Radar brief — 2026-10-21

What the evidence shows

New signals first. Kiro is HTML changelog, not a GitHub tag; one source in this window also reported errors, so prefer the GitHub bodies below when they conflict. Several notes omit tens of extra bullets (bodyOmitted) — those omitted lines are not inferred here.

Trusted mix in this brief: 54% GitHub/changelog vs HTML. Themes in the window: model, agent, CLI, MCP, security, breaking, IDE, pricing.

For developers

• Kiro IDE 1.4.10: If you used Memory across chats, turn it back On — the default is now Off. Check that approved workflow steps still match the plan you edited.
• Kiro Crew 0.9.0: Before upgrade, set Settings → Chat → Transcript → Response Verbosity if you relied on Ultra (it now acts as Answer only). Re-enable Translucent panels if you want 0.8’s frosted chrome. Do not expect to send into old peer-relay chats. Look for Customize where Agent Capabilities used to be.
• Kimi Code 2.3.0: Rewrite plugin skill calls to <pluginId>:<skillName> or they will not run. If you switch models mid-thread, expect the new confirm dialog when cloud config turns it on (new / compact / continue / cancel).
• Copilot CLI: Install v1.0.101 (or newer) for MCP hang, Gemini tool-call, proxy, and path-approval fixes. Use --disable-client-telemetry if you need it; --trust-folder for one-off -p/stdin sessions; /share with no args for the share menu. Stay off v1.0.102-1 unless you need the two prerelease fixes (managed Auto in prompt mode; subagent MCP approvals).
• Claude Code: Do not stay on v2.1.304 if you use Vertex, Bedrock, or a gateway that rejects tool search — v2.1.305 retries without it. Take v2.1.306 if you run claude -p in cloud sessions or heavy MCP tool lists. Try /auto-mode-setup. Leave sandbox.allowNestedUserNamespaces off unless you truly need nested user namespaces.
• Antigravity: 1.4.3 for /diff search and plugin validate; 1.4.4 for Auto mode on Windows 11 24H2+ (personal accounts; Agent remains default) and nested-subagent conversation IDs on MCP calls. Run agy plugin validate after editing plugin.json / hooks / sidecars.
• Kilo Code v7.8.15: If Integrated Browser nags you, allow browser_open for this origin or all origins in Auto-Approve. When fanning out through Agent Manager, pick the custom agent so its permission rules travel with the session.
• Mistral Vibe v3.0.1: Tune the new compaction settings if answers die at the output limit. vibe -p now waits for subagents; --output-dir export includes each subagent’s status, model, usage, cost, and journal.
• Zed: v1.24.4 is the stable OpenCode npm fix; skip v1.25.1-pre unless you want the extra highlighting.

For teams

• Mistral Vibe: Set managed enable_auto_approve to false to hide YOLO agents and ignore --auto-approve/--yolo/bypass_tool_permissions. Per-tool permissions still apply. Treat experimental session/subagents/* as preview API.
• Copilot CLI: Roll v1.0.101 for managed/Team plugin install, Assisted Permissions instructions, and headless MCP auth that skips servers when saved tokens need interactive sign-in (renewable grants still connect). Decide whether --disable-client-telemetry is allowed. Extension capability requests now want explicit approval, not the Assisted judge.
• Claude Code: Run /claude-api managed-agents-secure against Anthropic’s published guide (it does not change settings). After approving ANTHROPIC_API_KEY or toggling a custom key, do not assume org policy is live until the hourly refresh (fixed as a bug in 2.1.304). Do not enable sandbox.allowNestedUserNamespaces on Linux fleets without a threat review — the notes state it bypasses sandbox file protections. 2.1.305 also stops a cloud/SDK MCP server from being overwritten by a same-named local server mid-session.
• Kimi Code: The model-switch confirm is cloud-gated. The skill-name break will silently drop unqualified plugin skills in shared configs.
• Antigravity: Point plugin CI at the stricter agy plugin validate (1.4.3–1.4.4). MCP servers can now key audit logs on the root conversation id even when a subagent made the call. Auto mode is personal-account / Win11 24H2+ only; Agent stays the default.
• Kilo Code: Decide whether browser_open always-allow (current origin vs all origins) is acceptable, and whether Agent Manager may select non-default agents with their own bash/MCP rules.
• Kiro: Treat Memory-off as the new privacy default for IDE 1.4.10. Crew 0.9.0 Profile cards are the place to review each crewmate’s permission, model, and schedule. HTML changelog — verify in-product before you write policy from the page.

What to ignore

• OpenHands v1.28.1 — agent-server bump only.
• Codex CLI rust-v0.164.0-alpha.8 — empty alpha tag, no evidence of what changed.
• Augment Code v1.2.0-prerelease… — installer/SEA packaging, unsigned macOS -sea called out in the notes.
• Copilot CLI v1.0.102-1 and Zed v1.25.1-pre unless you are already on prereleases.
• Any “+N more changes” not quoted above. Do not invent those bullets.
• Marketing tone on Kiro’s HTML pages; use the listed settings and defaults only.
• Internal ranking scores. They are not evidence.

Watch next

• Whether Copilot CLI v1.0.102 ships the Auto-model and subagent-approval fixes without the -1 prerelease tag.

• Codex 0.164.0 once it has a real body (alpha.8 does not).

• Omitted tails on Claude 2.1.304 (81), Vibe 3.0.1 (53), Kilo 7.8.15 / Copilot 1.0.100 (36 each) — large enough that a later note could still matter.

• Open proposals still on the board: snapshot-isolated child agents from hosted Qwen Code parents (team, P5); /config search in Codex CLI 0.163.0 (developer, P5); xAI Grok CLI harness/TUI open-source (everyone, P2); OpenCode PR #38252 verification videos (everyone, P2).

• The single error-reporting source in this window — re-check Kiro HTML if a GitHub note later contradicts it.

How to use DevAgentRadar

This brief is a public, evidence-only pass over AI coding assistants: GitHub/changelog facts in the last 36 hours first, then whatever is still relevant this week. mustKnow means “almost every daily user of that tool should see it,” not extra proof. Click the release, not the summary. If a body is omitted, stop at the published bullets. Developers should take version pins, flags, and breaking names; teams should take admin kill-switches, sandbox exceptions, MCP auth, and default-on/default-off policy. Ignore empty tags, chores, and prereleases unless they fix a failure you already have. Proposals are optional follow-ups, not shipped product.

Evidence appendix

• New in the last 36 hours: 25 release(s) from 14 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 4
• Sources reporting errors: 1

High-signal releases used

• GitHub Copilot CLI v1.0.100: 2026-10-19 · Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI · Add --trust-folder for one-off prompt-mode sessions started — source

• Kimi Code @moonshot-ai/kimi-code@2.3.0: #4294 3f80896 — source

• Mistral Vibe v3.0.1: New enable_auto_approve setting: when the admin-managed config sets it to false, the auto-approve (YOLO) mode is forbidden — the auto-approve agent (and a — source

• Kilo Code v7.8.15 — (release): #15235 c61a974 - Le — source

• Google Antigravity 1.4.4: Added Auto mode on Windows 11 version 24H2 and later for personal Google Accounts, selectable via --mode auto, Agent Mode in /config, Shift+Tab, or Remo — source

• Claude Code v2.1.304: Added a transcript line when a plugin that runs first skips one of your mod's hooks, naming the event and the plugin · Added decider: "person" to a mod's `too — source

• Claude Code v2.1.305: Added sandbox.allowNestedUserNamespaces so sandboxed commands on Linux can create user namespaces (Chromium, rootless podman); this lets them get around the s — source

• Google Antigravity 1.4.3: Added / search to the /diff file list and file view: matches are highlighted as you type, the search prompt shows how many matches the diff and each file co — source

• GitHub Copilot CLI v1.0.101: 2026-10-20 · Add native structured output for dynamic workflow subagents on supported models · Add assistedApprovalInstructions setting to guide Assisted Permis — source

• GitHub Copilot CLI v1.0.102-1: Fixed · Prompt mode now honors managed Auto model selection for -p and piped stdin runs · Subagents honor custom and MCP tool approvals, avoiding duplicate — source

• Claude Code v2.1.306: Fixed claude -p inside cloud sessions reporting "Not logged in" when started without the session's environment variables · Fixed an API error being replaced b — source

• OpenHands v1.28.1: chore: bump agent-server to 1.56.0 · chore: remove merged PR artifacts · --- · This PR was generated with [Release Please](https://github.com/googleapis/release — source

• Zed AI v1.25.1-pre: Fixed OpenCode models failing to load with a missing field npm error. (#65874) · Added HTML syntax highlig — source

• Augment Code v1.2.0-prerelease.202610201517 — auggie-v2 v1.2.0-prerelease.202610201517: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

• Launch snapshot-isolated child agents from hosted Qwen Code parents (audience: team, P5)
• Open /config in Codex CLI 0.163.0 to search preferences and apply live settings (audience: developer, P5)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)