Skip to content
Guidance/Daily Briefing
digesteveryonedigestevidenceradaragentmodel10 min read · Oct 4, 2026

Radar brief — 2026-10-04

A busy 36 hours: 18 releases from 8 tools. The signal that will hit daily CLI users first is GitHub Copilot CLI v1.0.92-3 — a pre-conversation Ctrl+E local vs cloud picker, sandbox/Git credential fixes, and retired models removed from the picker. Right behind it: Copilot CLI v1.…

What the evidence shows

New GitHub-style releases first. Several notes omit a large tail of changes (bodyOmitted); those tails are not inferred below.

GitHub Copilot CLIv1.0.92-3
Key Signal & Impact
Ctrl+E environment picker (local vs cloud) before a conversation. Keyboard/paste/mouse stay ordered under load. Sandboxed shells prompt for a network bypass when the proxy blocks a destination; sandboxed Git uses masked credentials and SSH remote rewrites. Sub-agents survive GitHub auth replacement. Retired models removed from the picker and CLI selections.
GitHub Copilot CLIv1.0.90
Key Signal & Impact
Dated 2026-09-30 in the notes: GPT-6.1 Sol in model selection; --mcp-github-auth scopes GitHub account auth to approved MCP origins; session-scoped read-only directory approvals; permission prompts remain answerable after resume; auto-approval now sees messages typed while the agent is working; compaction still returns a summary when instructions ask for tool use. MCP tools recover after transient discovery failures; MCP OAuth reuses a still-valid cached token; MCP calls complete even if servers keep sending progress. One further change omitted.
GitHub Copilot CLIv1.0.90-6
Key Signal & Impact
Same GPT-6.1 Sol add plus permission/auto-approval/compaction/MCP-discovery and Wayland clipboard fixes; voice-mode hints when Space / Ctrl+X V are held while voice is off. Prerelease tag.
Claude Codev2.1.289
Key Signal & Impact
Security/policy: a deny or ask rule on a nested part of a compound shell command now holds over a user-installed mod’s approval on managed machines; Read deny rules apply to files @-mentioned, changed, or selected in the IDE through a symlink; a user-installed plugin can no longer rewrite descriptions of an organization-managed MCP server’s sign-in tools. Terminal freeze on short blocks with many unclosed <script> tags or nested ${. [VSCode] reverts a 2.1.288 claude auth status change that may have made sign-outs more frequent. Plugin list/eval/update, local-folder marketplace staleness, launch freezes, and async plugin-handler session drops also fixed. 15 further changes omitted.
Qwen Codesdk-typescript-v0.1.17
Key Signal & Impact
SDK bundles CLI 0.24.7, 0.24.6, 0.24.5, 0.24.3, 0.24.1, 0.23.3, 0.23.2, 0.23.1, 0.23.0 (same branch/ref as the SDK). Documented on bundled CLI 0.23.0: memory.enableManagedAutoMemory respected (#6941 / #11022); hosts that disable it no longer admit remember/dream requests or managed-memory prompt instructions; size-triggered microcompaction clears old tool results toward a low watermark (#8464) instead of rewriting another prefix every turn; provider prompt-cache reuse across long tool-heavy sessions. 89 further changes omitted.

| Kilo Code | v7.8.3 | Documents viewer: copy-content toolbar button; tab menu Copy Path / Relative Path / File Name / Open in Editor. Manual Fetch Models in Custom Provider settings. @ suggests files from every folder in a multi-root VS Code workspace; files outside the session’s own project still need the usual read approval. Agent Manager keeps the latest selection when another project finishes loading. 39 further changes omitted. | | Kilo Code | v7.8.2 | Pre-release with the same published bullets as v7.8.3. Prefer v7.8.3. | | Crush | v0.97.0 | Turn MCP servers off from the UI (global or local). Git branch display in the TUI. ChatGPT OAuth refresh via Catwalk. Claude Channels (part 2/3): session injection, exactly-once routing, reply-back. Sidebar toggle Ctrl+B. Anthropic cache-creation token counting. Clipboard no longer reports successful copies as failures. 32 further changes omitted. | | Crush | v0.97.1 | Follow-up: remove the Git-branch powerline glyph so the branch still shows without Nerd Fonts. Release also publishes checksum + sigstore verify steps. | | Augment Code | v1.2.0-prerelease.202610021518 / 1216 / 0921 | Install-script prereleases (install.sh). Node SEA binaries (-sea + sidecar .d/). Trust metadata: macOS -sea unsigned (Apple secrets not configured); Linux publishes SHA256SUMS-sea. No product changelog in the notes. | | OpenAI Codex CLI | rust-v0.162.0-alpha.11 / .12 / .13 | Tags only (“Release 0.162.0-alpha.xx”). No changelog body. | | Aider | v0.85.4, v0.82.3, v0.80.4 | HTML history page (aider.chat/HISTORY.html) with version titles only. Low-confidence / noisy versus GitHub notes above. |

Trusted mix this window is 54% GitHub/changelog vs HTML. One tracked source is reporting errors; the empty Aider HTML entries and changelog-less Codex/Augment tags are the weak end of the mix.

For developers

  • Copilot CLI: If you bounce between laptop and cloud runs, Ctrl+E before the conversation in v1.0.92-3 (open proposal: Press Ctrl+E in Copilot CLI to pick local vs cloud). After upgrade, re-check the model picker — retired models were removed, not hidden. On v1.0.90+, GPT-6.1 Sol is a selection, not a rumor; expect permission prompts to still work after a resume, and auto-approval to notice what you type while the agent is running.
  • Claude Code v2.1.289: Upgrade if you use deny/ask rules, @ mentions, or plugins. Confirm Read denies still hold through symlinks, and that compound-shell denies are not overridden by a user-installed mod. In VS Code, the 2.1.288 auth-status behavior is reverted if you were getting bounced to sign-in.
  • Crush v0.97.0 then v0.97.1: Toggle unused MCP servers from the UI instead of editing config to debug tool catalogs. Take v0.97.1 if the new git-branch line showed a missing glyph. Claude Channels is explicitly 2/3 — do not assume the delivery path is finished.
  • Kilo Code v7.8.3: In multi-root workspaces, @ can now see folders added via “Add Folder to Workspace…”. Still approve reads outside the session project. Use Fetch Models when a custom provider’s catalog looks stale.
  • Qwen Code SDK sdk-typescript-v0.1.17: Confirm which bundled CLI you actually ship (notes list 0.24.7 down through 0.23.0). If you patched local memory/dream behavior, 0.23.0 says hosts with memory.enableManagedAutoMemory off no longer need those patches. Do not assume the omitted 89 changes.
  • Skip for daily work until notes exist: Codex rust-v0.162.0-alpha.11–13, Augment v1.2.0-prerelease.* (install plumbing only; macOS SEA unsigned), Aider v0.80.4 / v0.82.3 / v0.85.4.

For teams

  • Copilot CLI (v1.0.90): Roll --mcp-github-auth if MCP servers should only see GitHub auth for approved origins. Treat session-scoped read-only directory approvals as a default-tightening, not a bypass of repo policy. Sandbox Git in v1.0.92-3 authenticates with masked credentials and SSH remote rewrites — verify CI/agent logs no longer print live tokens, and that the network-bypass prompt is an explicit human gate, not a silent allow.
  • Claude Code on managed machines (v2.1.289): This is the patch to take if org deny/ask rules were losing to user-installed mods on compound shell commands, or if plugins could rewrite org-managed MCP sign-in tool descriptions. Pair it with a check that Read denies cover symlink paths from the IDE. Watch auth-churn in VS Code after the 2.1.288 revert.
  • Crush: Org-wide or per-repo MCP off is now a UI action — useful when a server is noisy or unapproved, without deleting config. Cache-creation token counting may change how you read Anthropic usage, not how you are billed in this note.
  • Kilo Code: Multi-root @ increases mention surface; keep the existing out-of-project read approval. Custom-provider Fetch Models should be an operator step, not an unbounded auto-pull, until you trust the catalog.
  • Augment prereleases: Do not treat curl … | bash plus unsigned macOS SEA as a fleet install path.
  • Open team-facing proposals still on the board (not evidenced as shipped here): Spawn agents from ~/.vibe/agents…, Upgrade Goose to v1.53.0….

What to ignore

  • OpenAI Codex CLI alpha.11–13 — tags with no changes listed.
  • Augment Code three near-identical prerelease install notes; they are packaging/trust metadata, not assistant behavior.
  • Aider three version headers on an HTML history page with no bodies. Prefer a real changelog before acting.
  • Kilo Code v7.8.2 once v7.8.3 is the release you can install.
  • Crush’s “QoL by a ton” framing — the evidence is MCP toggle, git branch, Channels 2/3, Ctrl+B, clipboard, cache-creation counts.
  • Anything in a +N more changes / bodyOmitted tail. It was not in the payload.

Watch next

How to use DevAgentRadar

DevAgentRadar is a public, evidence-first radar for AI coding assistants: versions, changelogs, and GitHub releases over marketing pages. isNew means the signal hit the radar in the last 36 hours; mustKnow (none in this window) would mean “almost every daily user of that tool.” Read Headline and What the evidence shows for what actually shipped; For developers / For teams for actions; What to ignore so empty tags and HTML stubs do not drive upgrades. Follow Watch next and the linked open proposals when you want a concrete change in your stack. If a note says changes were omitted, wait for the full release text — we will not invent them.


Evidence appendix

  • New in the last 36 hours: 18 release(s) from 8 tool(s)
  • Evidence window: new releases first, then top curated signals (versioned releases preferred)
  • Assistants tracked: 29
  • Signals in this brief: 40
  • Trusted source mix (GitHub/changelog vs HTML): 54%
  • Open improvement proposals: 8
  • Sources reporting errors: 1

High-signal releases used

  • GitHub Copilot CLI v1.0.92-3: Added · Add a pre-conversation Ctrl+E environment picker to switch between local and cloud runs · Fixed · Keyboard, paste, and mouse input now stay orde — source

  • Qwen Code sdk-typescript-v0.1.17 — This SDK release bundles CLI version: 0.24.7 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.24.6 · Sou — source

  • GitHub Copilot CLI v1.0.90: 2026-09-30 · Add support for GPT-6.1 Sol in model selection · Add --mcp-github-auth to scope GitHub account auth to approved MCP server origins · Add session-sc — source

  • GitHub Copilot CLI v1.0.90-6: Added · Add support for GPT-6.1 Sol in model selection · Improved · Click anywhere on expanded tool calls in compact timeline to collapse them · Holding — source

  • Claude Code v2.1.289: Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines · Fixed the terminal — source

  • Kilo Code v7.8.3 — (release): #14634 34ec938 Than — source

  • Kilo Code v7.8.2 — (pre-release): #14634 34ec938 Than — source

  • Crush v0.97.0: This release introduces many new features that improve QoL by a ton! Brought to you by Charm and our favorite contributors! · Thanks to awesome @BrunoKrugel, yo — source

  • Augment Code v1.2.0-prerelease.202610021518 — auggie-v2 v1.2.0-prerelease.202610021518: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

  • Augment Code v1.2.0-prerelease.202610021216 — auggie-v2 v1.2.0-prerelease.202610021216: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

  • Augment Code v1.2.0-prerelease.202610020921 — auggie-v2 v1.2.0-prerelease.202610020921: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

  • OpenAI Codex CLI rust-v0.162.0-alpha.11 — alpha.11: Release 0.162.0-alpha.11 — source

  • OpenAI Codex CLI rust-v0.162.0-alpha.13 — alpha.13: Release 0.162.0-alpha.13 — source

  • OpenAI Codex CLI rust-v0.162.0-alpha.12 — alpha.12: Release 0.162.0-alpha.12 — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.