Radar brief — 2026-09-26

What the evidence shows

Fifteen curated signals across 23 tracked assistants. About half the mix is versioned GitHub/changelog; the rest is HTML/docs pages that often bundle older notes. Six open improvement proposals sit in the queue. One source reported errors—treat contested HTML copy as noisier than GitHub tags.

GitHub-tagged releases (preferred):

HTML/docs changelogs (noisier; some pages mix prior versions):

Dominant themes in the evidence: model, cli, security, agent, mcp. Breaking-change tags appear on several CLI/IDE lines even when the listed bullets are fixes—upgrade notes, not marketing decks.

For developers

• Pin Cline models before you pull v4.1.21 or CLI v3.0.65. If GitHub Copilot, Vertex, or any of the other unpinned providers is in your stack, the resolved default can jump (11 of 19 to Claude Opus 5.5). That is a cost and behavior change, not a catalog curiosity. Same Cline window: local-model runs that used to die at the output cap now compact and retry once—keep the partial answer if both retries fail.
• Upgrade Claude Code to v2.1.282 if you resume sessions. Documented fixes: --continue/--resume rewriting earlier messages; extended thinking dropped by /model, /rename, /artifacts, or a --tools list that omits a built-in; 400s when history holds web-search blobs the API cannot decrypt. Set maxProseWidth if wide terminals turn prose into a wall; tables/code still go full width.
• Treat Codex CLI rust-v0.156.0 as a defaults change. Voice is enabled by default; worktrees are enabled by default; /tui is opt-in fullscreen. Use /usage before you guess at token burn. If you do not want the background server, --no-daemon. Touch ID for MCP and OAuth-503 recovery landed in 0.155.0 and 0.156.0 respectively—upgrade through both if you are behind.
• Goose v1.51.0: auto-compact 100% is now disabled, not “always compact.” Operator allowlist gates gateway pairing. Preserved-thinking compliance is in the Anthropic provider layer; streamed thinking is kept ahead of text/tool calls.
• Antigravity 1.2.10: try medium verbosity (Explored N files style) before living in high. Sandbox should nag less because artifact/scratch paths are in-policy.
• Zed v1.21.0-pre only: agent.prevent_idle_sleep defaults on. Do not roll a pre to a fleet.
• OpenCode v1.18.32: if you attach images on Bedrock, they now hoist only for Claude, Nova, and Llama 4. Grok 4.7 / DeepSeek V4.1 Flash are catalog adds, not a reason to skip pinning.

For teams

• Cline is the policy event. Two P4 proposals already say: upgrade CLI v3.0.65 and pin the 19 new provider defaults; pin so v4.1.21 does not silently point Copilot/Vertex at Claude Opus 5.5. Pair that with the js-yaml 4.3.2 bump—the parser reads rule and skill frontmatter.
• Claude Code managed estates: allowClaudeInChromeWithManagedMcp is the explicit knob for claude --chrome next to an exclusive managed-mcp.json (the block error now names it). Startup, /status, and claude doctor now list telemetry variables that were ignored or that turned telemetry off—audit project settings files, do not assume org policy won.
• MCP credential and host path: Codex recovers proxy login and refreshes MCP OAuth after 503; Goose prefers an MCP version and retries HTTP; Windsurf v3.10.35 finally applies ACP session/new / session/load HTTP/SSE servers (proposal: upgrade and pass those servers). Kiro HTML notes clearer MCP failures—verify on a real client, not the changelog prose.
• Do not skip Windsurf v3.10.31 if you are still below it: Restricted Mode now blocks nested-object restricted workspace settings, not only dotted keys (CVE-2026-81376). v3.10.35 is the crash/MCP follow-on, not a substitute for that control.
• Tabnine: ship v6.6.2, not 6.6.1 (marked unstable). Cost-control admins can set org-wide per-user and per-team limits again; the monthly total cap still needs an installation administrator. Self-managed models with Agent on / Chat off were rejected as “Unsupported model” in 6.6.0—fixed in this line.
• Factory Droid: v0.223.0 defaults new sessions to medium autonomy if nobody chose a level—that is a team default, not a UI tweak. v0.225.0 reduces Droid Shield false positives on safe Git and harmless strings; still review what it stops allowing. Org-managed Databricks means members connect with their own accounts.
• Goose gateway pairing now has an operator allowlist—use it if Desktop/ACP backends are exposed beyond a laptop.
• Zed prevent_idle_sleep default-on will keep machines awake for long agent turns once 1.21.0-pre lands stable. Decide that as a laptop/power policy, not an editor preference.

What to ignore

• The “+79 / +128 / +131 more changes” tails. bodyOmitted means those diffs are not in evidence; do not infer features from the count.
• Kiro v1.1.70 reprinting IDE 1.0.437 / 1.0.337 “highlights.” Those are labeled prior context on an HTML page.
• Factory menu, branch, and Windows title-bar styling. Signal is Shield FPs, subagent stop, autonomy default, connectors.
• Zed Guild community copy in the pre notes.
• OpenCode’s thank-you blurb as if it were a platform release.
• Tabnine 6.6.0/6.6.1 as current—6.6.1 is unstable; 6.6.2 is the fix train.
• Equating HTML marketing changelogs (Kiro, Windsurf, Tabnine, Factory docs) with GitHub tags. Mix is 49% trusted changelog/GitHub; the rest is noisier.
• Empty-tag Kiro CLI 2.23.1 as a fleet driver. Useful if you live in /model; not a security event.

Watch next

• Cost/behavior fallout from Cline’s 19 default-model moves—especially Copilot and Vertex → Claude Opus 5.5 for anyone who never pinned.

• Codex voice-default on shared, SSH, and recorded terminals (0.155 experimental → 0.156 default). Confirm whether /voice settings or F8 is enough for your bar.

• Zed v1.21.0-pre → stable, including whether prevent_idle_sleep stays default-on.

• Open proposals already filed: Cline pin/upgrade (everyone, P4), Windsurf 3.10.35 ACP MCP (everyone, P3), Grok CLI prompt/MCP cleanup (developer, P4), OpenCode PR #38252 videos (everyone, P2).

• Whether MCP OAuth expiry, 503 refresh, and Touch ID/managed-MCP gates become table stakes on every CLI.

• Goose GPT-live + EUrouter + ACP desktop loop—provider routing, not another autocomplete skin.

• The single error-reporting source: if a later window names it, re-rank HTML-only rows.

How to use DevAgentRadar

This brief is a decision queue, not a vendor roundup. Prefer the GitHub tag in the table over a homepage changelog. If you maintain agents, pin models and MCP/managed settings before you take a “small” CLI bump. If you run a team, walk the six open proposals in priority order (Cline pins first). Ignore omitted bodies, mixed-in old highlights, and unstable tags. Re-read this file against the next evidence window—history does not keep a default pinned.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 6
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.282: Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width · Added a startup notic — source

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.51.0: Route Desktop to state-machine loop via ACP prompt meta #11247 · EUrouter as a declarative provider [#11619](h — source

• Zed AI v1.21.0-pre: This week's release includes faster rendering in syntax-highlighted files and Markdown code blocks, a language server command picker, and a setting that keeps y — source

• Google Antigravity 1.2.10: Added medium verbosity mode to /config, between high and low, which groups related tool calls and thoughts into concise summaries (such as `Explored N f — source

• Cline v4.1.21: New provider: ai&, an OpenAI-compatible endpoint serving open-weight models from Japan. · Refreshed the model catalog to 6,386 models across 209 providers. · Th — source

• Cline cli-v3.0.65: Long sessions on local models no longer die mid-answer at the output-token limit. llama.cpp, Ollama, and LM Studio cap generation at whatever context is left, w — source

• OpenCode v1.18.32: Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models. · Fixed Together AI streaming usage reporting. · **Thank you to 1 — source

• Kiro v1.1.70: 1.1.70 Sep 24, 2026 Agent Artifacts and Native ARM64 Builds IDE 1.1 lets agents produce durable artifacts you can review and return to, adds native ARM64 builds — source

• Windsurf v3.10.35: v3.10.35 September 24, 2026 Devin Desktop Devin Desktop no longer crashes at startup on Apple Macs using M6 chips · Fixed a memory leak with the agent command c — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Tabnine v6.6.2: v6.6.2 September 22, 2026 Bug Fixes Accounts: Fixed requests made with an expired or invalid sign-in token returning a server error instead of prompting you to — source

• Factory Droid v0.223.0 — · Desktop v0.180.0 (September 19, 2026): Session forking, PyCharm, Databricks connector, streaming chat tables, and custom model credential fixes · Fork sessions from sidebar - You can now fork a s — source

Open proposals

• Upgrade Cline CLI to v3.0.65 and pin the 19 new provider defaults (audience: everyone, P4)
• Pin Cline models so v4.1.21 does not default GitHub Copilot and Vertex to Claude Opus 5.5 (audience: everyone, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Upgrade Windsurf Devin Desktop to v3.10.35 and pass HTTP/SSE MCP servers via ACP session/n (audience: everyone, P3)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)