Radar brief — 2026-09-27

What the evidence shows

Fifteen curated signals across a 23-assistant window. Versioned GitHub/changelog evidence is the useful core (~49% of the mix). Several HTML product pages bundle older notes into the same blob; one source in the window reported errors. Large GitHub notes also omit most bullets (bodyOmitted of 79–131 on the biggest CLI drops), so this brief only judges what is actually listed.

GitHub / versioned releases (preferred)

HTML changelogs (noisier; treat as corroboration)

Open proposals (7): pin Cline / Cline CLI defaults; Zed spawn_agent model + BYOK; Windsurf 3.10.35 + ACP MCP; two Grok CLI prompt/MCP cleanups (no Grok CLI release in this evidence); an OpenCode verification-video proposal that does not belong in an upgrade decision.

For developers

• Pin the model before any Cline upgrade. v4.1.21 will retarget unpinned GitHub Copilot, Vertex, and nine other providers to Claude Opus 5.5. Confirm cost, context, and tool behavior on a throwaway thread first.
• Take Cline CLI v3.0.65 if you run llama.cpp / Ollama / LM Studio: long answers that used to die at the leftover-context cap now compact once, retry, and keep the partial. Do not rely on the hub’s old 8s Windows start window.
• Claude Code v2.1.282 is a resume/thinking patch, not a cosmetics patch. Re-test --continue / --resume, /model while a turn is running, and any --tools allowlist that omits a built-in from earlier in the thread. Read the new telemetry ignore list in claude doctor.
• Codex CLI: treat rust-v0.156.0 as a defaults change. Voice is on unless you toggle it (F8 / /voice settings). Worktrees are on by default. Try /tui only if you want fullscreen search/mouse/copy; use --no-daemon if the background server is in the way.
• Zed v1.22.0-pre: pass model on every spawn_agent call; do not inherit the parent by accident. BYOK keys are required for Opus 5.5 and GPT-6 Astra/Sol/Luna. This is a pre-release — do not standardize the team on it yet.
• Goose v1.51.0: if auto-compact is set to 100%, that is now off. Prefer the new MCP version/retry path; expect doctor to require the Developer extension.
• Antigravity 1.2.10: set verbosity to medium for agent traces you can actually read; expect fewer sandbox-bypass prompts around artifact/scratch dirs.
• OpenCode v1.18.32: if you attach images on Bedrock, only Claude / Nova / Llama 4 get the hoist. Everyone else was the bug.

For teams

• Budget and policy, not just DX: Cline’s unpinned-default move is a fleet cost event. Pin Copilot/Vertex (and the other 17) in org config before users pull v4.1.21. Two P4 proposals already track this.
• Managed MCP is becoming exclusive. Claude Code’s allowClaudeInChromeWithManagedMcp is the knob if Chrome and a locked managed-mcp.json must coexist; without it, Chrome is blocked by name. Codex 0.155 adds Touch ID for local MCP; 0.156 refreshes MCP creds after OAuth 503. Goose adds an operator allowlist for gateway pairing. Inventory who can pair, approve, and refresh tokens.
• Upgrade Windsurf Devin Desktop to v3.10.35 for the M6 crash, command-center leak, and ACP HTTP/SSE MCP. If you are older than 3.10.31, Restricted Mode missed nested-object workspace settings (CVE-2026-81376).
• Tabnine: skip 6.6.0/6.6.1; land on v6.6.2 so expired tokens re-auth and org admins can set per-user/per-team caps again. Installation admins still own the org-wide monthly cap.
• Factory Droid: medium autonomy is the new session default — that is a permissions change, not a UI tweak. Recalibrate Droid Shield after the false-positive cut so Git and secret scanning still match policy. Org-managed Databricks means members bring their own account; define that onboarding path.
• Kiro HTML notes (artifacts, ARM64, region routing, /model reasoning) are directionally useful for IDE/CLI estates, but they are not GitHub-grade. Validate on a canary install, especially CLI 2.23.1.
• Cline js-yaml 4.3.2 is a real parser-security bump for rule/skill frontmatter — worth the extension update even if you pin models and ignore the catalog drama.

What to ignore

• The “+79 / +128 / +131 more changes” tails. They are not evidence.
• Kiro 2.23.1 as a feature release; the page is 2.23.0 material with a patch URL.
• Windsurf’s single changelog blob as if v3.10.23–3.10.35 all shipped today.
• Tabnine v6.6.0 / v6.6.1 (explicitly unstable) and any “Enterprise Agent powered by OpenCode” claim that only appears in those notes.
• OpenCode’s Grok 4.7 / DeepSeek doc PR as a platform shift; the versioned payload is two provider fixes.
• Factory/Kiro/Tabnine marketing phrasing (“durable artifacts”, “command center”) until a GitHub tag repeats it.
• The OpenCode PR-verification-video proposal. It is not an assistant-behavior signal.
• Zed model names (GPT-6 family, Opus 5.5 BYOK) as GA availability outside that pre tag.

Watch next

• Whether teams actually pin Cline before Copilot/Vertex traffic lands on Opus 5.5 (two open P4s).
• Codex voice-default and worktree-default fallout: mic surface, privacy reviews, unexpected git worktrees.
• Zed v1.22.0 stable: per-spawn model overrides and BYOK either stick or get reworked.
• Claude Code’s omitted remainder of v2.1.282 — tags include breaking/sandbox/permissions, but those bullets are not in the public excerpt.
• MCP credential and managed-config races (Codex OAuth 503, Claude exclusive managed-mcp.json, Goose gateway allowlist, Windsurf ACP-passed servers).
• Grok CLI proposals (prompt tag rename, drop legacy managed MCP) — tracked, but no Grok CLI release is in this evidence.
• Default-model gravity: Cline → Opus 5.5, Zed SuperGrok/xAI → Grok 4.7, OpenCode Zen/Go adding Grok 4.7.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed of AI coding assistants — GitHub tags and changelogs over blogs and launch posts. Use this brief to decide what to upgrade, what to pin, and what not to believe. Prefer the GitHub table; use HTML rows only as leads. If a note says bodyOmitted, do not infer the missing work. Pair the brief with the open proposals (Cline pins, Zed spawn_agent, Windsurf 3.10.35) and re-check after the next versioned tag, not after the next marketing page.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 7
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.282: Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width · Added a startup notic — source

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.51.0: Route Desktop to state-machine loop via ACP prompt meta #11247 · EUrouter as a declarative provider [#11619](h — source

• Google Antigravity 1.2.10: Added medium verbosity mode to /config, between high and low, which groups related tool calls and thoughts into concise summaries (such as `Explored N f — source

• Zed AI v1.22.0-pre: This week's release includes BYOK support for Claude Opus 5.5 (Anthropic) and GPT-6 Astra, Sol, and Luna (OpenAI), per-call model overrides in spawn_agent, au — source

• Cline v4.1.21: New provider: ai&, an OpenAI-compatible endpoint serving open-weight models from Japan. · Refreshed the model catalog to 6,386 models across 209 providers. · Th — source

• Cline cli-v3.0.65: Long sessions on local models no longer die mid-answer at the output-token limit. llama.cpp, Ollama, and LM Studio cap generation at whatever context is left, w — source

• OpenCode v1.18.32: Fixed Bedrock image attachments so they are only hoisted for Claude, Nova, and Llama 4 models. · Fixed Together AI streaming usage reporting. · **Thank you to 1 — source

• Kiro v1.1.70: 1.1.70 Sep 24, 2026 Agent Artifacts and Native ARM64 Builds IDE 1.1 lets agents produce durable artifacts you can review and return to, adds native ARM64 builds — source

• Windsurf v3.10.35: v3.10.35 September 24, 2026 Devin Desktop Devin Desktop no longer crashes at startup on Apple Macs using M6 chips · Fixed a memory leak with the agent command c — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Tabnine v6.6.2: v6.6.2 September 22, 2026 Bug Fixes Accounts: Fixed requests made with an expired or invalid sign-in token returning a server error instead of prompting you to — source

• Factory Droid v0.223.0 — · Desktop v0.180.0 (September 19, 2026): Session forking, PyCharm, Databricks connector, streaming chat tables, and custom model credential fixes · Fork sessions from sidebar - You can now fork a s — source

Open proposals

• Upgrade Cline CLI to v3.0.65 and pin the 19 new provider defaults (audience: everyone, P4)
• Pin Cline models so v4.1.21 does not default GitHub Copilot and Vertex to Claude Opus 5.5 (audience: everyone, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Pass an explicit model to every spawn_agent call and add BYOK keys for Opus 5.5 and GPT-6 (audience: developer, P3)
• Upgrade Windsurf Devin Desktop to v3.10.35 and pass HTTP/SSE MCP servers via ACP session/n (audience: everyone, P3)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)