narrowly.

HTML / docs changelogs (noisier; often bundle several dates):

One source in this window reported errors; treat HTML CVE writeups as actionable but not as full advisories.

For developers

• Codex CLI: Upgrade through rust-v0.156.0 if you live in the TUI. Opt into /tui on next launch, use /usage before blaming the model for cost, and expect worktrees on by default. Voice is no longer experimental—mute with F8 or /voice settings if a shared office is not the place for a default-on mic. Do not assume the omitted +128/+131 changes.
• Claude Code: If the repo has no CLAUDE.md, add or review AGENTS.md—v2.1.277 will load it. Keep /config → Project instructions as the switch. Do not expect this on Bedrock/Vertex/Foundry yet. If an IDE-bundled older CLI shares the machine, this build is the one that stops surprise logouts.
• Goose v1.51.0: Desktop now goes through the ACP state-machine loop. If Desktop/backend pairing or streamed thinking looks different, that is the intended routing change—not a random regression. Check operator allowlists before pairing a gateway.
• Zed v1.21.0-pre: Turn on SuperGrok only if you subscribe; leave agent.prevent_idle_sleep unless you want laptops sleeping mid-turn; DeepSeek Flash 4.1 is in the panel. This is a pre tag.
• Cline Desktop 0.0.26–0.0.27: Install gh, stay signed in, and keep origin on GitHub.com to see PR/CI in the composer. Use 0.0.27 if sign-in errors stacked or sign-out bounced you back in.
• Antigravity 1.2.1: Set excludeDefaultComponents: true on custom-agent frontmatter when you want hooks without default tools. Prefer --continue after this fix if you work in subdirectories.
• Factory Droid: Use the transcript panel to stop a running subagent (v0.225.0). Recheck Droid Shield if it previously blocked ordinary Git.

For teams

• Patch Windsurf to v3.10.31 on any Devin Desktop install that uses Restricted Mode. Nested-object workspace settings bypassed the control (CVE-2026-81376). This is the P5 team proposal in the queue.
• Tabnine v6.6.0: Treat CVE-2026-64642 as an infra patch, not an agent feature. Keep the IDE Beta agent off until an installation admin enables it and a team lead turns it on under Teams → Features. Expect MCP/tool usage broken out on the Agent Usage page. Optional inference proxy is off by default and needs the account manager.
• Codex worktrees default changes isolation assumptions: agents can spawn worktrees without an extra flag. Decide whether that is allowed on shared runners and whether /daemon / --no-daemon matches your background-server policy.
• Claude Code gateways: CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 plus upstream headers: are for forward-proxy-only egress. Roll them with the proxy team, not as a laptop env var.
• Goose: Operator allowlist for gateway pairing is a control, not a convenience flag. ACP Desktop routing is a behavior change for everyone on v1.51.0.
• Kiro V3: Cloud configuration applied to local CLI sessions does not write .kiro. That is convenient and a compliance gap—decide whether cloud Steering/Skills/Hooks may land in local sessions.
• Cline / Factory / Antigravity: MCP allowlists, schema-open objects, and “stop the subagent” are now UI-visible. Put them in the team runbook so on-call is not discovering them mid-incident.

What to ignore

• The second Kiro 2.21.4 signal (changelog patch URL, score 62, empty tags)—duplicate of the fuller v2.21.4 note.
• Windsurf’s changelog bundling 3.10.31 + 3.10.27 + 3.10.23 as if they were one release. Act on 3.10.31 for the CVE; do not treat older bullets as new.
• Zed Guild marketing and “this week’s release” prose. The actionable bits are SuperGrok, prevent_idle_sleep, and DeepSeek Flash 4.1 on a prerelease.
• OpenCode v1.18.32 as a platform shift. It is model-attachment and usage reporting, plus catalog lines for DeepSeek V4.1 Flash / Grok 4.7.
• Any claim about the omitted Codex (+128/+131), Claude (+86), Goose (+25), Zed (+39), or Cline (+36/+11) tails.
• Open proposals that name Grok CLI prompt/MCP cleanups: they are in the proposal queue, not in this evidence JSON—do not treat them as shipped.

Watch next

• Codex voice-default and worktree-default fallout (privacy, CI isolation, /usage as the cost pane).
• Whether Claude’s AGENTS.md path reaches Bedrock/Vertex/Foundry, or stays CLI-cloud only.
• Goose Desktop ACP routing (open P5 proposal for everyone) and whether gateway pairing allowlists block real operators.
• Windsurf Restricted Mode: confirm nested-object settings are actually rejected after 3.10.31.
• Tabnine enterprise CLI vs admin-gated IDE beta—same agent, two rollout switches.
• Zed 1.21.0 stable: keep v1.21.0-pre off mandatory images until it loses the pre tag.
• Seven open improvement proposals remain; P5s are Goose ACP routing and Windsurf CVE-2026-81376.

How to use DevAgentRadar

This brief is a public, evidence-only cut across 23 tracked assistants, 15 signals, and 7 open proposals. Prefer the GitHub-tagged rows; treat HTML changelogs as corroboration. Developers should pick one upgrade that changes daily workflow (Codex TUI/voice, Claude AGENTS.md, Cline PR row, Factory stop-subagent). Teams should patch Windsurf 3.10.31 and Tabnine 6.6.0 first, then decide policy for default worktrees, cloud-to-local config, and admin-gated agents. If a change is not in the tables above, it is not in this window—do not fill gaps from vendor blogs.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 7
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• Claude Code v2.1.277: Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Be — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.51.0: Route Desktop to state-machine loop via ACP prompt meta #11247 · EUrouter as a declarative provider [#11619](h — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Cline desktop-v0.0.26: The composer now shows the current branch's GitHub pull request — PR number, merge status, changed-line totals, and CI checks. · Click through to open it in you — source

• Cline desktop-v0.0.27: An expired Cline sign-in now produces one actionable error instead of two dead ends. · A turn that fails before the runtime takes the prompt was reported twice — source

• Google Antigravity 1.2.1: Added support for excludeDefaultComponents: true in custom agent Markdown frontmatter, allowing custom agents to opt out of default prompt sections and built- — source

• Windsurf v3.10.31: v3.10.31 September 16, 2026 Devin Desktop Restricted Mode blocks restricted workspace settings written in nested object form, not just the dotted form (CVE-2026 — source

• OpenCode v1.18.32: Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models. · Fixed Together AI streaming usage reporting. · **Thank you to 1 — source

• Kiro v2.21.4: 2.21.4 Sep 11, 2026 · 2.21.3 Sep 10, 2026 · 2.21.2 Sep 8, 2026 +1 more Session Dashboard, Configuration Panel, and Cloud Sync Browse and manage local and cloud — source

• Tabnine v6.6.0: v6.6.0 September 15, 2026 Features and Improvements Enterprise Agent: Tabnine CLI, powered by OpenCode : Now available to all customers. · One installer for mac — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Factory Droid v0.217.0 — · Desktop v0.174.0 (September 11, 2026): Browser shortcuts, smoother command animations, cleaner retries, and clearer organization controls · Smoother command animations - Long-running commands now — source

Open proposals

• Route Goose Desktop through the ACP state-machine loop after v1.51.0 (audience: everyone, P5)
• Install Windsurf v3.10.31 to close nested Restricted Mode bypass (CVE-2026-81376) (audience: team, P5)
• Stop a running subagent from its panel in the session transcript (audience: developer, P4)
• Enable prevent_idle_sleep, SuperGrok, and DeepSeek Flash 4.1 in Zed Agent Panel (audience: developer, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)