Radar brief — 2026-09-28

What the evidence shows

15 curated signals across 23 tracked assistants. Trusted source mix is 49% GitHub/changelog vs HTML. One source in this window reported errors. Several high-score GitHub notes omit large change tails (+79, +128, +131)—those omitted items are unknown, not implied.

GitHub / versioned releases (prefer these)

HTML / product changelogs (noisier; treat as secondary)

For developers

• Pin Cline models before v4.1.21. If GitHub Copilot, Vertex, or any of the other unpinned providers are in use, the resolved default can jump—11 of 19 land on Claude Opus 5.5. Do not rely on “whatever the provider used last week.”
• Upgrade Claude Code to v2.1.282 if you --continue / --resume, use extended thinking, or mix /model and other slash commands mid-turn. The excerpted fixes are about dropped reasoning, rewritten history, and 400s on undecryptable web-search history. After upgrade, read the new telemetry notice and claude doctor / /status output; project settings may have been ignoring or disabling telemetry without you seeing it.
• Treat Codex rust-v0.155.0 → rust-v0.156.0 as a behavior jump, not a polish bump. Voice moves from /experimental to default (F8 to toggle). Worktrees default on. Optional /tui adds transcript search and mouse copy. Touch ID for MCP is in 0.155; proxy login recovery and MCP refresh-on-503 are in 0.156. Both notes are tagged breaking with huge omitted tails—read the full GitHub notes before scripting the CLI.
• On Zed v1.22.0-pre, pass model on every spawn_agent call if subagents must not inherit the parent or the configured subagent model. BYOK is explicit: Anthropic key for Opus 5.5, OpenAI key for GPT-6 Astra/Sol/Luna. This is a prerelease.
• Local-model users (Cline app + CLI): long replies that hit the leftover-context cap now compact and retry once; partial answers are kept. That is a session-shape change, not just a nicer error.
• Antigravity 1.2.10: try medium verbosity when high-verbosity tool spam is the problem; sandbox bypass prompts should drop because the agent now treats its artifact/scratch dirs as in-sandbox.
• OpenCode v1.18.33: if you paste debug config into tickets, credentials/headers should now be redacted—verify before sharing anyway. Cloudflare AI Gateway streams should actually respect timeouts.
• Goose v1.51.0: auto-compact 100% is disabled, not “always compact.” MCP HTTP retries and preferred version are real; operator allowlist affects gateway pairing.
• Factory Droid: you can stop a live subagent from its panel (v0.225.0). Do not assume autonomy is off on a new session after v0.223.0.

For teams

• Cost and default-model policy (Cline). Unpinned Copilot/Vertex-style setups can silently move to Opus 5.5. Pin org defaults, then roll v4.1.21 / CLI v3.0.65. Matching open proposals: pin the 19 provider defaults; pin so Copilot/Vertex do not flip.
• Managed MCP vs Chrome (Claude Code). Exclusive managed-mcp.json previously blocked claude --chrome; allowClaudeInChromeWithManagedMcp is the explicit override. Decide that as policy, not as a local flag surprise. The blocked-Chrome error now names the setting.
• Telemetry audit (Claude Code). Startup + /status + claude doctor now list ignored or off telemetry variables in project settings. Use that as an inventory, not as a new collection program.
• Voice and worktrees in shared environments (Codex). Default-on voice implies microphones and bundled audio runtimes on Linux/Windows. Default-on worktrees implies extra git worktrees on disk. Set /voice settings and worktree policy before a fleet upgrade. Touch ID for MCP is Mac-local TUI only in 0.155.
• Skip Tabnine v6.6.0 / v6.6.1. v6.6.2 is the fix train: re-auth on expired tokens, org per-user/per-team limits restored (org-wide monthly cap still needs an installation admin). 6.6.0 also shipped Tabnine CLI “powered by OpenCode” and a beta IDE agent—do not evaluate those on the unstable builds.
• Windsurf Devin Desktop: take v3.10.35 for M6 crash + ACP-passed HTTP/SSE MCP. If Restricted Mode is in play, v3.10.31’s CVE-2026-81376 (nested object form vs dotted form) is the security floor. Open proposal: upgrade and pass those MCP servers via ACP session/new.
• Goose gateway pairing now has an operator allowlist—treat pairing as an access-control change, not a convenience toggle.
• Factory Droid autonomy default is medium, not off (v0.223.0). That is a fleet-wide agency change. Droid Shield in v0.225.0 is less noisy on Git and secret-like strings; recailibrate what “Shield blocked this” means.
• Cline js-yaml 4.3.2 is a security bump on the parser for rule/skill frontmatter—worth the bump even if you pin models and ignore the catalog churn.
• Kiro / Factory HTML notes are secondary. Use them for artifacts, ARM64, Databricks, PyCharm—not as the source of record when a GitHub tag exists for the same week.

What to ignore

• Omitted change tails. Do not infer features, breaks, or CVEs from “+79 / +128 / +131 more changes.”
• OpenCode docs listing Opus 5.5 and GPT-6 Sol/Luna as proof those models work in the product. The release evidence for v1.18.33 is timeouts, MCP launcher errors, redaction, and Gemini thinking defaults.
• Kiro pages that re-advertise IDE 1.0 highlights inside the v1.1.70 note, and the 2.23.1 patch page that is mostly 2.23.0 copy with mixed dates and empty tags.
• Tabnine v6.6.0 / v6.6.1 (explicitly unstable) and Factory Droid chrome (menu styling, table column sizing) unless you are already on those apps.
• Zed “GPT-6” / Grok 4.7 headlines without the -pre qualifier. BYOK and recommended-default changes are real in v1.22.0-pre; they are not a stable editor release in this evidence.
• A single error-reporting source in this window. Do not generalize it into an outage.

Watch next

• Open proposals (7): Cline CLI v3.0.65 + pin 19 defaults; pin Cline so Copilot/Vertex stay off Opus 5.5; Zed spawn_agent model + BYOK for Opus 5.5/GPT-6; Windsurf v3.10.35 + ACP HTTP/SSE MCP; two Grok CLI prompt/MCP cleanup items (developer); OpenCode PR #38252 verification videos.

• Whether Codex voice-default and worktree-default survive the next tagged release, and whether the omitted breaking details get written down.

• How far Opus 5.5 / GPT-6 Astra-Sol-Luna actually propagate beyond Cline defaults, Zed BYOK, and OpenCode docs.

• Goose ACP/Desktop state-machine + operator allowlist in real gateway deployments.

• Full Claude Code v2.1.282 notes once the 79 omitted items are read—tags include sandbox, permissions, skills, hooks, and breaking.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed for AI coding assistants: versioned GitHub releases outrank blogs and HTML changelogs, omitted bodies are treated as unknown, and scores are not a recommendation to upgrade. Use this brief to decide what to pin, what to read in full, and what to ignore; use the open proposals as concrete follow-ups (Cline pins, Zed spawn_agent, Windsurf ACP MCP). Re-check the source URL before a fleet move—especially when a release is tagged breaking, is -pre, or is marked unstable.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 7
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.282: Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width · Added a startup notic — source

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Goose v1.51.0: Route Desktop to state-machine loop via ACP prompt meta #11247 · EUrouter as a declarative provider [#11619](h — source

• Google Antigravity 1.2.10: Added medium verbosity mode to /config, between high and low, which groups related tool calls and thoughts into concise summaries (such as `Explored N f — source

• Zed AI v1.22.0-pre: This week's release includes BYOK support for Claude Opus 5.5 (Anthropic) and GPT-6 Astra, Sol, and Luna (OpenAI), per-call model overrides in spawn_agent, au — source

• Cline v4.1.21: New provider: ai&, an OpenAI-compatible endpoint serving open-weight models from Japan. · Refreshed the model catalog to 6,386 models across 209 providers. · Th — source

• Cline cli-v3.0.65: Long sessions on local models no longer die mid-answer at the output-token limit. llama.cpp, Ollama, and LM Studio cap generation at whatever context is left, w — source

• OpenCode v1.18.33: Cloudflare AI Gateway models now honor provider response and stream timeouts. (@danlapid) · MCP browser launch failures are now reported when the launcher exits — source

• Kiro v1.1.70: 1.1.70 Sep 24, 2026 Agent Artifacts and Native ARM64 Builds IDE 1.1 lets agents produce durable artifacts you can review and return to, adds native ARM64 builds — source

• Windsurf v3.10.35: v3.10.35 September 24, 2026 Devin Desktop Devin Desktop no longer crashes at startup on Apple Macs using M6 chips · Fixed a memory leak with the agent command c — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Tabnine v6.6.2: v6.6.2 September 22, 2026 Bug Fixes Accounts: Fixed requests made with an expired or invalid sign-in token returning a server error instead of prompting you to — source

• Factory Droid v0.223.0 — · Desktop v0.180.0 (September 19, 2026): Session forking, PyCharm, Databricks connector, streaming chat tables, and custom model credential fixes · Fork sessions from sidebar - You can now fork a s — source

Open proposals

• Upgrade Cline CLI to v3.0.65 and pin the 19 new provider defaults (audience: everyone, P4)
• Pin Cline models so v4.1.21 does not default GitHub Copilot and Vertex to Claude Opus 5.5 (audience: everyone, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Pass an explicit model to every spawn_agent call and add BYOK keys for Opus 5.5 and GPT-6 (audience: developer, P3)
• Upgrade Windsurf Devin Desktop to v3.10.35 and pass HTTP/SSE MCP servers via ACP session/n (audience: everyone, P3)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)