Radar brief — 2026-10-04
A busy 36 hours: 18 releases from 8 tools. The signal that will hit daily CLI users first is GitHub Copilot CLI v1.0.92-3 — a pre-conversation Ctrl+E local vs cloud picker, sandbox/Git credential fixes, and retired models removed from the picker. Right behind it: Copilot CLI v1.…
What the evidence shows
New GitHub-style releases first. Several notes omit a large tail of changes (bodyOmitted); those tails are not inferred below.
--mcp-github-auth scopes GitHub account auth to approved MCP origins; session-scoped read-only directory approvals; permission prompts remain answerable after resume; auto-approval now sees messages typed while the agent is working; compaction still returns a summary when instructions ask for tool use. MCP tools recover after transient discovery failures; MCP OAuth reuses a still-valid cached token; MCP calls complete even if servers keep sending progress. One further change omitted.Read deny rules apply to files @-mentioned, changed, or selected in the IDE through a symlink; a user-installed plugin can no longer rewrite descriptions of an organization-managed MCP server’s sign-in tools. Terminal freeze on short blocks with many unclosed <script> tags or nested ${. [VSCode] reverts a 2.1.288 claude auth status change that may have made sign-outs more frequent. Plugin list/eval/update, local-folder marketplace staleness, launch freezes, and async plugin-handler session drops also fixed. 15 further changes omitted.memory.enableManagedAutoMemory respected (#6941 / #11022); hosts that disable it no longer admit remember/dream requests or managed-memory prompt instructions; size-triggered microcompaction clears old tool results toward a low watermark (#8464) instead of rewriting another prefix every turn; provider prompt-cache reuse across long tool-heavy sessions. 89 further changes omitted.| Kilo Code | v7.8.3 | Documents viewer: copy-content toolbar button; tab menu Copy Path / Relative Path / File Name / Open in Editor. Manual Fetch Models in Custom Provider settings. @ suggests files from every folder in a multi-root VS Code workspace; files outside the session’s own project still need the usual read approval. Agent Manager keeps the latest selection when another project finishes loading. 39 further changes omitted. |
| Kilo Code | v7.8.2 | Pre-release with the same published bullets as v7.8.3. Prefer v7.8.3. |
| Crush | v0.97.0 | Turn MCP servers off from the UI (global or local). Git branch display in the TUI. ChatGPT OAuth refresh via Catwalk. Claude Channels (part 2/3): session injection, exactly-once routing, reply-back. Sidebar toggle Ctrl+B. Anthropic cache-creation token counting. Clipboard no longer reports successful copies as failures. 32 further changes omitted. |
| Crush | v0.97.1 | Follow-up: remove the Git-branch powerline glyph so the branch still shows without Nerd Fonts. Release also publishes checksum + sigstore verify steps. |
| Augment Code | v1.2.0-prerelease.202610021518 / 1216 / 0921 | Install-script prereleases (install.sh). Node SEA binaries (-sea + sidecar .d/). Trust metadata: macOS -sea unsigned (Apple secrets not configured); Linux publishes SHA256SUMS-sea. No product changelog in the notes. |
| OpenAI Codex CLI | rust-v0.162.0-alpha.11 / .12 / .13 | Tags only (“Release 0.162.0-alpha.xx”). No changelog body. |
| Aider | v0.85.4, v0.82.3, v0.80.4 | HTML history page (aider.chat/HISTORY.html) with version titles only. Low-confidence / noisy versus GitHub notes above. |
Trusted mix this window is 54% GitHub/changelog vs HTML. One tracked source is reporting errors; the empty Aider HTML entries and changelog-less Codex/Augment tags are the weak end of the mix.
For developers
- Copilot CLI: If you bounce between laptop and cloud runs, Ctrl+E before the conversation in v1.0.92-3 (open proposal: Press Ctrl+E in Copilot CLI to pick local vs cloud). After upgrade, re-check the model picker — retired models were removed, not hidden. On v1.0.90+, GPT-6.1 Sol is a selection, not a rumor; expect permission prompts to still work after a resume, and auto-approval to notice what you type while the agent is running.
- Claude Code v2.1.289: Upgrade if you use deny/ask rules,
@mentions, or plugins. Confirm Read denies still hold through symlinks, and that compound-shell denies are not overridden by a user-installed mod. In VS Code, the 2.1.288 auth-status behavior is reverted if you were getting bounced to sign-in. - Crush v0.97.0 then v0.97.1: Toggle unused MCP servers from the UI instead of editing config to debug tool catalogs. Take v0.97.1 if the new git-branch line showed a missing glyph. Claude Channels is explicitly 2/3 — do not assume the delivery path is finished.
- Kilo Code v7.8.3: In multi-root workspaces,
@can now see folders added via “Add Folder to Workspace…”. Still approve reads outside the session project. Use Fetch Models when a custom provider’s catalog looks stale. - Qwen Code SDK
sdk-typescript-v0.1.17: Confirm which bundled CLI you actually ship (notes list 0.24.7 down through 0.23.0). If you patched local memory/dream behavior, 0.23.0 says hosts withmemory.enableManagedAutoMemoryoff no longer need those patches. Do not assume the omitted 89 changes. - Skip for daily work until notes exist: Codex
rust-v0.162.0-alpha.11–13, Augmentv1.2.0-prerelease.*(install plumbing only; macOS SEA unsigned), Aiderv0.80.4/v0.82.3/v0.85.4.
For teams
- Copilot CLI (v1.0.90): Roll
--mcp-github-authif MCP servers should only see GitHub auth for approved origins. Treat session-scoped read-only directory approvals as a default-tightening, not a bypass of repo policy. Sandbox Git in v1.0.92-3 authenticates with masked credentials and SSH remote rewrites — verify CI/agent logs no longer print live tokens, and that the network-bypass prompt is an explicit human gate, not a silent allow. - Claude Code on managed machines (v2.1.289): This is the patch to take if org deny/ask rules were losing to user-installed mods on compound shell commands, or if plugins could rewrite org-managed MCP sign-in tool descriptions. Pair it with a check that
Readdenies cover symlink paths from the IDE. Watch auth-churn in VS Code after the 2.1.288 revert. - Crush: Org-wide or per-repo MCP off is now a UI action — useful when a server is noisy or unapproved, without deleting config. Cache-creation token counting may change how you read Anthropic usage, not how you are billed in this note.
- Kilo Code: Multi-root
@increases mention surface; keep the existing out-of-project read approval. Custom-provider Fetch Models should be an operator step, not an unbounded auto-pull, until you trust the catalog. - Augment prereleases: Do not treat
curl … | bashplus unsigned macOS SEA as a fleet install path. - Open team-facing proposals still on the board (not evidenced as shipped here): Spawn agents from ~/.vibe/agents…, Upgrade Goose to v1.53.0….
What to ignore
- OpenAI Codex CLI alpha.11–13 — tags with no changes listed.
- Augment Code three near-identical prerelease install notes; they are packaging/trust metadata, not assistant behavior.
- Aider three version headers on an HTML history page with no bodies. Prefer a real changelog before acting.
- Kilo Code v7.8.2 once v7.8.3 is the release you can install.
- Crush’s “QoL by a ton” framing — the evidence is MCP toggle, git branch, Channels 2/3, Ctrl+B, clipboard, cache-creation counts.
- Anything in a
+N more changes/bodyOmittedtail. It was not in the payload.
Watch next
- Copilot CLI: whether retired-model removal breaks saved defaults; whether Ctrl+E becomes the normal local/cloud split (proposal).
- Crush Claude Channels part 3/3.
- Qwen: a non-omitted CLI changelog for 0.24.x (SDK currently only spells out 0.23.0 memory/compaction/cache behavior).
- Codex 0.162.0 when a tag grows a real note — related open item: Guardian reviews and projectless sessions (that proposal is v0.160.0, not these alphas).
- Other open P4–P5 items not in today’s evidence: Zed per-spawn model, Zed GPT-6.1 Sol BYOK, Devin Desktop / Windsurf Fusion, Grok CLI harness OSS.
- The 1 source reporting errors — do not promote its versions until the feed is clean.
How to use DevAgentRadar
DevAgentRadar is a public, evidence-first radar for AI coding assistants: versions, changelogs, and GitHub releases over marketing pages. isNew means the signal hit the radar in the last 36 hours; mustKnow (none in this window) would mean “almost every daily user of that tool.” Read Headline and What the evidence shows for what actually shipped; For developers / For teams for actions; What to ignore so empty tags and HTML stubs do not drive upgrades. Follow Watch next and the linked open proposals when you want a concrete change in your stack. If a note says changes were omitted, wait for the full release text — we will not invent them.
Evidence appendix
- New in the last 36 hours: 18 release(s) from 8 tool(s)
- Evidence window: new releases first, then top curated signals (versioned releases preferred)
- Assistants tracked: 29
- Signals in this brief: 40
- Trusted source mix (GitHub/changelog vs HTML): 54%
- Open improvement proposals: 8
- Sources reporting errors: 1
High-signal releases used
-
GitHub Copilot CLI
v1.0.92-3: Added · Add a pre-conversation Ctrl+E environment picker to switch between local and cloud runs · Fixed · Keyboard, paste, and mouse input now stay orde — source -
Qwen Code
sdk-typescript-v0.1.17— This SDK release bundles CLI version: 0.24.7 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.24.6 · Sou — source -
GitHub Copilot CLI
v1.0.90: 2026-09-30 · Add support for GPT-6.1 Sol in model selection · Add --mcp-github-auth to scope GitHub account auth to approved MCP server origins · Add session-sc — source -
GitHub Copilot CLI
v1.0.90-6: Added · Add support for GPT-6.1 Sol in model selection · Improved · Click anywhere on expanded tool calls in compact timeline to collapse them · Holding — source -
Claude Code
v2.1.289: Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines · Fixed the terminal — source -
Kilo Code
v7.8.3— (release): #1463434ec938Than — source -
Kilo Code
v7.8.2— (pre-release): #1463434ec938Than — source -
Crush
v0.97.0: This release introduces many new features that improve QoL by a ton! Brought to you by Charm and our favorite contributors! · Thanks to awesome @BrunoKrugel, yo — source -
Augment Code
v1.2.0-prerelease.202610021518— auggie-v2 v1.2.0-prerelease.202610021518: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source -
Augment Code
v1.2.0-prerelease.202610021216— auggie-v2 v1.2.0-prerelease.202610021216: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source -
Augment Code
v1.2.0-prerelease.202610020921— auggie-v2 v1.2.0-prerelease.202610020921: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source -
OpenAI Codex CLI
rust-v0.162.0-alpha.11— alpha.11: Release 0.162.0-alpha.11 — source -
OpenAI Codex CLI
rust-v0.162.0-alpha.13— alpha.13: Release 0.162.0-alpha.13 — source -
OpenAI Codex CLI
rust-v0.162.0-alpha.12— alpha.12: Release 0.162.0-alpha.12 — source
Open proposals
- Spawn agents from ~/.vibe/agents and start plugin-declared MCP servers (audience: team, P5)
- Pass a per-spawn model to Zed spawn_agent and stop restarting subagents (audience: developer, P5)
- Upgrade Goose to v1.53.0 and quote selected conversation text into the composer (audience: team, P5)
- Enable opt-in Guardian reviews and projectless workspace-default sessions (audience: developer, P5)
- Press Ctrl+E in Copilot CLI to pick local vs cloud before each conversation (audience: developer, P4)
- Enable GPT-6.1 Sol BYOK and set agent.max_idle_retained_threads in Zed (audience: developer, P4)
- Sign in to Devin Desktop with ChatGPT and set Fusion to GPT-6 Astra + SWE-2 (audience: developer, P3)
- Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.