Radar brief — 2026-10-24

What the evidence shows

New GitHub-style releases first; Windsurf and Kiro are HTML changelogs (weaker than tagged GitHub notes). Several high-signal notes omit dozens of extra bullets — those are not inventoried here. One tracked source is currently reporting errors, so this pass is incomplete.

For developers

• Windsurf: Treat v3.11.212 as a new shell, not a theme tweak — learn sidebar grouping, child sessions, the Files/Changes/Terminal tabs, and ⌘L quote-into-chat. Install v3.11.216 if Local sessions, Windows PATH, or inline-image crashes bit you.
• Codex CLI rust-v0.164.0: Put repeat prompts in /presets; set model/effort/speed and permission profiles with /model and /permissions instead of config round-trips. If you use Kitty/Sixel, image preview is in the fullscreen transcript. Windows users behind authenticating proxies: Negotiate/NTLM is now handled.
• Antigravity 1.4.6+: If sandboxed commands talk to Docker or Kubernetes, explicitly grant ~/.docker, ~/.kube, and ~/_netrc — those paths are no longer writable by default. Use /plugin → Configure MCP servers to fill variables without toggling the plugin. On 1.4.7, hooks can screen the latest user message via lastUserInput; expect fewer Auto-mode prompts on format/cleanup.
• Claude Code: Upgrade through v2.1.310. Do not assume old Bash allowlists, symlink denyWrite patterns, or --mcp-config files were actually enforced. Nested oversized CLAUDE.md now loads only its start. Enterprise/gateway users: 2.1.310 retries without the rejected beta/system-message combo.
• Copilot CLI v1.0.103: Stop using --remote/--no-remote. Confirm ACP sandbox flags survive resume. Stay on v1.0.103 unless you intend to run the v1.0.104-2 prerelease (fusion/Autopilot wait behavior).
• Crush v0.98.2: Update if you hit parallel-tool crashes, OAuth 401 loops, or permissions landing in the wrong session.
• Goose v1.56.0: Cap parallelism with GOOSE_MAX_CONCURRENT_SUBAGENTS; failed delegate subagents can be resumed. If you used PCTX code mode, you are now on Boa — retest scripts. Treat “dangerous include history” as named.
• Kimi Code 2.3.1: On a stuck lock after a crash, take over the session or set KIMI_CODE_SESSION_LOCK=0. Windows without Git Bash: workspace trust should work.
• Kiro 2.34.0: Expect MCP tools to pause for extra input in local V3 sessions; decline is a first-class path. /memories can delete entries.

For teams

• Ship the security CLIs this cycle: Claude Code 2.1.309–2.1.310 (sandbox, MCP config, worktree isolation), Antigravity 1.4.6 (credential dirs + MCP setup UX), Crush 0.98.2 (OAuth/session scoping), Codex 0.164.0 (credential masking, enterprise MCP OAuth). These are policy-relevant, not cosmetics.
• Sandbox policy: Antigravity now blocks Docker/K8s/netrc unless granted — update runbooks so CI/devcontainer agent tasks do not silently lose registry or cluster creds. Copilot ACP finally respects saved sandbox flags on resume; align team defaults. Claude’s --mcp-config is no longer writable from the sandbox — keep org MCP files outside the writable tree anyway.
• MCP: Codex can authenticate enterprise MCP with account grants or a dedicated sign-in (including OAuth clients that need secrets). Antigravity can reconfigure plugin MCP variables without a disable/enable dance. Kiro V3 elicitation means MCP tools can block on a human form — budget that in unattended jobs.
• Windsurf org roles: v3.11.216 restores Devin Local for members whose role has no Cloud session permission. Recheck who can open Local vs Cloud after 3.11.212’s Agent Window.
• Goose: Set GOOSE_MAX_CONCURRENT_SUBAGENTS before rolling 1.56.0; unbounded subagents plus resume-on-fail will multiply spend and blast radius.
• Codex presets: Individual /presets slots are in 0.164.0; there is an open team proposal to save shared slash commands there — do not assume presets are org-scoped yet.

What to ignore

• Kilo Code v7.8.17 — release text is “No notable changes.”
• OpenAI Codex CLI rust-v0.165.0-alpha.1 — tag only, no notes.
• Augment Code v1.2.0-prerelease.202610231517 — installer/SEA packaging (unsigned macOS -sea assets). Not a product changelog.
• Crush’s “this will make you feel like a hacker” banner and Antigravity’s opt-in Halloween theme.
• Zed v1.25.3 / v1.26.2-pre until someone names the CVEs — it is a dep bump with no agent-behavior signal.
• Unlisted bullets behind bodyOmitted (Codex +131, Claude +89/+30, Crush +63, Windsurf +30, Goose +23). Absence from this brief is not absence from the release.
• HTML-only Windsurf/Kiro pages vs GitHub tags: use them for direction, not for a complete diff. Kiro’s extracted Improvements/Fixes blocks are empty.

Watch next

• Codex 0.165 (alpha.1 is a named empty tag) and whether /presets stays local or becomes shareable (open team proposal).

• Copilot CLI v1.0.104-2 promotion: fusion on Auto and Autopilot wait-timeout split.

• Goose Boa runtime fallout and Kiro MCP elicitation in headless/CI.

• Open proposals (not shipped): team slash commands in Codex /presets; xAI Grok CLI harness/TUI going open-source; OpenCode PR #38252 verification videos.

• The one source currently erroring — a later pass may add assistants that did not make this evidence window.

How to use DevAgentRadar

This is a public, evidence-only brief for AI coding assistants: versions and claims come from the release notes in the evidence pack, not from vendor marketing. Read Headline for what moved in the last 36 hours, the table for versioned facts, For developers / For teams for actions, What to ignore so you do not chase empty tags, and Watch next for prereleases and gaps. Prefer GitHub tags over HTML changelogs; if a note says further changes were omitted, do not assume we listed them. Open proposals are community asks, not shipping features. Re-check the radar after you upgrade — this snapshot is the last 36 hours plus the strongest versioned signals in window.

Evidence appendix

• New in the last 36 hours: 26 release(s) from 15 tool(s)
• Evidence window: new releases first, then top curated signals (versioned releases preferred)
• Assistants tracked: 29
• Signals in this brief: 40
• Trusted source mix (GitHub/changelog vs HTML): 54%
• Open improvement proposals: 3
• Sources reporting errors: 1

High-signal releases used

• OpenAI Codex CLI rust-v0.164.0: Save reusable prompts and slash commands in ten numbered /presets slots, with a keyboard menu for quick access. (#54380, #54381) · Set model, reasoning effort — source

• Google Antigravity 1.4.6: Added a Configure MCP servers... row for installed plugins in /plugin, so you can set or change a plugin's MCP server variables at any time without disablin — source

• Crush v0.98.2: This patch was brought to you by our team and our favorite contributors! · >[!CAUTION] · > This will make you feel like a hacker · A theme made by @andreyne — source

• Claude Code v2.1.309: Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command · Fixed macOS sandbox denyWrite glo — source

• Google Antigravity 1.4.7: Added lastUserInput to the JSON that hook commands receive on stdin, so a hook can inspect the latest message you sent, for example to screen prompts before t — source

• GitHub Copilot CLI v1.0.103: 2026-10-22 · Clicking a completed response code block copies its original code when enabled. · ACP sessions now honor saved sandbox settings and --sandbox/--no- — source

• Claude Code v2.1.310: Added the Monitor tool and plugin monitors on Bedrock, Vertex, and Foundry, and when telemetry or nonessential traffic is disabled; long foreground sleeps are n — source

• Goose v1.56.0: Automatic thinking level operation for improved model reasoning #12237 · Resume failed or cancelled delegate s — source

• GitHub Copilot CLI v1.0.104-2: Fixed · Managed model "fusion" now starts sessions on Auto and applies fusionTier settings · Interactive and SDK Autopilot sessions keep waiting for attache — source

• Zed AI v1.25.3: Updated dependencies to address recent software ecosystem vulnerabilities. (#66023, [#65963](https://github. — source

• Zed AI v1.26.2-pre: Updated dependencies to address recent software ecosystem vulnerabilities. (#66022, [#65962](https://github. — source

• Windsurf v3.11.212: v3.11.212 October 23, 2026 · New Agent Window The Agent Window now runs the same interface as the Devin web app: the sessions sidebar, session view, Automations — source

• Kimi Code @moonshot-ai/kimi-code@2.3.1: #4348 c569bab — source

• Augment Code v1.2.0-prerelease.202610231517 — auggie-v2 v1.2.0-prerelease.202610231517: Install the latest release (macOS/Linux): · curl -fsSL https://github.com/augmentcode/auggie/releases/latest/download/install.sh | bash · Install a specific ver — source

Open proposals

• Save team slash commands in Codex /presets slots (audience: team, P5)
• Improve with xAI Grok CLI (Grok Build) c68e39f: Publish harness and TUI open-source (audience: everyone, P2)
• Improve with OpenCode pr-38252-videos: pr-38252-videos PR #38252 verification videos (audience: everyone, P2)