Skip to content
DevAgentRadarDevAgentRadar
Sign in
Guidance/Daily Briefing
digesteveryonedigestevidenceradarclimodel10 min read · Oct 23, 2026

Radar brief — 2026-10-23

Busy 36 hours: Mistral Vibe v3.0.2 changes subagent defaults and hook behavior for daily users; OpenAI Codex CLI rust-v0.164.0 adds /presets, inline /model and /permissions, and enterprise MCP sign-in; Claude Code v2.1.309 closes sandbox and MCP-config holes; Google Antigravity…

What the evidence shows

GitHub-style tags first. Several notes omit a long tail of changes (bodyOmitted); those tails are not summarized here. HTML changelogs (Tabnine, Factory) are called out. Trusted-source mix in this window is about 54% GitHub/changelog vs HTML; one source in the window reported errors.

Mistral Vibev3.0.2
Key Signal & Impact
Default subagent caps rise to 32 alive / 32 concurrent (was 8 / 4). New max_subagents and max_concurrent_subagents. hooks.toml now runs for subagent tool calls, including post_agent. Org starting mode overrides smart-approve; a disabled --agent mode falls back with a notice. Mouse capture can be turned off so the terminal keeps copy/select. Non-vision models get [image] instead of failing the turn. Reasoning shows by default as a collapsible Thought row.
OpenAI Codex CLIrust-v0.164.0
Key Signal & Impact
Ten numbered /presets for reusable prompts and slash commands. Inline /model and /permissions. Kitty/Sixel image preview in the fullscreen transcript. Enterprise MCP auth via Codex account grants or dedicated sign-in (including OAuth clients that need secrets). Credential masking on supported remote Bash/Zsh snapshots. Bedrock setup wizard on by default. Resume restores compressed history and saved thread settings. Failed compaction no longer leaves partial summaries. Windows proxy auth uses Negotiate/NTLM. +131 changes omitted.
Claude Codev2.1.309
Key Signal & Impact
Sandboxed Bash on macOS/Linux no longer runs shell startup files outside the sandbox. denyWrite globs follow symlink real paths. Agents can no longer modify the --mcp-config file. Disabled MCP servers stay disabled in print/SDK sessions. Several Bash permission-check and worktree-isolation holes fixed. Nested CLAUDE.md over the size limit loads only its start (stops compact thrash). +89 changes omitted.
Claude Codev2.1.307
Key Signal & Impact
/claude-api api-version moves API code to 2026-10-21. New claude_code.safety_event OpenTelemetry event when a permission rule, auto mode, safety check, hook, or sandbox stops/prompts a tool. Fixes for [1m] model aliases, prompt-caching-scope on custom gateways/Foundry, macOS keychain MCP auth, sleep-during-connect MCP timeouts, duplicate HTTP MCP retries, and autocompact/PDF thrash. +43 changes omitted.
Google Antigravity1.4.6
Key Signal & Impact
/plugin → Configure MCP servers... without disable/re-enable; missing vars show ⚠ needs setup. Sandbox no longer reads/writes ~/.docker, ~/.kube, or ~/_netrc unless granted (those dirs were previously writable). Compaction//compact keeps attached images/PDFs. Allow-for-conversation now covers the main agent and subagents. Status line shows MCP init / model retry countdown. +6 changes omitted.
Google Antigravity1.4.5
Key Signal & Impact
Collapsed thought UI cleaned up. /diff search counts matches in folded lines. Recurring cron from the schedule tool fires at a per-schedule offset (not exactly on the boundary) to avoid spikes; @every unchanged. Idle CPU roughly halved. +6 changes omitted.
Zed AIv1.25.2
Key Signal & Impact
Smaller binaries. Inlay-hint edits via double-click or editor: accept inlay hint. Context compaction and session notices for external ACP agents. Amazon Bedrock: GPT-6 Astra, Claude Fable 5.1, Claude Opus 5.5. Remote-tracking branch force-delete removed (it had no effect). +34 changes omitted.
GitHub Copilot CLIv1.0.103
Key Signal & Impact
ACP sessions honor saved sandbox settings and --sandbox / --no-sandbox on resume. Cloud replies keep full text after reconnect. GPT-5 default Responses verbosity applies unless session verbosity is set. Gemini nullable/enum schema 400s avoided. Legacy --remote / --no-remote retired. dnx and Windows npm.cmd inherit sandbox grants.
GitHub Copilot CLIv1.0.102
Key Signal & Impact
Prompt mode (-p / stdin) honors managed Auto model selection. Subagents honor custom and MCP tool approvals (fewer duplicate prompts). Long sandboxed commands keep running past 10s. Sandboxed network honors NO_PROXY and ALL_PROXY. Org plugin prep no longer blocks sending messages.
OpenCodev1.19.4
Key Signal & Impact
Bundled Bun 1.4.4: security fixes for Brotli, TLS, HTTP/1.1–1.3, WebSocket, and fetch; root certs to NSS 3.131.1.
Tabninev6.7.0
Key Signal & Impact
HTML docs (21 Oct 2026). New Agent GA for teams with Agent access; read-only Chat mode with Apply, attachments, read-only Jira, /new /copy /export /fork /review. CLI: personal API keys for per-user-auth models. Admins: hide costs, org-wide monthly Agent budget. PATs require verified email; existing tokens for unverified users stop.
Factory Droidv0.246.0
Key Signal & Impact
HTML changelog; Desktop v0.203.0 (21 Oct 2026). Image gallery, faster transcripts, credits (not tokens) in usage notices. FetchUrl can read any public URL, not only URLs you supplied. Auth progress, browser-panel safety, CLI/app fixes. +6 changes omitted.
Kilo Codejetbrains/v7.1.12
Key Signal & Impact
Project-scoped agent usage aggregation + pageable HTTP API. Custom auto routers with client models and local evals. Session host registry / Kilo Cloud adapter. Agent Manager fetches base branch before worktrees. MCP prompt content preserved. Bundled CLI pin v7.8.15.
Zed AIv1.26.1-pre
Key Signal & Impact
Prerelease. Optional Pyrefly Python LS, expandable debugger hovers, DWARF/WASM in the JS debugger, fuzzier agent model pickers, OpenCode/DeepSeek/Google thinking compatibility. +26 changes omitted.

For developers

  • Mistral Vibe: Upgrade to v3.0.2. If copy/select broke, set enable_mouse_capture false or VIBE_ENABLE_MOUSE_CAPTURE=false. If 32 concurrent subagents is too hot, set max_subagents / max_concurrent_subagents. Expect hooks.toml (including post_agent) to fire inside subagents. Images on non-vision models no longer abort the turn.
  • Claude Code: Skip v2.1.308’s empty note. Run v2.1.309 for the sandbox/MCP-config/permission-check fixes. If you pin [1m] aliases or custom ANTHROPIC_BASE_URL / Foundry, v2.1.307’s request-header and model-not-found fixes still matter — take the whole 2.1.307→2.1.309 stack. Use /claude-api api-version only if you intend API 2026-10-21.
  • Codex CLI: Learn /presets, inline /model, and /permissions. If you resume threads, confirm saved settings come back instead of global defaults. Enterprise MCP users should try account-grant or dedicated OAuth sign-in. Do not assume the omitted 131 changes are cosmetic.
  • Antigravity: After 1.4.6, sandboxed Docker/K8s/_netrc commands will fail until you grant those paths. Reconfigure plugin MCP env from /plugin without toggling the plugin. Prefer 1.4.6 over 1.4.5 (keep the CPU/cron/thought UI fixes).
  • Copilot CLI: Install v1.0.103. Delete --remote / --no-remote from aliases and scripts. Confirm ACP resume still sandboxes the way you expect. -p / piped runs now follow managed Auto model selection (v1.0.102).
  • Zed: Daily channel is v1.25.2 (Bedrock model IDs above, inlay-hint apply, ACP compaction). Treat v1.26.1-pre as pre-release only.
  • OpenCode: Update to v1.19.4 for the Bun runtime security bump.
  • Kilo / Factory / Tabnine CLI: JetBrains Kilo v7.1.12 is the feature cut; CLI v7.8.17 itself lists no notable changes. Tabnine CLI now accepts personal API keys for per-user-auth models.

For teams

  • Sandbox and secrets: Roll Claude Code v2.1.309 and Antigravity 1.4.6 on any fleet that lets agents touch Docker, kubeconfig, MCP config files, or shell startup. Antigravity’s default is a behavior change: previously ~/.docker and ~/.kube were writable in the sandbox. Codex rust-v0.164.0 masks credentials on supported remote Bash and adds enterprise MCP OAuth — review how those grants are issued.
  • Subagent blast radius: Mistral Vibe’s default concurrent subagents went from 4 to 32, and hooks now run in those subagents. Org starting mode now wins over smart-approve; disabled --agent modes silently fall back. Copilot CLI subagents inherit custom/MCP approvals (fewer duplicate prompts, more inherited workflow). Antigravity “allow for this conversation” now covers subagents too.
  • Tabnine v6.7.0 (HTML notes): New Agent is on for every team that already has Agent access. Set the org monthly Agent budget and whether end users see costs before rollout. Verify emails before PATs die — existing tokens for unverified users stop. Team-lead usage dashboards now include the new Agent (Chat mode counts as Chat).
  • Observability and spend: Claude Code v2.1.307 emits claude_code.safety_event per blocked/prompted tool. Kilo JetBrains v7.1.12 adds project-scoped usage aggregation. Factory usage copy is credits, not tokens. Copilot -p follows managed Auto model selection — check that headless jobs still pick the model you think they do.
  • Open team proposal: Upgrade Zed to v1.25.2 and select Claude Opus 5.5 on Bedrock (P5).

What to ignore

  • Kilo Code v7.8.17 — release text is “No notable changes.”

  • Claude Code v2.1.308 — “Bug fixes and reliability improvements” with no listed items; wait for v2.1.309.

  • Qwen Code sdk-typescript-v0.1.22 — a stack of “this SDK bundles CLI 0.26.0 … 0.23.1” pins, not a usable product changelog. Do not treat it as a Qwen 0.26.0 feature list. (A 0.23.0 note mentions two fixes from #11022; the rest of that body is omitted.)

  • Augment Code v1.2.0-prerelease.202610221516 — install/SEA packaging only; macOS -sea assets are unsigned.

  • Zed v1.26.1-pre unless you opted into prereleases.

  • Omitted tails (Codex +131, Claude 2.1.309 +89, Qwen +89, Claude 2.1.307 +43, Zed 1.25.2 +34, and others). Absence from this brief is not evidence those diffs are empty.

  • Prefer GitHub tags over Tabnine/Factory HTML when they conflict; this window’s HTML share is material, and one tracked source reported errors.

Watch next

How to use DevAgentRadar

This brief is a public snapshot of versioned evidence, not vendor marketing. Start with the Headline and the table: if your assistant is not in a row, we did not invent a release for it. New means the signal reached the radar in the last 36 hours. Act from For developers on local CLI/IDE/sandbox behavior; act from For teams on org defaults, credentials, budgets, and headless flags. Skip What to ignore rather than reverse-engineering empty or noisy notes. Watch next is the short list of proposals and incomplete notes worth a follow-up, not a prediction. Prefer GitHub release tags over HTML blogs when both exist; when a body is omitted, wait for the full tag instead of guessing.

Evidence appendix

  • New in the last 36 hours: 29 release(s) from 15 tool(s)
  • Evidence window: new releases first, then top curated signals (versioned releases preferred)
  • Assistants tracked: 29
  • Signals in this brief: 40
  • Trusted source mix (GitHub/changelog vs HTML): 54%
  • Open improvement proposals: 4
  • Sources reporting errors: 1

High-signal releases used

  • OpenAI Codex CLI rust-v0.164.0: Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381) · Set model, reasoning effort — source

  • Zed AI v1.25.2: This week's release includes smaller Zed binaries across macOS, Windows, and Linux, the ability to apply inlay hint text edits by double-clicking, context compa — source

  • Claude Code v2.1.307: Added /claude-api api-version to move Claude API code to API version 2026-10-21 · Added the claude_code.safety_event OpenTelemetry event for each tool cal — source

  • Qwen Code sdk-typescript-v0.1.22: This SDK release bundles CLI version: 0.26.0 · Source: CLI built from source (same branch/ref as SDK) · --- · This SDK release bundles CLI version: 0.25.3 · Sou — source

  • Google Antigravity 1.4.6: Added a Configure MCP servers... row for installed plugins in /plugin, so you can set or change a plugin's MCP server variables at any time without disablin — source

  • Mistral Vibe v3.0.2: enable_mouse_capture setting (or VIBE_ENABLE_MOUSE_CAPTURE=false) to leave text selection and copy to your terminal; depending on the terminal, some other m — source

  • Claude Code v2.1.309: Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command · Fixed macOS sandbox denyWrite glo — source

  • Zed AI v1.26.1-pre: This week's release includes Pyrefly as an optional built-in Python language server, the ability to expand and inspect nested variable values directly in debugg — source

  • GitHub Copilot CLI v1.0.102: 2026-10-21 · Prompt mode now honors managed Auto model selection for -p and piped stdin runs · Subagents honor custom and MCP tool approvals, avoiding duplicate — source

  • GitHub Copilot CLI v1.0.103: 2026-10-22 · Clicking a completed response code block copies its original code when enabled. · ACP sessions now honor saved sandbox settings and --sandbox/--no- — source

  • Google Antigravity 1.4.5: Improved how agent responses read: a blank line now separates the collapsed thought block from the response, and once the response starts, the collapsed thought — source

  • Kilo Code jetbrains/v7.1.12: Added project-scoped agent usage aggregation to the bundled CLI, backed by a pageable agent usage HTTP API. · Added custom auto routers with client models and l — source

  • OpenCode v1.19.4: Upgraded the bundled Bun runtime to 1.4.4, which includes security fixes for Brotli, TLS, HTTP/1.1, HTTP/2, HTTP/3, — source

  • Augment Code v1.2.0-prerelease.202610221516 — auggie-v2 v1.2.0-prerelease.202610221516: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

Was this guidance useful?

Anonymous · one vote per visitor · re-click to clear. Helps improve digests—not a product ranking.