Radar brief — 2026-09-29

What the evidence shows

Window: 15 curated signals across 23 tracked assistants. Trusted mix is 49% GitHub/changelog vs HTML. Eight open improvement proposals. One source in the window reported errors. Dominant tags: model, mcp, cli, agent, then security / pricing / ide / breaking.

GitHub tags (prefer these). Several notes omit most of the diff (bodyOmitted); only listed bullets are facts.

HTML changelogs (noisier: mixed older notes, marketing copy, omitted bodies).

For developers

• Pin every Cline provider that does not already pin a model before v4.1.21. Unpinned GitHub Copilot and Vertex now resolve to Claude Opus 5.5. Same catalog bump is why local llama.cpp/Ollama/LM Studio hits compact-and-retry once at the output-token cap instead of ending the task.
• Upgrade Claude Code to v2.1.282 if you --continue / --resume, use extended thinking, or mix /model and other slash commands mid-turn. The listed fixes are about history being resent in a changed form and thinking being dropped—not a new model.
• Codex CLI rust-v0.156.0 changes launch defaults: voice is on (F8 to toggle), worktrees are on, /tui is opt-in fullscreen. If you script Codex, decide on --no-daemon vs /daemon and expect /usage to expose plugin/skill token totals.
• Zed v1.22.0-pre only: pass model on spawn_agent if you do not want the subagent to inherit the parent; BYOK keys are required for Opus 5.5 and GPT-6 Astra/Sol/Luna. Do not treat this as a stable Zed release.
• Goose v1.52.0 recipes that exceed 32 params, 200 select options, or 128 KiB will be rejected. Voice is desktop-app, not a substitute for the CLI path.
• Antigravity 1.2.13: a retry-delay over 30 seconds or a daily/billing cap is a hard stop, not a 5-second loop. Plan long jobs around quota type, not around spinner time.
• OpenCode v1.18.33: safe to dump debug config (credentials redacted). If an MCP browser helper dies on launch, the failure is now reported instead of hanging.
• Cline SDK v0.0.87 on Windows with Clash/v2ray/corporate HTTP(S)_PROXY: hub startup should work; if token dashboards looked high, reasoning was being counted twice.
• Factory Droid v0.229.0: custom models are now a terminal operation, not only an app JSON form. v0.225.0 is the build that can stop a live subagent and that loosens Droid Shield on safe Git.

For teams

• Cline v4.1.21 is a fleet default-model event. Anyone on Copilot or Vertex without an explicit pin will start paying/behaving like Opus 5.5. Pair the upgrade with the open pin proposals; do not rely on “whatever the catalog resolved last month.”
• Claude Code v2.1.282 is the managed-MCP / telemetry build. allowClaudeInChromeWithManagedMcp is how claude --chrome coexists with exclusive managed-mcp.json. Startup, /status, and claude doctor now list telemetry variables that were ignored or that turned telemetry off—use that in audit, not screenshots of .env.
• Codex MCP auth is no longer “just a token file.” rust-v0.155.0 adds Touch ID for local TUI MCP on supported Macs and accurate expired-OAuth reconnect copy; 0.156.0 refreshes MCP credentials after OAuth discovery 503s and recovers login through system proxies. Roll those two tags together.
• Tabnine: skip 6.6.0 / 6.6.1 (marked unstable). 6.6.2 restores org per-user and per-team cost limits (installation admin still owns the monthly total cap) and stops expired-token 500s. Self-managed models that had Agent on / Chat off were rejected as “Unsupported model” in 6.6.0; after 6.6.2 you can turn Chat back off. CLI (OpenCode-powered) and IDE agent beta shipped in the 6.6.0 notes on that same HTML page—treat as bundled history, not a second independent signal.
• Windsurf Devin Desktop: 3.10.35 for M6 crash, command-center leak, SSH/WSL folder pick, and ACP HTTP/SSE MCP. Do not skip 3.10.31 Restricted Mode (CVE-2026-81376) if nested-object workspace settings could bypass the dotted-form block.
• Goose v1.52.0: enforce the recipe size caps in shared recipe repos; custom provider config files are now protected from casual overwrite.
• Kiro (HTML, two product lines): IDE v1.1.70 is artifacts + ARM64 + region-routed enterprise profiles. CLI 2.23.1 makes /model the reasoning control surface and allows V3 cloud sessions before a repo is attached—policy that assumed “no repo = no cloud” needs a rewrite.
• Open proposals already on the radar: pin Cline models (everyone, P4); Cline CLI pin/upgrade (everyone, P4); Windsurf 3.10.35 + ACP MCP (everyone, P3); Goose recipe shrink (team, P3); Zed explicit spawn_agent model + BYOK (developer, P3); Factory custom models / loop pill (developer, P5). Two Grok CLI proposals sit in the queue with no matching Grok signal in this brief—do not execute them from this page.

What to ignore

• Omitted bodies. Claude Code (+79), Codex 0.156.0 (+128) and 0.155.0 (+131), Zed (+52), Goose (+25), Cline SDK (+19), and several HTML notes are truncated. Do not infer features from the +N more changes counters or from tags that are not backed by a listed bullet (breaking on Claude/Codex/Factory is a tag, not a documented breaking list here).
• Zed v1.22.0-pre as production. BYOK and subagent model selection are real PRs in that tag; the channel is still pre.
• Kiro HTML as a single version. v1.1.70 is IDE 1.1 (and even recaps IDE 1.0.437 / 1.0.337). 2.23.1 is CLI. Dates on those pages are 21–24 Sep 2026 as published; do not collapse them into one “Kiro 1.1” story.
• Windsurf and Factory pages that concatenate prior patches. 3.10.31/3.10.27/3.10.23 and Droid desktop version numbers are on the same URLs as the headline tags. Cite the tag you actually install.
• Tabnine 6.6.0 feature launch copy while the vendor still labels 6.6.0 and 6.6.1 unstable.
• Marketing synonyms for models in docs-only lines (OpenCode Zen docs adding Opus 5.5 / GPT-6 Sol / Luna) until the runtime pin in your client matches.
• Internal scores, “+N more,” and theme counters as quality. They ranked the window; they are not product guarantees.

Watch next

• Whether Cline’s 19 new defaults stick or get reverted after teams pin Copilot/Vertex; the two Cline pin proposals are the concrete follow-through.
• Codex voice-default and worktree-default fallout in CI and shared terminals (mic runtimes on Linux/Windows, accidental worktrees).
• MCP auth UX converging: Claude managed-MCP + Chrome, Codex Touch ID / OAuth 503 refresh, Windsurf ACP HTTP/SSE, OpenCode launcher-exit errors.
• Opus 5.5 and GPT-6 Sol/Luna showing up as BYOK (Zed pre), first-class models (Goose), and silent defaults (Cline)—three different risk profiles, same names.
• Goose recipe enforcement breaking shared automations over 32 params / 128 KiB.
• Grok CLI proposals (prompt tag rename; drop legacy managed MCP / shadowed skills) if a versioned Grok tag appears; they are not evidenced as shipped today.
• Next GitHub tags that fill the omitted 79/128/131-line holes on Claude Code and Codex—those are the only honest source for the rest of this week’s CLI surface area.

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first feed for AI coding assistants. Read What the evidence shows as the only factual layer: assistant + version + listed signal, with GitHub release tags preferred over vendor HTML. Act from For developers (local pins, flags, resume/thinking bugs, prerelease warnings) and For teams (defaults, MCP policy, CVE/cost-control, fleet skips). Use What to ignore to drop omitted diffs, bundled changelog history, and pre tags. Track Watch next and the eight open proposals as the work queue—not as shipped releases. If a name, version, or CVE is not in the tables above, it is not in this brief.

Evidence appendix

• Evidence window: top curated signals (versioned releases preferred)
• Assistants tracked: 23
• Signals in this brief: 15
• Trusted source mix (GitHub/changelog vs HTML): 49%
• Open improvement proposals: 8
• Sources reporting errors: 1

High-signal releases used

• Claude Code v2.1.282: Added a maxProseWidth setting that caps the width of Claude's prose in wide terminals while tables and code blocks keep the full width · Added a startup notic — source

• OpenAI Codex CLI rust-v0.156.0: Choose an optional fullscreen UI with /tui for your next launch, including transcript search, mouse selection, and right-click copying. (#46732, #46734, #4688 — source

• OpenAI Codex CLI rust-v0.155.0: Added experimental /voice conversations with live transcripts and microphone controls on supported builds, enabled through /experimental. (#43581, #43651, # — source

• Google Antigravity 1.2.13: Improved rate-limit handling when the model API returns a retry delay: the CLI now waits the delay the server asks for instead of a fixed 5 seconds, and stops r — source

• Cline sdk/sdk/v0.0.87 — The hub now starts reliably on Windows machines with a system proxy. · Bun's fetch sends loopback requests through HTTP(S)_PROXY with no localhost bypass, so — source

• Zed AI v1.22.0-pre: This week's release includes BYOK support for Claude Opus 5.5 (Anthropic) and GPT-6 Astra, Sol, and Luna (OpenAI), on-the-fly model selection for new subagents, — source

• Cline v4.1.21: New provider: ai&, an OpenAI-compatible endpoint serving open-weight models from Japan. · Refreshed the model catalog to 6,386 models across 209 providers. · Th — source

• OpenCode v1.18.33: Cloudflare AI Gateway models now honor provider response and stream timeouts. (@danlapid) · MCP browser launch failures are now reported when the launcher exits — source

• Goose v1.52.0: Live voice conversations in the desktop app #12093 · Decisions provider crate with OpenRouter and Jev implemen — source

• Kiro v1.1.70: 1.1.70 Sep 24, 2026 Agent Artifacts and Native ARM64 Builds IDE 1.1 lets agents produce durable artifacts you can review and return to, adds native ARM64 builds — source

• Windsurf v3.10.35: v3.10.35 September 24, 2026 Devin Desktop Devin Desktop no longer crashes at startup on Apple Macs using M6 chips · Fixed a memory leak with the agent command c — source

• Factory Droid v0.229.0 — · Desktop v0.186.0 (September 29, 2026): Custom model management, PDF viewer, quoted replies, voice dictation key, plus terminal and app fixes · Custom models in terminal - You can now add, edit, a — source

• Factory Droid v0.225.0 — · Desktop v0.182.0 (September 22, 2026): Default app file opening, subagent controls, Droid Shield accuracy, and desktop sign-in and menu fixes · Open files in default app - You can now open a sess — source

• Tabnine v6.6.2: v6.6.2 September 22, 2026 Bug Fixes Accounts: Fixed requests made with an expired or invalid sign-in token returning a server error instead of prompting you to — source

Open proposals

• Add custom models from the Droid terminal and pause scheduled loops from the chat pill (audience: developer, P5)
• Upgrade Cline CLI to v3.0.65 and pin the 19 new provider defaults (audience: everyone, P4)
• Pin Cline models so v4.1.21 does not default GitHub Copilot and Vertex to Claude Opus 5.5 (audience: everyone, P4)
• Replace <output_efficiency> with <response_guidelines> in Grok CLI prompts (audience: developer, P4)
• Drop legacy managed MCP configs and shadowed platform skills in Grok CLI (audience: developer, P4)
• Shrink Goose recipes to 32 params, 200 select options, and 128 KiB (audience: team, P3)
• Pass an explicit model to every spawn_agent call and add BYOK keys for Opus 5.5 and GPT-6 (audience: developer, P3)
• Upgrade Windsurf Devin Desktop to v3.10.35 and pass HTTP/SSE MCP servers via ACP session/n (audience: everyone, P3)