Radar brief — 2026-10-08

What the evidence shows

GitHub/changelog-style versioned releases first. HTML blogs and docs are called out as noisier. Omitted “+N more changes” are not inferred.

Trusted mix this brief is 54% GitHub/changelog vs HTML. Factory, Tabnine, Augment’s VS Code notes, and the Copilot sandbox post are HTML. Two sources reported errors; treat those HTML pages as noisier than the GitHub tags.

For developers

• Claude Code daily users: upgrade through v2.1.293 for Haiku 5.5 + compaction/MCP leak fixes, then v2.1.294 if you use instruction-style hooks. Recheck Haiku cost on prompts >100K. If you register mod tools, isDeferred: false puts the schema in the prompt immediately.
• Codex CLI: expect GPT-6.1 Sol unless you pin. Sign in to MCP with /mcp login <name>. Daybreak stays dark unless you pass --enable cli_daybreak or features.cli_daybreak=true. Review filesystem-escalation prompts — approved writes can be broader than before.
• Cline: pin models on the 19 providers whose defaults moved; Vultr users must re-select IDs. Put commit conventions in .clinerules. CLI scripts: switch to cline hub dashboard, stop passing removed flags, and re-run cline mcp add if remote servers lost Authorization headers.
• Copilot CLI: move user settings into ~/.copilot/settings.json. Try /sandbox (or --sandbox). Don’t depend on v1.0.94-4 until it leaves prerelease.
• Zed: if long agent threads chew RAM, set agent.max_idle_retained_threads. JSONL/NDJSON preview is in v1.23.2; leave v1.24.1-pre for people who want Git tags / terminal-into-agent-panel early.
• Kilo: pin hot worktrees; JetBrains users can complete MCP OAuth in-product. “Workflows” are now commands.

For teams

• Copilot org policy: local sandboxing is GA and can be required so developers cannot weaken it. Use permissions.limitTo for managed network domains. Sandbox policy is about tool execution, not which model is selected.
• Bedrock / regulated Codex: rust-v0.161.0 is the cut for multi-agent V2, Ultra reasoning, and GovCloud. Decide explicitly whether Cyber/Daybreak is allowed — it is off unless opted in, and needs eligible ChatGPT sign-in + OpenAI provider support.
• Cline fleet defaults: unpinned seats will silently change models. Open proposal on the radar: pin provider models and encode commit rules in .clinerules.
• Claude Code hooks: v2.1.294 is a control-plane fix — instruction hooks that were supposed to block commands could allow them. Patch before relying on those hooks as policy.
• Codex permissions: treat “approved filesystem escalation” as a wider write grant; keep denied reads/network as the remaining fence. Background tasks inherit the originating turn.
• Tabnine finance/admin: Gemini cost dashboards were wrong (cached tokens counted twice); upgrade so historical usage is rewritten. Jira from Tabnine CLI is read-only.
• Factory Droid: plan for legacy-model sessions to auto-run replacements unless you keep the old ID.
• Kilo JetBrains: MCP OAuth recovery is now in-product — useful where tokens expire in locked-down IDEs.

What to ignore

• Augment auggie v1.2.0-prerelease.202610071518 as a product story — the published notes are installers, SEA sidecars, and unsigned macOS trust metadata.
• Zed v1.24.1-pre and Copilot CLI v1.0.94-4 as production pins.
• Anything implied by “+N more changes” / bodyOmitted — those lines are not in evidence.
• Open improvement proposals for tools not in this evidence JSON (they are suggestions, not shipped releases).
• Factory/Tabnine/blog HTML as equal to GitHub tags when you are making a go/no-go.

Watch next

• Whether Daybreak / Cyber stays fully opt-in after Codex rust-v0.161.0, and whether more CLIs default to GPT-6.1 Sol the way Codex, Cline’s recommended list, and Copilot’s picker already do.
• Copilot sandbox + permissions.limitTo rollout friction (localhost allowlists, MCP/LSP inside the sandbox, settings.json-only).
• Cline Vultr ID and unpinned-provider fallout; whether .clinerules-driven commit messages match team convention.
• Claude Code hook-as-instruction behavior after v2.1.294, plus compaction/subagent tool-list regressions.
• Eight open radar proposals — the two that match today’s evidence are Cline model pinning / .clinerules, and Codex Daybreak opt-in on rust-v0.161.0.

How to use DevAgentRadar

This brief is a public evidence cut, not a vendor roundup. Headline is only what reached the radar in the last 36 hours (isNew); must-know means “almost every daily user of that tool should see it,” still citing the release itself. What the evidence shows is the citation table — versions and URLs in the source data, no invented tags. For developers / For teams are concrete actions from those rows. Ignore omitted bodies, prereleases, and HTML when GitHub exists. Use it to decide what to upgrade, pin, or postpone today; come back on the next cut rather than treating marketing pages as the record.

Evidence appendix

• New in the last 36 hours: 21 release(s) from 11 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 8
• Sources reporting errors: 2

High-signal releases used

• OpenAI Codex CLI rust-v0.161.0: GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339) · Amazon Bedrock supports multi-agent V2 and Ultra reasoning o — source

• Claude Code v2.1.293: Added Claude Haiku 5.5 (claude-haiku-5-5), now the default Haiku model on the Anthropic API — 1M context, $0.10/$0.50 per Mtok ($0.50/$2.50 for prompts over 1 — source

• Kilo Code v7.8.8 — (release): #14891 ce9a04b - Pi — source

• Zed AI v1.23.2: This week's release includes the ability to preview JSONL and NDJSON files as tables. · Added the agent.max_idle_retained_threads setting to control how many — source

• Cline v4.1.23: If a model's response ends without a recognized finish reason, Cline asks it to continue once instead of treating the response as complete. · Refreshed the mode — source

• Cline cli-v3.0.70: Commit message generation and tasks with reasoning off no longer fail with a 400 error on GPT-6 Astra, GPT-6.1 Sol, Claude Fable 5 or Claude Opus 5.5 · Cline no — source

• GitHub Copilot CLI v1.0.93: 2026-10-07 · Add enterprise permissions.limitTo to enforce managed domain boundaries for network requests · Run safe /user commands immediately during active tu — source

• Kilo Code jetbrains/v7.1.9: Added a prompt navigator to the chat transcript for jumping between your sent prompts. · Added MCP OAuth sign-in support, including recovery flows for expired o — source

• Cline desktop-v0.0.44: Mermaid diagrams in chat now render inline as interactive diagrams, with copy, download, fullscreen, and pan/zoom. · Links inside a diagram go through the same — source

• Zed AI v1.24.1-pre: This week's release includes Git tag creation, the ability to drag Terminal tabs into the Agent Panel, and pre-filling of the File Finder's search query with te — source

• GitHub Copilot CLI v1.0.94-4: Fixed · MCP enable/disable now works before server discovery without starting MCP servers · Assisted permissions send visible shell code to the permission j — source

• Claude Code v2.1.294: Fixed prompt and agent hooks written as instructions (such as "Block commands that...") allowing what they should block · Improved how prompt hooks on Sto — source

• Augment Code v1.2.0-prerelease.202610071518 — auggie-v2 v1.2.0-prerelease.202610071518: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

• Factory Droid v0.234.0 — · Desktop v0.191.0 (October 6, 2026): Legacy model upgrades, MCP tools on the first message, plus Script, plugin, and app fixes · Legacy model upgrades - A session on a legacy model now runs its — source

Open proposals

• Pin Cline provider models and add commit rules to .clinerules (audience: team, P5)
• Upgrade Codex CLI to rust-v0.161.0 and opt in Daybreak with --enable cli_daybreak (audience: team, P5)
• Name a cheaper model under [utility_models] for session titles and smart approve (audience: everyone, P5)
• Enable workspace-agent collaboration, Hosted MCP, and Mem0 in Qwen Code v0.25.0 (audience: team, P5)
• Upgrade Goose to v1.53.0 and quote selected conversation text into the composer (audience: team, P5)
• Sign in to Devin Desktop with ChatGPT and set Fusion to GPT-6 Astra + SWE-2 (audience: developer, P3)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)