Findings
Source-backed observations.
claude-code / high
2026-10-24-claude-code-background-restart-preserves-safe-mode-and-remote-mod-revocation-reaches-open-sessions
claude-code / high
2026-10-24-claude-code-deletion-prompts-narrow-while-unavailable-sandbox-write-fallbacks-are-refused
claude-code / high
2026-10-24-claude-code-desktop-documents-saved-environments-and-in-session-tasks-while-cloud-access-gets-role-con
claude-code / high
2026-10-24-claude-code-forked-delegation-reaches-headless-sessions-while-lifecycle-and-budget-holes-close
claude-code / high
2026-10-24-claude-code-gateway-tool-search-and-provider-native-monitors-absorb-more-integration-code
claude-code / high
2026-10-24-claude-code-hook-failures-and-approval-paths-receive-further-fail-closed-repairs
claude-code / high
2026-10-24-claude-code-hosted-code-review-leaves-preview-and-exposes-review-depth-and-stopping-controls
claude-code / high
2026-10-24-claude-code-idle-compaction-reduces-recaching-work-by-replacing-long-idle-context-with-a-summary
claude-code / high
2026-10-24-claude-code-latest-closes-more-sandbox-escape-paths-and-shell-edits-lose-a-rewind-shortcut
claude-code / high
2026-10-24-claude-code-latest-is-2-1-310-while-the-stable-selector-remains-2-1-308
claude-code / high
2026-10-24-claude-code-linux-can-admit-nested-user-namespaces-at-the-cost-of-a-sandbox-boundary
claude-code / high
2026-10-24-claude-code-managed-policy-refresh-and-hosted-transport-settings-gain-stricter-boundaries
claude-code / high
2026-10-24-claude-code-mcp-admission-and-retries-change-which-servers-start-and-which-calls-repeat
claude-code / high
2026-10-24-claude-code-mcp-rule-names-and-anthropic-proxy-redirects-become-stricter
claude-code / high
2026-10-24-claude-code-mcp-tasks-introduces-server-owned-jobs-with-session-and-cancellation-limits
claude-code / high
2026-10-24-claude-code-plugin-hook-delivery-failures-refuse-actions-and-missing-agent-hook-models-fall-back
claude-code / high
2026-10-24-claude-code-plugin4shell-reaches-the-global-advisory-database-after-the-repository-disclosure
claude-code / high
2026-10-24-claude-code-python-sdk-resume-injection-enters-nvd-after-its-july-fix
claude-code / high
2026-10-24-claude-code-remote-control-rejects-two-sandbox-flags-that-previously-did-nothing
claude-code / high
2026-10-24-claude-code-reproduction-transcripts-gain-request-contents-while-prompt-and-gateway-key-leaks-are-repa
claude-code / high
2026-10-24-claude-code-runner-setup-gains-a-timeout-and-interrupted-remote-tool-outcomes-become-explicit
claude-code / high
2026-10-24-claude-code-safety-events-make-the-reason-for-an-interruption-easier-to-inspect
claude-code / high
2026-10-24-claude-code-skill-grants-now-depend-more-closely-on-admitted-hooks-and-managed-settings
claude-code / high
2026-10-24-claude-code-the-published-guard-now-holds-policy-asks-and-environment-pins-over-user-mods
claude-code / high
2026-10-24-claude-code-ultrareview-now-refuses-untrusted-noninteractive-workspaces-unless-explicitly-trusted
claude-code / high
2026-10-24-claude-code-unattended-retry-can-bound-a-usage-wait-and-recheck-an-early-limit-lift
claude-code / high
2026-10-24-claude-code-unconfigured-headless-jobs-revert-from-auto-to-default-in-several-cases
claude-code / high
2026-10-24-claude-code-worktree-exit-cleanup-is-repaired-where-it-could-discard-commits
codex / high
2026-10-24-codex-an-opt-in-native-tool-copies-files-between-environments-without-model-context
codex / high
2026-10-24-codex-cli-and-typescript-reach-0-164-0-while-python-remains-0-163
codex / high
2026-10-24-codex-compaction-commits-only-completed-summaries-and-resume-restores-more-state
codex / high
2026-10-24-codex-current-documentation-makes-chatgpt-authenticated-auto-review-free
codex / high
2026-10-24-codex-daybreak-s-cli-and-api-key-gates-are-now-stable-defaults
codex / high
2026-10-24-codex-dependency-audits-retain-an-explicit-unmaintained-package-exception
codex / high
2026-10-24-codex-enterprise-authentication-gains-native-mcp-grants-and-windows-proxy-support
codex / high
2026-10-24-codex-guardian-must-reassess-a-retry-that-requests-more-authority
codex / high
2026-10-24-codex-incremental-tools-and-coordinated-mcp-oauth-refresh-now-default
codex / high
2026-10-24-codex-local-aws-masking-and-signing-configuration-are-still-main-only
codex / high
2026-10-24-codex-managed-installations-and-logs-gain-automatic-disk-cleanup
codex / high
2026-10-24-codex-mcp-catalogs-can-refresh-during-a-turn-behind-a-default-off-flag
codex / high
2026-10-24-codex-native-model-request-hooks-observe-attempts-without-authorizing-them
codex / high
2026-10-24-codex-patched-zsh-and-retired-feature-switches-leave-less-configuration-to-maintain
codex / high
2026-10-24-codex-permission-menus-hold-queued-prompts-and-active-grants-permit-stdin-review
codex / high
2026-10-24-codex-plugin-hook-approval-now-checks-file-contents-before-execution
codex / high
2026-10-24-codex-preview-blocks-a-marketplace-host-allowlist-parser-mismatch
codex / high
2026-10-24-codex-preview-fresh-terminal-sessions-defer-reviewer-selection-to-the-server
codex / high
2026-10-24-codex-preview-managed-hooks-execute-under-the-environment-that-owns-them
codex / high
2026-10-24-codex-preview-proxy-signing-keeps-aws-credentials-in-the-proxy-for-supported-requests
codex / high
2026-10-24-codex-preview-selects-v2-for-eligible-fresh-memory-profiles-and-exposes-summaries
codex / high
2026-10-24-codex-preview-supports-custom-managed-configuration-bundle-servers
codex / high
2026-10-24-codex-proxy-hardening-and-credential-masking-reached-stable-with-an-unmasked-fallback
codex / high
2026-10-24-codex-read-only-calls-can-overlap-and-full-history-forks-preserve-their-prefix
codex / high
2026-10-24-codex-runtime-signing-is-present-but-default-off-with-ephemeral-keys
codex / high
2026-10-24-codex-sandbox-protection-covers-case-aliases-and-replaceable-helper-paths
codex / high
2026-10-24-codex-stable-memory-resources-retain-fourteen-days-and-selected-v2-runs-alone
codex / high
2026-10-24-codex-stable-updater-requests-now-require-successfully-loaded-network-policy
codex / high
2026-10-24-codex-startup-approval-policy-precedence-is-repaired-only-on-main
codex / high
2026-10-24-codex-subagent-environments-and-idle-wakes-gain-separate-opt-in-controls
codex / high
2026-10-24-codex-terminal-configuration-becomes-easier-to-inspect-and-reuse
codex / high
2026-10-24-codex-the-google-cloud-provider-is-in-preview-while-public-availability-remains-prospective
codex / high
2026-10-24-codex-the-responses-api-proxy-can-exchange-github-actions-oidc-credentials
codex / high
2026-10-24-codex-the-windows-resume-helper-s-systemroot-fix-is-still-untagged
codex / high
2026-10-24-codex-v8-sort-safety-backport-reaches-stable-code-mode
cursor / medium
2026-10-24-cursor-agent-prompt-steps-in-origin-ci-can-pass-a-required-check-by-finishing-neutral-or-skipped
cursor / high
2026-10-24-cursor-agents-window-3-26-removes-browser-bookmark-controls
cursor / high
2026-10-24-cursor-apps-can-now-create-repositories-and-request-bot-reviewers
cursor / high
2026-10-24-cursor-cli-grep-and-glob-now-search-the-requested-outside-workspace-directory
cursor / high
2026-10-24-cursor-cli-hooks-and-nested-rules-cover-work-that-previously-escaped-their-expected-lifecycle
cursor / high
2026-10-24-cursor-cli-mcp-auto-review-now-receives-schemas-encoded-as-json-strings
cursor / high
2026-10-24-cursor-cli-resume-no-longer-replays-tool-calls-completed-before-a-pause
cursor / high
2026-10-24-cursor-cloud-agents-can-deliver-a-shareable-canvas-instead-of-a-transcript-only-result
cursor / high
2026-10-24-cursor-current-state-an-app-holding-the-user-token-scope-can-act-as-any-namespace-member-with-ord
cursor / medium
2026-10-24-cursor-current-state-cursor-s-hosted-agent-sessions-are-built-to-be-refused-review-approvals-whil
cursor / high
2026-10-24-cursor-editor-conversations-preserve-background-processes-and-make-steering-the-fresh-install-def
cursor / high
2026-10-24-cursor-environment-cli-automation-must-drop-the-ref-flag-and-use-public-delete-ids
cursor / high
2026-10-24-cursor-git-read-hardening-and-untracked-instruction-checks-have-reached-the-default-cli-artifact
cursor / high
2026-10-24-cursor-ide-3-26-makes-a-personal-always-run-approval-persist-in-permissions-json
cursor / high
2026-10-24-cursor-linux-workers-expose-a-live-editor-workspace-only-after-a-separate-opt
cursor / high
2026-10-24-cursor-new-merge-gates-and-refusals-group-approvals-maximum-file-size-per-branch-merge-methods
cursor / high
2026-10-24-cursor-origin-cli-stable-2026-10-23-adds-gates-authorship-takeover-pr-import-identity-mapping-and
cursor / medium
2026-10-24-cursor-origin-lets-an-agent-s-ownership-decision-or-an-installed-app-s-approval-satisfy-code-owne
cursor / medium
2026-10-24-cursor-origin-s-notes-report-fixed-defects-in-ruleset-enforcement-deleted-repository-refs-app-rev
cursor / high
2026-10-24-cursor-projects-now-document-first-use-placement-approval-and-expose-allowed-machine-selection
cursor / high
2026-10-24-cursor-repository-archives-now-obey-the-namespace-ip-allowlist-for-app-and-service-account-caller
cursor / high
2026-10-24-cursor-ruleset-bypass-now-stays-with-the-credential-that-holds-it-must-be-requested-explicitly
cursor / high
2026-10-24-cursor-sdk-1-0-40-wires-nested-claude-hook-denials-into-the-local-execution-gate
cursor / high
2026-10-24-cursor-stable-sdk-updates-improve-background-work-and-failure-reporting-with-a-new-zod-dependency
cursor / high
2026-10-24-cursor-subagent-model-restrictions-and-billing-now-survive-more-delegation-paths
cursor / high
2026-10-24-cursor-the-24-october-installation-snapshot-separates-stable-products-from-moving-previews
cursor / high
2026-10-24-cursor-the-beta-environments-api-makes-cloud-setup-scriptable-with-replacement-semantics-and-conf
cursor / high
2026-10-24-cursor-the-default-cli-adds-a-restricted-git-executor-that-can-refuse-repository-configured-progr
cursor / high
2026-10-24-cursor-the-default-cli-has-an-opt-in-mac-desktop-worker-and-a-separate-signed-computer-use-helper
cursor / high
2026-10-24-cursor-the-npm-next-sdk-can-run-native-file-tools-on-a-supplied-filesystem-tree
cursor / high
2026-10-24-cursor-the-origin-api-shipped-nine-breaking-changes-in-ten-days-including-a-required-reviewer-sha
cursor / high
2026-10-24-cursor-the-origin-cli-now-records-usage-telemetry-by-default-where-cursor-enables-it-and-labels
cursor / high
2026-10-24-cursor-worker-and-sdk-requests-gain-an-explicit-team-identity
cursor / high
2026-10-24-cursor-workers-report-draining-and-refuse-new-work-during-shutdown
deepseek-harness / high
2026-10-24-deepseek-harness-api-resource-authorization-constrains-non-owner-clients-but-retains-browser-owner-authorit
deepseek-harness / high
2026-10-24-deepseek-harness-current-python-distributions-require-explicit-optional-resource-downloads
deepseek-harness / high
2026-10-24-deepseek-harness-default-credential-masking-changes-sent-message-display-not-model-input-or-stored-history
deepseek-harness / medium
2026-10-24-deepseek-harness-desktop-s-changing-ports-and-long-lived-authority-specific-cookies-support-an-accumulation
deepseek-harness / high
2026-10-24-deepseek-harness-main-adds-explicit-extra-writable-roots-and-rejects-redirected-or-unsupported-grants
deepseek-harness / high
2026-10-24-deepseek-harness-main-enables-plugin-management-in-standard-mode-without-removing-approval
deepseek-harness / high
2026-10-24-deepseek-harness-main-preserves-auto-on-shutdown-and-adds-opt-in-sdk-approval-handling-while-live-unload
deepseek-harness / high
2026-10-24-deepseek-harness-main-raises-assumed-capacities-for-undescribed-custom-models
deepseek-harness / high
2026-10-24-deepseek-harness-main-removes-local-web-fetch-s-public-destination-boundary
deepseek-harness / high
2026-10-24-deepseek-harness-main-replaces-tools-configuration-with-explicit-executor-plugins
deepseek-harness / high
2026-10-24-deepseek-harness-minimal-gains-image-reading-and-automatic-and-manual-history-compaction
deepseek-harness / high
2026-10-24-deepseek-harness-native-macos-computer-use-reaches-tagged-source-as-an-explicitly-unmounted-experiment
deepseek-harness / high
2026-10-24-deepseek-harness-plugin-discovery-and-hot-reload-expand-while-explicit-compatibility-checks-reject-mismatch
deepseek-harness / high
2026-10-24-deepseek-harness-published-channel-selectors-disagree-and-the-harness-remains-entirely-prerelease
deepseek-harness / high
2026-10-24-deepseek-harness-rc-3-adds-navigation-customization-and-more-desktop-analytics-events-with-a-separate-live
deepseek-harness / high
2026-10-24-deepseek-harness-rc-3-discovers-official-api-key-models-dynamically-instead-of-relying-only-on-the-bundled
deepseek-harness / high
2026-10-24-deepseek-harness-recreating-a-custom-profile-now-deletes-its-previous-directory
deepseek-harness / high
2026-10-24-deepseek-harness-saved-credentials-win-in-web-and-desktop-while-headless-stops-loading-them-by-default
deepseek-harness / high
2026-10-24-deepseek-harness-sdk-session-resume-and-optional-ptc-memory-reduce-restart-work-without-restoring-running
deepseek-harness / high
2026-10-24-deepseek-harness-search-and-fetch-apis-add-an-opt-in-hosted-retrieval-route-with-separate-prompt-egress
deepseek-harness / high
2026-10-24-deepseek-harness-the-rc-line-inherits-alpha-s-listener-instruction-and-integration-contracts-including-enab
deepseek-harness / high
2026-10-24-deepseek-harness-the-rc-upgrade-promotes-python-ptc-filesystem-confinement
deepseek-harness / high
2026-10-24-deepseek-harness-the-shipped-http-mcp-client-is-in-the-affected-range-of-the-redirect-advisory
deepseek-harness / high
2026-10-24-deepseek-harness-turning-coding-tools-off-can-reset-the-saved-default-from-any-authenticated-browser
deepseek-harness / high
2026-10-24-deepseek-harness-undici-advisories-overlap-exact-runtime-pins-including-the-local-web-fetch-implementation
gemini-cli / high
2026-10-24-gemini-cli-a2a-and-conversation-adapters-gain-narrower-cancellation-and-more-complete-protocol-record
gemini-cli / high
2026-10-24-gemini-cli-nightly-bridges-the-host-ide-companion-into-container-sandboxes
gemini-cli / high
2026-10-24-gemini-cli-nightly-checks-existing-file-writability-and-preserves-hard-links
gemini-cli / high
2026-10-24-gemini-cli-nightly-exposes-a-machine-readable-local-model-catalog
gemini-cli / high
2026-10-24-gemini-cli-nightly-scopes-flag-taint-to-external-output-and-remembers-approved-flags-within-the-sessi
gemini-cli / high
2026-10-24-gemini-cli-preview-allows-an-explicit-per-server-private-network-mcp-oauth-exception
gemini-cli / high
2026-10-24-gemini-cli-preview-checks-whether-an-automatic-update-changed-the-active-installation
gemini-cli / high
2026-10-24-gemini-cli-preview-fixes-env-resolution-order-nightly-preserves-raw-placeholders-during-migration
gemini-cli / high
2026-10-24-gemini-cli-preview-forwards-parent-signals-nightly-blocks-further-work-after-cancellation
gemini-cli / high
2026-10-24-gemini-cli-preview-restores-user-git-configuration-while-disabling-interactive-credential-prompts
gemini-cli / high
2026-10-24-gemini-cli-skill-parsing-and-hook-import-preserve-more-of-portable-configuration
gemini-cli / high
2026-10-24-gemini-cli-stable-bounds-authentication-retries-and-isolates-extension-loading-failures
gemini-cli / high
2026-10-24-gemini-cli-stable-can-authenticate-telemetry-exports-with-configured-otlp-headers
gemini-cli / high
2026-10-24-gemini-cli-stable-directory-references-stop-eagerly-reading-the-entire-directory
gemini-cli / high
2026-10-24-gemini-cli-stable-hardens-the-github-extension-json-downloader
gemini-cli / high
2026-10-24-gemini-cli-stable-keeps-the-full-ask-user-question-beside-the-answer
gemini-cli / high
2026-10-24-gemini-cli-stable-refuses-project-settings-writes-in-untrusted-workspaces
gemini-cli / high
2026-10-24-gemini-cli-stable-repairs-resumed-session-deletion-duplicate-tool-responses-and-rapid-exit-history
gemini-cli / high
2026-10-24-gemini-cli-the-readme-stops-promising-obsolete-access-and-warns-about-gemini-4-optimization
github-copilot-cli / high
2026-10-24-github-copilot-cli-a-new-invocation-flag-disables-first-party-client-telemetry-not-every-data-path
github-copilot-cli / high
2026-10-24-github-copilot-cli-acp-honors-saved-sandbox-settings-and-launch-flags-on-new-and-resumed-sessions
github-copilot-cli / high
2026-10-24-github-copilot-cli-assisted-approval-expands-extension-requests-stay-explicit-and-ambiguous-skill-grants-prom
github-copilot-cli / high
2026-10-24-github-copilot-cli-corporate-proxy-inheritance-and-long-running-sandbox-commands-get-stable-repairs
github-copilot-cli / high
2026-10-24-github-copilot-cli-custom-agents-receive-tools-declared-through-the-documented-aliases
github-copilot-cli / high
2026-10-24-github-copilot-cli-default-feature-availability-now-applies-to-existing-unconfigured-ga-features
github-copilot-cli / high
2026-10-24-github-copilot-cli-enterprise-reports-expose-customization-names-and-otlp-gains-renewable-header-helpers
github-copilot-cli / high
2026-10-24-github-copilot-cli-extension-docs-separate-running-trusted-code-from-letting-the-agent-manage
github-copilot-cli / high
2026-10-24-github-copilot-cli-gpt-5-responses-requests-regain-model-specific-default-verbosity
github-copilot-cli / high
2026-10-24-github-copilot-cli-hosted-model-retirements-change-built-in-agent-routing-independently-of-the-cli-pin
github-copilot-cli / high
2026-10-24-github-copilot-cli-local-network-access-defaults-on-and-macos-gains-a-narrower-localhost-exception
github-copilot-cli / high
2026-10-24-github-copilot-cli-managed-policy-docs-accept-registry-style-mcp-names-and-add-a-base64-image-requirement
github-copilot-cli / high
2026-10-24-github-copilot-cli-mcp-startup-stops-blocking-whole-sessions-and-tool-caches-cross-worktrees
github-copilot-cli / high
2026-10-24-github-copilot-cli-one-session-folder-trust-replaces-persistent-setup-while-trusted-repository-inputs-do-more
github-copilot-cli / high
2026-10-24-github-copilot-cli-online-semantic-search-defaults-on-while-model-routing-and-long-session-recovery-change
github-copilot-cli / high
2026-10-24-github-copilot-cli-remote-startup-flags-split-from-history-syncing-and-bare-share-stops-publishing-immediatel
github-copilot-cli / high
2026-10-24-github-copilot-cli-stable-1-0-103-replaces-1-0-97-while-runtime-auto-update-remains-enabled
github-copilot-cli / high
2026-10-24-github-copilot-cli-the-built-in-browser-plugin-becomes-browser-use-while-retaining-preferences
github-copilot-cli / high
2026-10-24-github-copilot-cli-the-preview-removes-the-assisted-experimental-gate-and-changes-background-task-waiting
github-copilot-cli / high
2026-10-24-github-copilot-cli-workflow-subagents-gain-native-structured-output-and-inherit-granted-tool-approvals
hermes-agent / high
2026-10-24-hermes-agent-aiohttp-multipart-resource-exhaustion-is-patched-in-messaging-dependency-pins
hermes-agent / high
2026-10-24-hermes-agent-automatic-session-deletion-returns-to-explicit-opt
hermes-agent / high
2026-10-24-hermes-agent-canary-enforces-catalog-minimum-hermes-versions-before-installing-or-updating-plugins
hermes-agent / high
2026-10-24-hermes-agent-canary-lets-confining-terminal-backends-route-file-tools-through-the-backend
hermes-agent / high
2026-10-24-hermes-agent-canary-makes-mcp-session-and-permanent-trust-answers-stick-per-tool
hermes-agent / high
2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configuration
hermes-agent / high
2026-10-24-hermes-agent-canary-removes-the-legacy-browser-tools-from-core
hermes-agent / high
2026-10-24-hermes-agent-declared-mcp-costs-can-trigger-approval-before-a-chat-exceeds-its-budget
hermes-agent / high
2026-10-24-hermes-agent-delegation-can-select-operator-defined-model-or-profile-routes
hermes-agent / high
2026-10-24-hermes-agent-dependency-repairs-reach-stable-with-exploit-conditions-narrower-than-the-package-names
hermes-agent / high
2026-10-24-hermes-agent-desktop-simple-git-remediation-also-changes-forwarded-git-environment-variables
hermes-agent / high
2026-10-24-hermes-agent-desktop-trials-and-connectors-reduce-setup-with-account-and-data-use-boundaries-still-visi
hermes-agent / high
2026-10-24-hermes-agent-dirty-worktrees-can-be-archived-and-deleted-by-default
hermes-agent / high
2026-10-24-hermes-agent-docker-cleanup-strips-sandbox-privilege-bits-including-persistent-container-leftovers
hermes-agent / high
2026-10-24-hermes-agent-experimental-mcp-event-subscriptions-can-start-unattended-agent-runs
hermes-agent / high
2026-10-24-hermes-agent-external-memory-calls-can-recover-after-a-stall-and-plugins-get-a-post-compaction-hook
hermes-agent / high
2026-10-24-hermes-agent-fresh-installs-now-select-stable-but-a-wrong-tree-release-shows-what-the-channel-does-not
hermes-agent / high
2026-10-24-hermes-agent-gateway-restart-recovery-and-service-ownership-receive-separate-repairs
hermes-agent / high
2026-10-24-hermes-agent-hermes-as-an-mcp-server-now-requires-a-plugin-and-a-different-client-command
hermes-agent / high
2026-10-24-hermes-agent-local-execute-code-can-skip-whole-script-approval-only-for-an-attached-approving-viewer
hermes-agent / high
2026-10-24-hermes-agent-local-model-turns-handle-prompt-loading-and-laptop-sleep-without-treating-them-as-a-dead
hermes-agent / high
2026-10-24-hermes-agent-mcp-servers-can-show-live-progress-in-the-calling-chat
hermes-agent / high
2026-10-24-hermes-agent-plugins-can-delegate-oauth-sign-in-and-refresh-to-hermes
hermes-agent / high
2026-10-24-hermes-agent-telegram-dm-topic-transfer-is-a-new-explicit-opt
hermes-agent / high
2026-10-24-hermes-agent-the-gateway-owns-classic-cli-turns-and-live-revocations-reach-more-request-paths
openclaw / high
2026-10-24-openclaw-bash-predicates-still-bypass-exec-allowlist-review-on-all-three-published-channels
openclaw / high
2026-10-24-openclaw-browser-pairing-uses-a-private-file-instead-of-credential-bearing-process-arguments
openclaw / high
2026-10-24-openclaw-cli-tool-catalog-changes-now-invalidate-stale-native-sessions
openclaw / high
2026-10-24-openclaw-directed-sends-no-longer-require-direct-access-to-another-agent-s-transcript
openclaw / high
2026-10-24-openclaw-extended-stable-advanced-to-september-and-lost-its-narrower-default-distinction
openclaw / high
2026-10-24-openclaw-final-argument-approval-binding-reached-both-stable-lines
openclaw / high
2026-10-24-openclaw-headless-agent-exec-dispatches-blocking-policy-hooks-from-stable-10
openclaw / high
2026-10-24-openclaw-known-incompatible-external-codex-runtime-plugins-are-refused-before-serving-turns
openclaw / high
2026-10-24-openclaw-main-adds-an-invitation-bound-guest-welcome-endpoint-without-a-model-run
openclaw / high
2026-10-24-openclaw-main-adds-gateway-owned-exec-review-for-cloud-workers
openclaw / high
2026-10-24-openclaw-main-warns-when-mutable-sender-names-select-privileged-tool-policies
openclaw / high
2026-10-24-openclaw-model-discovery-and-worker-inference-reduce-manually-maintained-provider-wiring
openclaw / high
2026-10-24-openclaw-plugin-browsing-and-device-enrollment-remove-setup-steps-while-retaining-explicit-authorit
openclaw / high
2026-10-24-openclaw-same-conversation-scheduled-continuations-re-admit-the-original-operator-authority
openclaw / high
2026-10-24-openclaw-sandboxed-cron-and-delegated-children-need-api-models-until-host-cli-guards-ship
openclaw / high
2026-10-24-openclaw-slack-and-discord-room-policy-binding-is-fixed-in-beta-not-stable-10
openclaw / high
2026-10-24-openclaw-stable-now-requires-the-october-patched-node-runtime
openclaw / high
2026-10-24-openclaw-stable-package-and-linux-delivery-now-both-select-2026-10
openclaw / high
2026-10-24-openclaw-stable-rejects-old-telegram-imports-instead-of-replaying-them-as-fresh-work
openclaw / high
2026-10-24-openclaw-the-new-stable-train-no-longer-enables-the-profile-s-native-compaction-defaults
openclaw / high
2026-10-24-openclaw-tlon-sender-identity-and-hosted-doctor-diagnosis-received-separate-authority-repairs
openclaw / high
2026-10-24-openclaw-windows-update-repairs-shipped-but-the-original-updater-can-still-be-the-obstacle
openclaw / high
2026-10-24-openclaw-workshop-replaces-proposal-review-with-direct-edits-and-bounded-undo-history
openclaw / high
2026-10-24-openclaw-workshop-retirement-requires-manual-migration-of-proposal-integrations-and-old-backups
openclaw / high
2026-10-24-openclaw-x-mentions-and-normal-public-thread-links-reached-stable
opencode / high
2026-10-24-opencode-a-september-advisory-concerns-cross-site-server-upgrades-on-npm-family-v1-installations
opencode / high
2026-10-24-opencode-acp-starts-a-private-server-and-persists-directory-grants-on-the-session
opencode / high
2026-10-24-opencode-bundled-bun-and-long-running-request-fixes-require-updating-the-running-application
opencode / high
2026-10-24-opencode-compaction-gains-an-opt-in-background-summary-with-real-latency-and-inference-tradeoffs
opencode / high
2026-10-24-opencode-configured-instructions-start-loading-and-claude-skill-discovery-disable-flags-are-honored
opencode / high
2026-10-24-opencode-configured-reasoning-options-generate-model-variants-in-both-majors
opencode / high
2026-10-24-opencode-credentials-follow-the-execution-host-or-the-optional-console-gateway
opencode / high
2026-10-24-opencode-current-distribution-separates-v2-stable-from-v1-and-independent-previews
opencode / high
2026-10-24-opencode-dependency-hardening-removes-nested-seroval-1-3-2-but-does-not-establish-complete-remediat
opencode / high
2026-10-24-opencode-eight-public-malware-advisories-name-third-party-opencode-ecosystem-packages
opencode / high
2026-10-24-opencode-free-model-selection-defaults-and-model-picker-visibility-change
opencode / high
2026-10-24-opencode-fresh-zsh-fish-installations-receive-missing-shell-configuration
opencode / high
2026-10-24-opencode-go-documentation-ends-a-fourfold-step-5-preview-allowance-promotion
opencode / high
2026-10-24-opencode-hosted-github-bridge-authentication-surfaces-are-narrowed-or-removed
opencode / high
2026-10-24-opencode-idle-unload-control-and-quota-recovery-reduce-distinct-interruption-costs
opencode / high
2026-10-24-opencode-local-execution-does-not-imply-zero-telemetry-or-uniform-model-retention
opencode / high
2026-10-24-opencode-mcp-human-input-forms-reach-clients-and-client-hosted-mcp-arrives-experimentally
opencode / high
2026-10-24-opencode-plan-restricts-edit-tools-but-retains-host-shell-authority
opencode / high
2026-10-24-opencode-plugins-code-mode-and-worktree-tools-expose-the-harness-as-a-programmable-host
opencode / high
2026-10-24-opencode-project-approvals-persist-while-managed-policy-can-deny-a-configured-tool-or-integration
opencode / high
2026-10-24-opencode-sanitized-exports-and-database-errors-lose-additional-hidden-data
opencode / high
2026-10-24-opencode-sdk-clients-can-discover-voice-models-and-start-console-hosted-gpt-live-sessions
opencode / high
2026-10-24-opencode-session-archiving-is-restored-through-durable-events-and-api-state
opencode / high
2026-10-24-opencode-the-diff-side-panel-graduates-from-an-experiment-to-the-default
opencode / high
2026-10-24-opencode-the-mcp-oauth-command-injection-report-maps-to-september-fixes-in-both-release-lines
opencode / high
2026-10-24-opencode-v1-session-sharing-is-discontinued-despite-surviving-sharing-documentation
opencode / high
2026-10-24-opencode-v1-worktree-deletion-remains-unresolved-while-v2-requires-a-stored-worktree
opencode / high
2026-10-24-opencode-v2-1-changes-public-replay-and-compaction-fields-while-preserving-legacy-stored-data
opencode / high
2026-10-24-opencode-v2-cli-server-paths-generate-passwords-while-remote-pairing-exposes-the-same-execution-hos
opencode / high
2026-10-24-opencode-v2-migration-changes-the-executable-configuration-and-extension-contract
openhands / high
2026-10-24-openhands-a-compatibility-cap-excludes-the-compromised-litellm-release-while-dependency-freshness
openhands / high
2026-10-24-openhands-a-server-can-offer-local-and-docker-conversations-but-client-resource-values-are-not-cappe
openhands / high
2026-10-24-openhands-browser-disabled-servers-stop-advertising-browser-tools-and-built-in-agents
openhands / high
2026-10-24-openhands-canvas-backend-logs-default-to-warning
openhands / high
2026-10-24-openhands-canvas-removes-the-session-key-from-a-child-command-line-only-after-v1-33
openhands / high
2026-10-24-openhands-certificate-distrust-ships-in-python-dependencies-with-an-os-bundle-repair-still-on-main
openhands / high
2026-10-24-openhands-children-inherit-exactly-the-parent-s-mcp-set-and-policy-rails-parse-shell-structure
openhands / high
2026-10-24-openhands-cipher-key-rotation-gains-a-migration-path-and-refuses-destructive-writes-under-a-lost-key
openhands / high
2026-10-24-openhands-configured-emails-can-receive-instance-super-admin-on-oauth-login
openhands / high
2026-10-24-openhands-daily-quotas-count-sandbox-creation-and-members-can-save-their-own-automation-drafts
openhands / high
2026-10-24-openhands-enterprise-binds-account-linking-to-the-browser-but-makes-email-verification-enforcement
openhands / high
2026-10-24-openhands-enterprise-compose-shares-sandboxes-across-conversations-by-default
openhands / high
2026-10-24-openhands-enterprise-packages-a-local-compose-stack-and-clarifies-the-licensed-helm-path
openhands / high
2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlled
openhands / high
2026-10-24-openhands-failed-automation-sandbox-starts-get-cleanup-and-bounded-retries
openhands / high
2026-10-24-openhands-github-mentions-can-request-code-changes-under-a-repository-write-gate
openhands / high
2026-10-24-openhands-github-user-server-and-oauth-token-literals-gain-redaction-patterns
openhands / high
2026-10-24-openhands-in-conversation-secret-requests-reach-stable-with-server-side-profile-filtering
openhands / high
2026-10-24-openhands-install-snapshot-is-canvas-v1-33-0-with-separately-pinned-services-and-extensions
openhands / high
2026-10-24-openhands-llm-profile-validation-stops-after-one-bounded-primary-model-attempt
openhands / high
2026-10-24-openhands-local-launches-keep-the-selected-profile-and-profiles-take-ownership-of-behavior
openhands / high
2026-10-24-openhands-mcp-oauth-installation-and-refresh-improve-while-acp-credential-forwarding-remains-unrelea
openhands / high
2026-10-24-openhands-plugin-manifests-can-carry-executable-automations-and-azure-devops-joins-the-event-path
openhands / high
2026-10-24-openhands-sentry-catalog-offers-mcp-oauth-and-a-self-hosted-token-path
openhands / high
2026-10-24-openhands-sessionstart-hooks-deliver-their-additional-context-to-the-agent
openhands / high
2026-10-24-openhands-software-factory-guidance-ships-and-becomes-default-enabled
openhands / high
2026-10-24-openhands-strict-plugin-preflight-resolves-a-revision-without-enabling-the-plugin
openhands / high
2026-10-24-openhands-the-digitalocean-web-bridge-ships-default-on-then-returns-to-opt
openhands / high
2026-10-24-openhands-tmux-starts-honoring-secret-sanitization-while-the-automation-key-alias-still-survives
openhands / high
2026-10-24-openhands-typescript-conversation-limits-now-reach-the-server
paperclip / high
2026-10-24-paperclip-assistant-mcp-can-configure-work-as-well-as-delegate
paperclip / high
2026-10-24-paperclip-beta-adds-hosted-grok-bot-and-personal-muse-integrations-with-explicit-limits
paperclip / high
2026-10-24-paperclip-beta-assigns-local-stdio-mcp-servers-from-the-execution-host
paperclip / high
2026-10-24-paperclip-beta-defaults-new-codex-claude-and-pi-agents-to-qualified-native-runtimes
paperclip / high
2026-10-24-paperclip-beta-defaults-opencode-to-runner-and-offers-explicit-upgrades-for-saved-agents
paperclip / high
2026-10-24-paperclip-beta-drops-filesystem-history-from-workspace-authorization
paperclip / high
2026-10-24-paperclip-beta-edits-agent-connections-and-default-models-in-bulk
paperclip / high
2026-10-24-paperclip-beta-exposes-assigned-service-secrets-to-legacy-codex-shell-commands
paperclip / high
2026-10-24-paperclip-beta-gives-all-human-roles-commentary-read-access-by-default
paperclip / high
2026-10-24-paperclip-beta-google-workspace-setup-initially-requests-read-and-write-across-three-services
paperclip / high
2026-10-24-paperclip-beta-keeps-case-phases-on-one-task-and-adds-reusable-written-workflows
paperclip / high
2026-10-24-paperclip-beta-offers-a-paid-classifier-for-tool-result-prompt-injection-retaining-fallback-checks
paperclip / high
2026-10-24-paperclip-beta-otlp-export-defaults-task-content-on-once-enabled
paperclip / high
2026-10-24-paperclip-beta-prevents-policy-replacement-from-discarding-an-unexecuted-live-review
paperclip / high
2026-10-24-paperclip-beta-removes-pipelines-operating-surfaces-while-retaining-stored-data
paperclip / high
2026-10-24-paperclip-beta-repairs-stop-recovery-and-finally-distinguishes-soft-budget-warnings
paperclip / high
2026-10-24-paperclip-canary-adds-governed-secret-vault-and-deployment-actions
paperclip / high
2026-10-24-paperclip-canary-encrypts-sensitive-approvals-and-binds-retry-identity-to-actor-and-key-custody
paperclip / high
2026-10-24-paperclip-failed-workspace-copy-back-can-preserve-the-only-recoverable-sandbox
paperclip / high
2026-10-24-paperclip-preview-recovery-expires-saved-work-and-closed-native-sessions
paperclip / high
2026-10-24-paperclip-slack-setup-becomes-automatic-while-github-bot-management-moves-behind-an-opt-in-gate
paperclip / high
2026-10-24-paperclip-stable-adds-model-gateways-and-native-runtime-choices-without-removing-compatibility-limit
paperclip / high
2026-10-24-paperclip-stable-enforces-private-task-reads-with-privileged-and-shared-agent-exceptions
paperclip / high
2026-10-24-paperclip-stable-gives-agents-durable-lifecycle-state-and-signing-identities
paperclip / high
2026-10-24-paperclip-stable-grants-existing-human-operators-company-editing-and-tool-administration
paperclip / high
2026-10-24-paperclip-stable-installation-advances-while-preview-source-and-container-pointers-remain-distinct
paperclip / high
2026-10-24-paperclip-stable-makes-cost-receipts-durable-and-can-hold-admission-on-unknown-prices
paperclip / high
2026-10-24-paperclip-stable-meters-internal-model-decisions-and-optional-acknowledgment-generation
paperclip / high
2026-10-24-paperclip-stable-replaces-per-person-automatic-review-switches-with-event-and-author-filters
pi-coding-agent / high
2026-10-24-pi-coding-agent-codemode-cancellation-is-released-with-fifo-admission-and-a-wait-of-at-most-60-seconds
pi-coding-agent / high
2026-10-24-pi-coding-agent-coding-agent-compaction-and-branch-summaries-drop-the-fixed-output-cap-and-repair-recovery
pi-coding-agent / high
2026-10-24-pi-coding-agent-durable-1-4-can-hibernate-between-phases-with-a-one-way-sqlite-upgrade
pi-coding-agent / high
2026-10-24-pi-coding-agent-durable-adds-crash-loop-parking-inspectable-telemetry-and-browser-storage
pi-coding-agent / high
2026-10-24-pi-coding-agent-durable-can-tune-compaction-policy-for-each-provider-and-model
pi-coding-agent / high
2026-10-24-pi-coding-agent-exact-internal-package-versions-and-the-nix-repairs-have-shipped
pi-coding-agent / high
2026-10-24-pi-coding-agent-installed-extensions-can-import-the-public-pi-ai-models-subpath
pi-coding-agent / high
2026-10-24-pi-coding-agent-main-continues-startup-when-a-configured-package-cannot-install
pi-coding-agent / high
2026-10-24-pi-coding-agent-main-improves-cancellation-export-and-large-stream-handling-while-changing-durable-apis
pi-coding-agent / high
2026-10-24-pi-coding-agent-main-rewrites-gemini-const-schemas-while-preserving-literal-data
pi-coding-agent / high
2026-10-24-pi-coding-agent-main-separates-openrouter-reported-total-cost-from-catalog-estimates
pi-coding-agent / high
2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-main
pi-coding-agent / high
2026-10-24-pi-coding-agent-new-compaction-research-reaches-pi-whose-stable-summary-input-still-flattens-role-provenan
pi-coding-agent / high
2026-10-24-pi-coding-agent-pi-has-independently-versioned-front-ends-forks-and-durable-hosts-not-one-synchronized-eco
pi-coding-agent / high
2026-10-24-pi-coding-agent-pi-pocket-declares-and-locks-a-patched-undici-graph
pi-coding-agent / high
2026-10-24-pi-coding-agent-pi-still-pins-undici-8-10-2-after-new-upstream-advisories
pi-coding-agent / high
2026-10-24-pi-coding-agent-provider-routing-and-cache-behavior-changed-without-a-model-quality-guarantee
pi-coding-agent / high
2026-10-24-pi-coding-agent-resume-restores-tool-selections-and-1-4-also-admits-newly-installed-extension-tools
pi-coding-agent / high
2026-10-24-pi-coding-agent-session-sharing-has-an-explicit-destination-setting
pi-coding-agent / high
2026-10-24-pi-coding-agent-the-mcp-adapter-removes-its-separate-script-engine-and-routes-approvals-through-real-tool
pi-coding-agent / high
2026-10-24-pi-coding-agent-tool-boundaries-received-smaller-repairs-while-sdk-consumers-face-further-api-breaks
agent-flywheel / high
2026-10-13-agent-flywheel-a-failed-dcg-install-now-fails-the-install-on-v0-9-0-it-could-finish-green-with-exit
agent-flywheel / high
2026-10-13-agent-flywheel-antigravity-changes-to-gemini-4-argon-late-on-october-13-without-changing-permission-postu
agent-flywheel / high
2026-10-13-agent-flywheel-brenner-installation-could-overwrite-coordination-tools-acfs-had-just-installed
agent-flywheel / high
2026-10-13-agent-flywheel-checksum-publication-stalled-three-times-main-now-defers-an-unauthorized-tool-instead-of
agent-flywheel / high
2026-10-13-agent-flywheel-cloud-setup-hash-checks-downloaded-bundles-but-retains-existing-tools-stable-does-not-cont
agent-flywheel / high
2026-10-13-agent-flywheel-main-bounds-nightly-retry-windows-and-records-missed-updates
agent-flywheel / high
2026-10-13-agent-flywheel-main-leaves-healthy-unchanged-agent-mail-running-during-routine-updates
agent-flywheel / high
2026-10-13-agent-flywheel-main-probes-actual-temp-writes-before-staging-verified-installers
agent-flywheel / high
2026-10-13-agent-flywheel-main-stops-rollback-backoff-from-suppressing-repaired-upstream-releases
agent-flywheel / high
2026-10-13-agent-flywheel-ordinary-installs-now-keep-the-host-s-ubuntu-lts-v0-9-0-defaulted-to-upgrading-toward-25
agent-flywheel / high
2026-10-13-agent-flywheel-post-stable-root-runtime-permission-repair-had-a-user-controlled-symlink-race
agent-flywheel / medium
2026-10-13-agent-flywheel-post-stable-source-changes-consent-order-recovery-fleet-execution-and-credential-visibilit
agent-flywheel / high
2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-only
agent-flywheel / high
2026-10-13-agent-flywheel-shareable-task-packets-retained-raw-data-beside-sanitized-briefs
agent-flywheel / high
2026-10-13-agent-flywheel-source-built-aadc-and-rust-proxy-bypass-stable-holds-the-mirror-source-adds-the-missing
agent-flywheel / high
2026-10-13-agent-flywheel-stable-adds-bounded-isolated-account-rehearsal-before-launching-paid-agents
agent-flywheel / high
2026-10-13-agent-flywheel-stable-updater-locking-now-excludes-root-and-user-runs-targeting-the-same-home
agent-flywheel / high
2026-10-13-agent-flywheel-swarm-launch-reached-the-tag-it-gates-how-many-agents-start-not-what-they-may
agent-flywheel / high
2026-10-13-agent-flywheel-the-mirror-source-adds-additive-module-restore-and-read-only-drift-checks
agent-flywheel / high
2026-10-13-agent-flywheel-the-mirror-source-removes-meta-skill-arm64-refusal-gates
agent-flywheel / high
2026-10-13-agent-flywheel-the-v0-9-0-nightly-rewrote-claude-settings-json-every-night-v0-10-0-stops
agent-flywheel / high
2026-10-13-agent-flywheel-v0-10-0-redacts-tokens-in-self-update-origin-warnings-including-discovered-checkouts
agent-flywheel / high
2026-10-13-agent-flywheel-v0-10-0-s-changelog-describes-the-lts-fix-and-test-limits-not-most-of-what-the-tag-ships
agent-flywheel / high
2026-10-13-agent-flywheel-v0-10-0-withholds-full-install-qualification-and-reads-its-checksum-ledger-from-main
agent-flywheel / high
2026-10-13-agent-flywheel-website-dependency-fixes-change-one-lockfile-six-advisories-have-conditional-mechanisms
agent-zero / high
2026-10-13-agent-zero-chat-names-refresh-by-default-and-unconfigured-local-speech-uses-paradee
agent-zero / high
2026-10-13-agent-zero-claude-thoughts-become-public-summaries-and-refusals-stop-generic-retries
agent-zero / high
2026-10-13-agent-zero-cli-v2-14-separates-remote-shell-sessions-by-chat-context
agent-zero / high
2026-10-13-agent-zero-direct-subagents-gain-visible-working-state-and-an-independent-stop
agent-zero / high
2026-10-13-agent-zero-file-browser-advisories-require-authentication-and-mount-decisions
agent-zero / high
2026-10-13-agent-zero-file-patches-preserve-metadata-and-new-backups-exclude-orchestrator-state
agent-zero / high
2026-10-13-agent-zero-framework-v2-14-cli-v2-14-and-launcher-v1-9-are-the-stable-install-set
agent-zero / high
2026-10-13-agent-zero-internal-browser-sign-ins-remain-shared-after-the-panel-and-deadline-fixes
agent-zero / high
2026-10-13-agent-zero-launcher-v1-9-adds-per-host-certificate-trust-and-preserves-windows-settings
agent-zero / high
2026-10-13-agent-zero-messaging-users-can-toggle-plugins-and-edit-project-scoped-profile-permissions
agent-zero / high
2026-10-13-agent-zero-nonblocking-terminal-i-o-and-complete-ssh-sends-reduce-concurrent-stalls
agent-zero / high
2026-10-13-agent-zero-plugin-updates-rebase-locally-committed-changes
agent-zero / high
2026-10-13-agent-zero-preset-reload-and-chat-visibility-fixes-protect-saved-working-state
agent-zero / high
2026-10-13-agent-zero-remote-input-has-its-own-execution-capable-permission
agent-zero / high
2026-10-13-agent-zero-responses-histories-retain-cache-boundaries-and-providers-use-native-routes
agent-zero / high
2026-10-13-agent-zero-the-remaining-ready-tail-changes-truncation-recovery-and-live-profile-switching
agent-zero / high
2026-10-13-agent-zero-the-retained-parallel-secret-fix-shares-the-worker-argument-dictionary
agent-zero / high
2026-10-13-agent-zero-v2-13-ships-the-earlier-branch-fixes-and-two-breaking-changes
agent-zero / high
2026-10-13-agent-zero-v2-14-ships-conditional-dependency-migration-and-user-plugin-precedence
antigravity / high
2026-10-13-antigravity-1-2-15-the-agent-stops-working-around-denied-permission-requests
antigravity / high
2026-10-13-antigravity-credential-session-and-lock-fixes-shipped-as-ordinary-bullets-there-is-still-no-advisory
antigravity / high
2026-10-13-antigravity-dangerously-skip-permissions-stops-auto-approving-plan-plans-in-1-3-2-plan-and-artifact
antigravity / high
2026-10-13-antigravity-default-verbosity-flipped-to-medium-in-1-3-0-and-overrode-users-who-had-picked-high-while
antigravity / high
2026-10-13-antigravity-failed-subagents-stopped-appearing-as-done-in-1-3
antigravity / high
2026-10-13-antigravity-gate-scope-moved-both-ways-again-always-allow-suggestions-for-go-repo-and-jj-readable-glob
antigravity / high
2026-10-13-antigravity-gemini-enterprise-gained-administrator-enabled-claude-5-5-while-its-linux-sandbox-descript
antigravity / high
2026-10-13-antigravity-headless-as-a-ci-driver-daemons-now-end-with-the-run-late-errors-exit-3-and-an-unknown-age
antigravity / high
2026-10-13-antigravity-homebrew-s-antigravity-cli-cask-tracks-the-vendor-archives-but-leaves-the-self-updater-act
antigravity / high
2026-10-13-antigravity-image-generation-became-a-built-in-image-generator-subagent-in-1-2
antigravity / high
2026-10-13-antigravity-install-channel-re-read-the-binary-updates-itself-from-google-s-updater-checking-at-most
antigravity / high
2026-10-13-antigravity-model-access-changed-by-tier-between-2-and-3-october-the-remaining-claude-4-6-and-gpt-oss
antigravity / high
2026-10-13-antigravity-plugin-validation-and-detail-listings-omitted-loaded-skills-and-subagents-until-1-3-3-and
antigravity / high
2026-10-13-antigravity-rate-limit-retries-follow-the-server-delay-and-stop-on-daily-or-billing-caps-from-1-2
antigravity / high
2026-10-13-antigravity-remote-control-can-now-edit-the-cli-s-permissions-from-the-browser-and-browser-approved
antigravity / high
2026-10-13-antigravity-resuming-a-history-with-a-missing-step-stopped-overwriting-its-newest-messages-in-1-2
antigravity / high
2026-10-13-antigravity-subagents-given-a-branch-or-share-workspace-worked-in-the-real-checkout-of-multi-repositor
antigravity / high
2026-10-13-antigravity-the-cli-sandbox-is-off-by-default-and-its-boundary-is-now-readable-on-macos-it-let-sandbox
antigravity / high
2026-10-13-antigravity-the-official-plugin-marketplace-reached-the-cli-in-1-3-2-one-command-installs-skills-mcp
claude-code / high
2026-10-13-claude-code-agents-md-reaches-all-providers-in-2-1-281-managed-only-still-admits-nested-instructions
claude-code / high
2026-10-13-claude-code-artifact-approvals-stop-covering-files-outside-the-working-directories
claude-code / high
2026-10-13-claude-code-auto-mode-becomes-the-starting-mode-on-every-plan-and-provider-and-for-claude-p-on-third
claude-code / high
2026-10-13-claude-code-bash-checks-deny-and-ask-rules-were-skipped-under-sandbox-auto-allow-dangerous-rm-now-time
claude-code / high
2026-10-13-claude-code-cloud-chrome-actions-no-longer-skip-auto-mode-checks-before-flags-load
claude-code / high
2026-10-13-claude-code-defaults-moved-to-opus-5-5-sonnet-5-5-and-haiku-5-5-new-managed-keys-pin-exact-model-versi
claude-code / high
2026-10-13-claude-code-disableworkflows-no-longer-stops-cloud-reviews-unless-machine-policy-sets
claude-code / high
2026-10-13-claude-code-four-repository-advisories-in-fifteen-days-disclose-earlier-fixes-plugin4shell-among-them
claude-code / high
2026-10-13-claude-code-graders-and-unattended-runs-restricted-left-gaps-until-2-1-290-and-2-1-295-background-comm
claude-code / high
2026-10-13-claude-code-hooks-still-fail-open-by-default-2-1-295-adds-onfailure-block
claude-code / high
2026-10-13-claude-code-local-mcp-connections-negotiate-protocol-2026-07-28-by-default-on-latest
claude-code / high
2026-10-13-claude-code-managed-settings-an-os-denied-read-now-starts-sessions-without-that-source-s-policy-parse
claude-code / high
2026-10-13-claude-code-marketplace-and-skill-impersonation-paths-close-on-stable
claude-code / high
2026-10-13-claude-code-mods-ship-on-by-default-in-2-1-286-and-can-approve-tool-calls-deny-rules-hold-over-them
claude-code / high
2026-10-13-claude-code-plan-mode-stops-auto-approving-mutating-connector-tools-with-a-server-ask-policy
claude-code / high
2026-10-13-claude-code-replies-to-background-sessions-no-longer-approve-a-waiting-command
claude-code / high
2026-10-13-claude-code-repository-files-lose-telemetry-sandbox-chrome-and-attachment-switches-claude-bg-now-asks
claude-code / high
2026-10-13-claude-code-safety-related-model-switches-can-override-a-pinned-opus-model
claude-code / high
2026-10-13-claude-code-self-hosted-runners-pass-prompts-as-files-and-wrappers-must-use-file-flags
claude-code / high
2026-10-13-claude-code-stable-moved-seven-times-in-small-steps-once-about-a-day-after-publish-it-now-serves-2-1
claude-code / high
2026-10-13-claude-code-symlink-writes-now-ask-about-where-they-land-instead-of-their-in-tree-spelling
claude-code / high
2026-10-13-claude-code-telemetry-and-data-exposure-otel-prompt-text-gains-a-second-attribute-background-telemetry
claude-code / high
2026-10-13-claude-code-the-claude-apps-gateway-spend-meter-stops-undercounting-cache-writes-and-server-tools
claude-code / high
2026-10-13-claude-code-the-server-side-classifier-reaches-every-direct-api-session-type-read-only-and-sandboxed
claude-code / high
2026-10-13-claude-code-unreleased-on-main-after-2-1-296-the-mods-guard-extends-to-ask-verdicts-and-pins-policy
codex / high
2026-10-13-codex-alpha-10-enables-cli-daybreak-and-api-key-cyber-program-gates
codex / high
2026-10-13-codex-channel-fourteen-stables-in-eighteen-days-model-and-daemon-changes-in-patches-sdks-in-lock
codex / high
2026-10-13-codex-code-mode-adds-ranked-tool-discovery-and-settlement-streaming
codex / high
2026-10-13-codex-custom-responses-providers-declare-web-and-compaction-capabilities
codex / high
2026-10-13-codex-cutoff-main-changes-the-guardian-v2-classifier-fallback-to-conversation
codex / high
2026-10-13-codex-default-model-moved-again-in-a-hotfix-and-fresh-tui-threads-now-take-the-server-s-defaults
codex / high
2026-10-13-codex-defaults-switched-on-in-the-window-voice-worktrees-api-key-model-discovery-and-unannounced
codex / high
2026-10-13-codex-explicit-user-goal-edits-persist-before-state-changes-and-survive-compaction
codex / high
2026-10-13-codex-extension-filesystem-reads-and-cached-skill-pages-follow-callback-permissions
codex / high
2026-10-13-codex-fresh-v2-subagents-can-inherit-dynamic-tools-behind-a-default-off-flag
codex / high
2026-10-13-codex-fullscreen-transcripts-become-the-default-terminal-presentation
codex / high
2026-10-13-codex-guardian-v2-invalidates-cached-approval-when-unscored-access-widens
codex / high
2026-10-13-codex-guardian-v2-is-still-off-auto-review-gained-policy-template-and-audit-log-controls-plus
codex / high
2026-10-13-codex-interactive-codex-now-attaches-to-a-shared-background-app-server-by-default-from-0-157
codex / high
2026-10-13-codex-macos-managed-configuration-accepts-only-forced-preferences
codex / high
2026-10-13-codex-mcp-oauth-adds-confidential-clients-and-in-session-login
codex / high
2026-10-13-codex-on-0-163-0-previews-through-alpha-10-credential-masking-proxy-dns-authorization-sandbox
codex / high
2026-10-13-codex-projectless-folders-skip-the-trust-prompt-and-the-agents-md-gate-fires-only-on-an-explicit
codex / high
2026-10-13-codex-remote-execution-surfaces-exec-server-auth-is-opt-in-and-the-app-server-docs-lag-the-code
codex / high
2026-10-13-codex-resolved-git-metadata-stays-protected-across-writable-roots
codex / high
2026-10-13-codex-ripgrep-deny-glob-expansion-now-ignores-user-configuration
codex / high
2026-10-13-codex-sandbox-escapes-closed-as-release-note-bullets-in-0-156-0-and-0-162-0-with-no-matching-new
codex / high
2026-10-13-codex-scaffolding-removed-personality-prompt-suggestions-plugin-creator-skill-thread-rollback
codex / high
2026-10-13-codex-stable-0-162-1-keeps-cli-daybreak-off-current-docs-scope-the-approve-for-me-switch-to-desk
codex / medium
2026-10-13-codex-the-auto-started-background-server-can-update-itself-past-a-pinned-npm-or-homebrew-cli
codex / high
2026-10-13-codex-typing-into-an-escalated-terminal-now-needs-approval-by-default-from-0-158
codex / high
2026-10-13-codex-unix-mcp-children-lose-unrelated-descriptors-and-oauth-endpoints-require-http
cursor / high
2026-10-13-cursor-agent-cli-snapshot-freezing-the-recorded-build-also-requires-disabling-updates
cursor / high
2026-10-13-cursor-auto-routing-now-follows-team-model-blocks-in-the-hosted-web-notes
cursor / high
2026-10-13-cursor-bugbot-fixes-new-branch-writes-and-moves-team-billing-to-the-team-limit
cursor / high
2026-10-13-cursor-cloud-wildcard-network-entries-now-include-the-parent-domain
cursor / medium
2026-10-13-cursor-cursor-reports-prompt-removal-over-preceding-months-and-removes-two-cloud-choices
cursor / high
2026-10-13-cursor-grok-bot-terms-add-meeting-use-obligations-without-establishing-feature-availability
cursor / high
2026-10-13-cursor-ide-3-24-describes-run-everything-without-a-sandbox-and-classifier-reviewed-escape-from
cursor / high
2026-10-13-cursor-lab-git-reads-disable-external-diff-and-text-conversion-programs-in-the-inspected-artifact
cursor / high
2026-10-13-cursor-origin-api-clients-need-new-stack-parent-fields-and-public-bypass-user-ids
cursor / high
2026-10-13-cursor-origin-app-marketplace-opens-public-submissions-on-october
cursor / high
2026-10-13-cursor-origin-cli-has-versioned-channels-and-verifies-vendor-hashes-before-extraction
cursor / high
2026-10-13-cursor-origin-cli-removes-pr-targeting-syntax-and-documents-expected-head-merges
cursor / high
2026-10-13-cursor-origin-tightens-specified-merge-gates-while-widening-app-authority-by-credential-class
cursor / high
2026-10-13-cursor-per-surface-release-notes-supplement-the-changelog-and-expose-note-backfills
cursor / high
2026-10-13-cursor-projects-reaches-enterprise-in-documentation-but-per-project-controls-remain-unspecified
cursor / high
2026-10-13-cursor-read-access-needs-a-team-boundary-and-control-over-user-extensions
cursor / high
2026-10-13-cursor-release-note-security-repairs-need-surface-specific-upgrades-and-bounded-advisory-claims
cursor / high
2026-10-13-cursor-remote-control-adds-phone-direction-of-local-agents-while-two-vendor-descriptions-disagree
cursor / high
2026-10-13-cursor-reused-worker-checkouts-gain-an-untracked-agent-configuration-check-in-the-inspected-lab
cursor / high
2026-10-13-cursor-rollouts-extends-agent-work-into-deploy-verification-without-autonomous-rollback
cursor / high
2026-10-13-cursor-sdk-subagent-inheritance-is-opt-in-in-1-0-34-and-remains-so-in-1-0
cursor / high
2026-10-13-cursor-service-account-budgets-and-organization-key-expiry-add-controls-outside-projects
cursor / high
2026-10-13-cursor-the-cli-notes-report-a-model-id-fix-without-naming-the-first-fixed-artifact
cursor / high
2026-10-13-cursor-the-full-dated-install-snapshot-reaches-ide-3-24-18-ios-1-13-0-and-sdk-1-0
cursor / high
2026-10-13-cursor-windows-hooks-could-report-success-without-running-until-the-3-23-repair
deepseek-harness / high
2026-10-13-deepseek-harness-a-cli-version-pin-does-not-freeze-ranged-dependencies-in-deepseek-s-vendored-cordis-stack
deepseek-harness / high
2026-10-13-deepseek-harness-account-funded-model-routes-and-bundled-desktop-cli-reduce-setup-work
deepseek-harness / high
2026-10-13-deepseek-harness-alpha-2-changes-tool-and-subagent-contracts-and-removes-agent-team-outbox-delivery
deepseek-harness / high
2026-10-13-deepseek-harness-alpha-2-gives-session-working-directory-changes-a-persistent-api-and-recovery-path
deepseek-harness / high
2026-10-13-deepseek-harness-alpha-2-rejects-wildcard-web-binds-and-adds-native-tls-rc-still-permits-wildcard-configura
deepseek-harness / high
2026-10-13-deepseek-harness-alpha-2-removes-webruntime-old-overlays-can-stop-connection-startup
deepseek-harness / high
2026-10-13-deepseek-harness-alpha-adds-rival-harness-catalog-bundles-and-a-shared-global-instruction-chain
deepseek-harness / high
2026-10-13-deepseek-harness-background-job-completion-wakes-no-longer-have-a-default-three-turn-cap
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-101078-publishes-a-local-linux-isolation-allegation-without-an-established-curren
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-101102-documents-the-older-code-mode-host-user-trust-model
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-101131-alleges-an-e2b-setup-trust-problem-in-a-retired-component
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-101132-names-bundle-patch-traversal-current-rc-and-alpha-lack-path-containment
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-108788-publishes-an-older-spawn-profile-allegation-with-an-unresolved-mechanism
deepseek-harness / high
2026-10-13-deepseek-harness-cve-2026-108789-concerns-a-trusted-workflow-vm-already-replaced-by-sandboxed-ptc
deepseek-harness / high
2026-10-13-deepseek-harness-npm-latest-is-0-2-0-rc-2-every-distribution-remains-prerelease
deepseek-harness / high
2026-10-13-deepseek-harness-optional-alpha-reasoning-translation-adds-a-separate-data-destination
deepseek-harness / high
2026-10-13-deepseek-harness-ralph-is-disabled-headless-resume-and-model-declared-tool-changes-reach
deepseek-harness / high
2026-10-13-deepseek-harness-scheduled-reminders-are-framed-as-user-messages-after-an-untrusted-content-instruction-was
deepseek-harness / high
2026-10-13-deepseek-harness-session-log-upload-is-enabled-in-the-default-rc-install-the-telemetry-environment-switch
deepseek-harness / high
2026-10-13-deepseek-harness-the-rc-plugin-manager-defaults-to-public-npmmirror-fallback
deepseek-harness / high
2026-10-13-deepseek-harness-the-rc-upgrade-rejects-protocol-configs-and-migrates-settings-presets-logs-and-plugin-apis
deepseek-harness / high
2026-10-13-deepseek-harness-the-web-cookie-signing-key-crosses-the-same-user-agent-and-operator-boundary
deepseek-harness / high
2026-10-13-deepseek-harness-the-web-terminal-and-live-plugin-manager-reach-rc-optional-auto-review-runs-allowed-calls
deepseek-harness / high
2026-10-13-deepseek-harness-windows-delete-confinement-improves-in-0-1-7-workspace-low-labels-persist-and-require-modu
eve / high
2026-10-13-eve-0-79-0-adds-annotation-aware-approval-policies-readable-prompts-and-scored-eval-reporting
eve / high
2026-10-13-eve-a-hook-that-throws-no-longer-stops-the-turn-from-0-68-0-hooks-fail-open-and-must-call-ctx
eve / high
2026-10-13-eve-a-pending-approval-holds-the-turn-authenticated-requesters-answer-by-default-with-an-anony
eve / high
2026-10-13-eve-an-agent-s-tools-and-skills-can-be-served-over-mcp-to-other-harnesses-with-no-model-in-the
eve / high
2026-10-13-eve-approval-gated-workflow-tools-could-start-before-approval-until-0-69-0-and-approvals-outli
eve / high
2026-10-13-eve-approved-calls-ran-with-the-approver-s-identity-and-credentials-until-0-78
eve / high
2026-10-13-eve-attachment-integrity-checks-and-richer-intake-make-file-workflows-more-reliable
eve / high
2026-10-13-eve-buzz-acp-adapter-source-disappears-while-its-last-npm-artifact-remains-available
eve / high
2026-10-13-eve-channel-facts-32-stables-in-22-days-every-npm-version-tagged-previews-only-as-github-prere
eve / high
2026-10-13-eve-configured-datadog-eval-reporters-export-content-by-default
eve / high
2026-10-13-eve-defaults-that-flipped-an-unconfigured-agent-now-runs-gpt-6-luna-fast-at-high-reasoning-and
eve / high
2026-10-13-eve-durable-session-endings-clean-up-sandbox-resources-and-provider-hooks-are-renamed
eve / high
2026-10-13-eve-eve-deleted-scaffolding-the-todo-tool-default-ask-question-background-tasks-and-per-connec
eve / high
2026-10-13-eve-eve-ships-a-coding-agent-extension-and-its-own-benchmark-does-not-separate-it-from-pi-or
eve / high
2026-10-13-eve-experimental-dynamic-schedules-activate-immediately-and-payload-edits-transfer-creator-ide
eve / high
2026-10-13-eve-from-0-63-0-to-0-79-0-is-a-migration-run-modes-tasks-stream-and-handoff-formats-all-broke
eve / high
2026-10-13-eve-further-cancellation-and-child-approval-lifecycle-defects-are-repaired
eve / high
2026-10-13-eve-gateway-native-search-and-silent-stream-retry-extend-unattended-work
eve / high
2026-10-13-eve-local-development-recovery-becomes-explicit-rather-than-automatic
eve / high
2026-10-13-eve-local-self-modification-is-mounted-by-default-in-eve-dev-serves-any-admitted-caller-and
eve / high
2026-10-13-eve-queued-approval-text-can-settle-a-prompt-that-did-not-exist-when-it-was-sent-the-fix-is
eve / high
2026-10-13-eve-same-host-mcp-and-openapi-connection-result-identities-are-repaired-only-on-main
eve / high
2026-10-13-eve-the-workflow-sdk-under-eve-left-beta-eve-now-pins-the-5-x-stable-line
eve / high
2026-10-13-eve-undici-8-10-2-replaces-a-dependency-version-matching-ten-advisories
eve / high
2026-10-13-eve-unpinned-models-agent-aware-sandbox-commands-and-demand-added-catalogs-change-defaults
flue / high
2026-10-13-flue-2-1-1-fixes-quadratic-trace-truncation-that-could-reset-cloudflare-durable-objects
flue / high
2026-10-13-flue-2-1-1-keeps-useflueagent-streaming-after-reload-while-an-observed-submission-remains-unset
flue / high
2026-10-13-flue-2-1-1-widens-hono-dependencies-so-scaffolded-projects-can-share-one-compatible-installatio
flue / high
2026-10-13-flue-2-2-0-adds-bounded-history-reads-pdf-attachments-and-server-timestamps-and-makes-readsubmi
flue / high
2026-10-13-flue-2-2-0-documents-an-approval-gate-pattern-and-states-that-flue-has-no-built-in-approval-api
flue / high
2026-10-13-flue-2-2-0-fixes-cloudflare-routed-anthropic-tool-requests-by-moving-beta-features-to-a-header
flue / high
2026-10-13-flue-2-2-0-to-2-2-2-carried-two-regressions-ai-gateway-claude-ids-fixed-the-same-afternoon-and
flue / high
2026-10-13-flue-2-3-0-carries-no-npm-provenance-published-from-a-maintainer-account-not-the-ci-trusted-pub
flue / high
2026-10-13-flue-2-3-0-gives-execution-interceptors-the-agent-s-name-on-every-step-which-per-agent-policy
flue / high
2026-10-13-flue-2-3-0-makes-the-local-sandbox-actually-kill-a-timed-out-command-s-whole-process-group
flue / high
2026-10-13-flue-2-3-0-moves-flue-onto-pi-1-x-azure-provider-id-renamed-tool-durations-redefined-and-the
flue / high
2026-10-13-flue-2-3-0-returns-flue-to-export-style-releases-squashed-commits-from-a-source-tree-not-on-git
flue / high
2026-10-13-flue-flue-s-cloudflare-sandbox-adapter-targets-the-0-x-sdk-cloudflare-s-sandbox-sdk-1-0-dropped
flue / high
2026-10-13-flue-github-latest-still-points-to-2-2-2-while-npm-latest-is-2-3
flue / high
2026-10-13-flue-npm-next-is-dormant-at-2-2-0-next-1-older-than-latest-missing-later-stable-fixes-with-sand
flue / high
2026-10-13-flue-the-allowed-tools-correction-shipped-in-2-1-1-the-field-is-still-unenforced
flue / high
2026-10-13-flue-trace-content-is-still-on-by-default-the-flue-opentelemetry-readme-said-the-opposite-until
gemini-cli / high
2026-10-13-gemini-cli-a2a-settings-migrate-to-nested-controls-in-memory
gemini-cli / high
2026-10-13-gemini-cli-acp-permissions-correlate-with-tools-and-stable-v0-64-0-reports-usage
gemini-cli / high
2026-10-13-gemini-cli-build-file-tool-gates-reach-stable-and-override-yolo
gemini-cli / high
2026-10-13-gemini-cli-ctrl-c-reaches-cancellation-during-active-operations-in-v0-64
gemini-cli / high
2026-10-13-gemini-cli-file-references-with-line-suffixes-resolve-in-v0-64
gemini-cli / high
2026-10-13-gemini-cli-google-stops-selling-new-code-assist-subscriptions
gemini-cli / high
2026-10-13-gemini-cli-headless-plan-mode-now-encourages-autonomous-implementation
gemini-cli / high
2026-10-13-gemini-cli-ide-companion-shutdown-repair-is-in-v0-65-0-preview-source
gemini-cli / high
2026-10-13-gemini-cli-mcp-add-can-erase-untrusted-project-settings-until-v0-65-0-preview
gemini-cli / high
2026-10-13-gemini-cli-rapid-cancellation-history-repair-reaches-v0-65-0-preview
gemini-cli / high
2026-10-13-gemini-cli-sandboxes-reject-sensitive-workdirs-and-seatbelt-changes-its-state-root
gemini-cli / high
2026-10-13-gemini-cli-september-advisory-withdrawal-consolidates-headless-execution-exposure
gemini-cli / high
2026-10-13-gemini-cli-stable-v0-61-0-rewrites-explicit-flash-model-ids
gemini-cli / high
2026-10-13-gemini-cli-stable-v0-63-0-fixes-agent-git-diff
gemini-cli / high
2026-10-13-gemini-cli-stable-v0-64-0-appends-session-patches-and-serializes-local-writes
gemini-cli / high
2026-10-13-gemini-cli-stable-v0-64-0-narrows-untrusted-argument-false-positives
gemini-cli / high
2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turns
gemini-cli / high
2026-10-13-gemini-cli-tool-text-fields-gain-a-non-configurable-65536-byte-cap
gemini-cli / high
2026-10-13-gemini-cli-v0-63-0-hardens-redirection-config-paths-reads-and-untrusted-resource-output
gemini-cli / high
2026-10-13-gemini-cli-v0-64-0-stable-and-v0-65-0-preview-ship-before-the-window-closes
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-88-managed-settings-now-reach-acp-ahp-host-and-server-sessions-which-previously-ran
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-88-restores-default-hook-cwd-to-the-project-root-and-widens-skill-discovery
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-89-removes-fast-routing-saved-preferences-fall-back-to-balance
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-93-adds-permissions-limitto-a-managed-domain-boundary-that-allow-all-cannot-widen
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and
github-copilot-cli / high
2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed
github-copilot-cli / high
2026-10-13-github-copilot-cli-approvals-got-finer-and-assisted-permissions-the-llm-approval-judge-got-an-admin-off-switc
github-copilot-cli / high
2026-10-13-github-copilot-cli-custom-agent-docs-put-personal-definitions-ahead-of-repository-and-organization-definition
github-copilot-cli / medium
2026-10-13-github-copilot-cli-docs-describe-preview-computer-use-and-dynamic-workflows-with-different-permission-surface
github-copilot-cli / high
2026-10-13-github-copilot-cli-docs-separate-telemetry-identity-from-five-content-capture-classes-all-off-by-default
github-copilot-cli / high
2026-10-13-github-copilot-cli-dynamic-workflow-preview-excludes-annual-pro-plans-still-on-legacy-request-billing
github-copilot-cli / medium
2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced
github-copilot-cli / high
2026-10-13-github-copilot-cli-managed-sandbox-docs-require-cli-1-0-93-and-block-older-client-connections
github-copilot-cli / high
2026-10-13-github-copilot-cli-mcp-scopes-and-slash-name-filters-repaired-in-1-0-89-pre-discovery-toggles-repaired-in-1
github-copilot-cli / high
2026-10-13-github-copilot-cli-repository-controlled-inputs-widened-claude-rules-1-0-89-hot-applied-mcp-config-1-0-93-add
github-copilot-cli / high
2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca
github-copilot-cli / high
2026-10-13-github-copilot-cli-stable-1-0-97-repairs-json-secret-redaction-and-mcp-selection-inline-images-now-default
github-copilot-cli / high
2026-10-13-github-copilot-cli-stable-1-0-97-repairs-resumed-plugin-hooks-and-canceled-writes-and-denies-unattended-hook
github-copilot-cli / high
2026-10-13-github-copilot-cli-ten-stable-releases-after-the-baseline-pinning-the-package-does-not-disable-cli-or-plugin
grok-build / high
2026-10-13-grok-build-deny-rule-fixes-cover-alternate-paths-while-strict-still-reads-workspace-secrets
grok-build / high
2026-10-13-grok-build-export-and-copy-refuse-destinations-that-already-exist
grok-build / high
2026-10-13-grok-build-generation-pinned-per-version-notes-are-the-fuller-upgrade-record
grok-build / high
2026-10-13-grok-build-headless-goals-and-acp-gain-capability-while-sharing-and-memory-controls-shrink
grok-build / high
2026-10-13-grok-build-http-mcp-json-rpc-errors-no-longer-cause-repeated-tool-execution
grok-build / high
2026-10-13-grok-build-invalid-policy-now-has-distinct-startup-errors-skipped-entries-and-retained-rules
grok-build / high
2026-10-13-grok-build-late-on-october-13-build-1-0-56-appeared-and-winget-added-stable-1-0
grok-build / high
2026-10-13-grok-build-local-http-approval-hooks-work-but-refused-requests-still-fail-open
grok-build / high
2026-10-13-grok-build-parallel-tools-editing-the-same-file-are-serialized-while-unrelated-calls-remain-concurren
grok-build / high
2026-10-13-grok-build-plan-mode-refuses-mcp-resource-downloads-and-headless-runs-honor-no-subagents
grok-build / high
2026-10-13-grok-build-selecting-a-version-with-install-sh-does-not-disable-automatic-updates
grok-build / high
2026-10-13-grok-build-stable-1-0-52-carries-corrections-for-approval-scope-and-deceptive-permission-cards
grok-build / high
2026-10-13-grok-build-stable-is-1-0-52-enterprise-is-ahead-and-npm-supplies-package-integrity
grok-build / high
2026-10-13-grok-build-strict-documents-a-daemon-storage-write-allowance-in-addition-to-workspace-and-temporary
grok-build / high
2026-10-13-grok-build-the-1-0-52-guide-corrects-imported-hook-compatibility-and-documents-fail-open-traps
grok-build / high
2026-10-13-grok-build-the-1-0-52-sandbox-guide-scopes-hook-folder-protection-and-leaves-failure-behavior-conflic
grok-build / high
2026-10-13-grok-build-the-binary-documents-a-cursor-worker-whose-implementation-is-absent-from-the-public-mirror
grok-build / high
2026-10-13-grok-build-the-september-29-mirror-cannot-identify-the-complete-source-of-stable-1-0
grok-build / high
2026-10-13-grok-build-web-search-hooks-lose-the-ability-to-rewrite-calls-to-restrict-domains
grok-build / high
2026-10-13-grok-build-worktree-and-file-loss-fixes-are-stable-the-wrong-checkout-fork-fix-remains-non-stable
grok-build / high
2026-10-13-grok-build-worktree-commands-gain-jujutsu-compatibility
hermes-agent / high
2026-10-13-hermes-agent-anthropic-and-bedrock-resume-preserve-provider-appropriate-signed-reasoning
hermes-agent / high
2026-10-13-hermes-agent-anthropic-labeled-custom-endpoints-no-longer-receive-refreshed-vendor-credentials
hermes-agent / high
2026-10-13-hermes-agent-approval-and-consent-fixes-v2026-9-24-to-v0-21-6-hook-approvals-escalate-stale-sessions
hermes-agent / high
2026-10-13-hermes-agent-browser-profiles-screenshots-and-media-caches-gain-private-filesystem-modes
hermes-agent / high
2026-10-13-hermes-agent-compaction-on-1m-window-models-moved-from-a-256k-cap-to-half-the-window-in-v0-21-6-and-a
hermes-agent / high
2026-10-13-hermes-agent-core-shed-six-memory-providers-home-assistant-spotify-and-skill-sync-configured-homes-can
hermes-agent / high
2026-10-13-hermes-agent-correction-pypi-and-homebrew-distribution-ended-in-july-pip-install-hermes-agent-still-ins
hermes-agent / high
2026-10-13-hermes-agent-correction-the-browser-credential-vault-is-on-by-default-only-real-profile-browsing-is-opt
hermes-agent / high
2026-10-13-hermes-agent-cron-reports-an-unwritable-store-as-degraded-and-notifies-the-owning-home-on-recovery
hermes-agent / high
2026-10-13-hermes-agent-diagnostic-dumps-redact-credentials-embedded-in-base-urls
hermes-agent / high
2026-10-13-hermes-agent-email-gateway-allowlists-could-be-passed-with-a-spoofed-from-display-name-or-smuggled-auth
hermes-agent / high
2026-10-13-hermes-agent-explicitly-empty-resolved-cli-and-per-job-cron-toolsets-no-longer-widen-to-defaults
hermes-agent / high
2026-10-13-hermes-agent-four-dashboard-sign-in-defects-reported-by-tenable-including-a-login-code-redirect-that
hermes-agent / high
2026-10-13-hermes-agent-fresh-vercel-sandboxes-use-a-managed-image-and-migrate-copied-node24-defaults
hermes-agent / high
2026-10-13-hermes-agent-hermes-update-follows-published-releases-from-v0-21-7-before-that-an-unconfigured-source
hermes-agent / high
2026-10-13-hermes-agent-intel-macos-and-termux-stable-artifacts-become-opt-in-and-were-omitted-from-v0-21
hermes-agent / high
2026-10-13-hermes-agent-language-servers-ran-a-cloned-repository-s-own-code-on-file-writes-with-no-approval-until
hermes-agent / high
2026-10-13-hermes-agent-late-october-13-v0-22-0-attempts-leave-main-ahead-of-the-last-in-window-stable
hermes-agent / high
2026-10-13-hermes-agent-network-exposed-a2a-refuses-dispatch-with-an-empty-trusted-peer-list
hermes-agent / high
2026-10-13-hermes-agent-policy-plugin-exceptions-now-block-the-tool-instead-of-failing-open
hermes-agent / high
2026-10-13-hermes-agent-profile-exports-exclude-credential-stores-and-imports-cannot-replace-nested-private-state
hermes-agent / high
2026-10-13-hermes-agent-queried-github-advisory-surfaces-had-no-newer-public-hermes-entry-17-source-cited-ids-were
hermes-agent / high
2026-10-13-hermes-agent-releases-became-receipts-calver-tags-end-at-v2026-9-24-both-new-stables-were-cut-with-the
hermes-agent / high
2026-10-13-hermes-agent-routed-foreign-profile-homes-no-longer-borrow-launch-process-credentials-on-a-secret-miss
hermes-agent / high
2026-10-13-hermes-agent-simplex-sender-allowlists-now-match-numeric-contact-ids-rather-than-mutable-display-names
hermes-agent / high
2026-10-13-hermes-agent-the-default-on-tirith-command-scanner-left-core-in-v0-21-6-two-of-its-catches-moved-into
hermes-agent / high
2026-10-13-hermes-agent-the-git-config-floor-moves-to-v0-21-6-a-repository-s-own-clean-smudge-process-filters-stil
hermes-agent / high
2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached
hermes-agent / high
2026-10-13-hermes-agent-voice-turns-request-no-reasoning-or-the-route-s-lowest-valid-effort
hermes-agent / high
2026-10-13-hermes-agent-webhook-twilio-sms-and-line-reject-blank-signing-secrets
hermes-agent / high
2026-10-13-hermes-agent-with-a-sandboxed-terminal-bot-screen-computer-use-and-the-browser-still-ran-on-the-gateway
heypi / high
2026-10-13-heypi-approval-command-allows-unmatched-commands-after-opt
heypi / high
2026-10-13-heypi-approval-request-records-are-queryable-jsonl-without-tamper-evidence
heypi / high
2026-10-13-heypi-approval-requests-fail-closed-while-approver-lists-remain-optional
heypi / high
2026-10-13-heypi-cloudflare-0-12-10-rejects-credential-proxy-bucket-mutations
heypi / high
2026-10-13-heypi-cloudflare-1-0-removes-the-session-api-used-by-heypi-s-remote-adapter
heypi / high
2026-10-13-heypi-docker-uses-normal-bridge-networking-without-a-heypi-egress-selector
heypi / high
2026-10-13-heypi-experimental-pi-durable-harness-resumes-interrupted-turns-outside-heypi
heypi / high
2026-10-13-heypi-gondolin-0-13-0-closes-hookless-internal-network-egress-outside-heypi-s-range
heypi / high
2026-10-13-heypi-gondolin-0-13-0-overrides-require-explicit-compatibility-checks
heypi / high
2026-10-13-heypi-heypi-0-3-0-beta-2-remains-the-install-channel-without-a-new-release
heypi / high
2026-10-13-heypi-just-bash-3-6-0-bundles-the-smol-toml-parsing-fix
heypi / high
2026-10-13-heypi-just-bash-3-6-0-bypasses-heypi-s-read-only-skills-proxy-with-createexclusive
heypi / high
2026-10-13-heypi-just-bash-3-6-0-carries-the-earlier-hard-link-escape-fix
heypi / high
2026-10-13-heypi-older-admin-applications-already-enabled-authentication-by-default
heypi / high
2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-account
heypi / high
2026-10-13-heypi-pi-1-x-does-not-reach-heypi-s-0-79-x-dependency-range
heypi / high
2026-10-13-heypi-relevant-shared-memory-is-eligible-for-recall-across-conversations-by-default
omnigent / high
2026-10-13-omnigent-a-managed-mcp-registry-and-gateway-prototype-lands-on-main-with-separate-policy-and-creden
omnigent / high
2026-10-13-omnigent-a-separate-shell-policy-advisory-requires-host-upgrades-and-agent-restarts
omnigent / high
2026-10-13-omnigent-brokered-databricks-authentication-adds-a-contained-codex-executor-and-a-migration-contrac
omnigent / high
2026-10-13-omnigent-capability-devin-as-a-native-harness-side-chats-gitlab-and-azure-devops-reviews-copy-on
omnigent / high
2026-10-13-omnigent-ci-usage-telemetry-suppression-is-repaired-after-the-stable-cut
omnigent / high
2026-10-13-omnigent-correction-on-a-policy-server-outage-claude-code-and-codex-tool-calls-get-an-explicit-ask
omnigent / high
2026-10-13-omnigent-correction-tokens-without-total-cost-usd-trigger-an-approval-path-and-repo-cost-docs-contr
omnigent / high
2026-10-13-omnigent-every-minor-in-the-window-broke-an-interface-an-integrator-touches
omnigent / high
2026-10-13-omnigent-five-october-13-advisories-one-critical-and-four-high-move-the-patch-floor-to-v0-18
omnigent / high
2026-10-13-omnigent-linux-bubblewrap-helpers-could-escape-through-host-temporary-files-before-v0-18
omnigent / high
2026-10-13-omnigent-managed-session-ui-removes-unsupported-fork-and-host-switch-controls
omnigent / high
2026-10-13-omnigent-omnigent-pre-approves-previously-undeclined-project-mcp-servers-for-claude-code
omnigent / high
2026-10-13-omnigent-repository-scoped-git-ssh-brokering-is-on-main-only-at-window-close
omnigent / high
2026-10-13-omnigent-root-budgets-now-bind-native-child-sessions-budgets-gain-weekly-to-yearly-periods-and-cach
omnigent / high
2026-10-13-omnigent-shared-session-editors-lost-the-raw-shell-and-agent-reconfiguration-but-still-approve-and
omnigent / high
2026-10-13-omnigent-shell-policies-now-ask-on-or-block-any-command-they-cannot-parse-git-global-options-bypass
omnigent / high
2026-10-13-omnigent-stable-0-18-0-reached-pypi-before-other-channels-the-morning-distribution-lag-was-temporar
omnigent / high
2026-10-13-omnigent-sub-agent-approval-notifications-now-accept-resolutions-only-from-their-originating-conver
omnigent / high
2026-10-13-omnigent-the-hermes-native-policy-wrapper-now-points-to-the-shipped-hook
omnigent / high
2026-10-13-omnigent-the-release-image-build-failure-is-diagnosed-and-repaired-on-main
omnigent / high
2026-10-13-omnigent-v0-18-0-makes-third-party-agents-a-one-line-install-from-github-trusted-on-single-user-ins
omp / high
2026-10-13-omp-18-10-4-lets-extensions-revise-and-execute-the-plan-review-while-tool-approvals-require
omp / high
2026-10-13-omp-18-10-4-removed-omp-codex-code-mode-and-corrected-cross-model-compaction-and-devin-window
omp / high
2026-10-13-omp-additional-task-and-edit-inputs-broke-compatibility-including-complexity-and-sm-headers
omp / high
2026-10-13-omp-after-stable-main-kept-the-composer-open-during-approval-and-denied-waiting-calls-when-ste
omp / high
2026-10-13-omp-binary-distribution-moved-to-stencil-in-18-9-0-while-installer-integrity-improved
omp / high
2026-10-13-omp-broker-clients-stopped-letting-a-delayed-refresh-resurrect-logout-or-replace-a-newer-login
omp / high
2026-10-13-omp-concurrent-sessions-gained-opt-in-worktrees-and-a-limited-git-guard-with-attention-status
omp / high
2026-10-13-omp-credential-fixes-include-a-github-plugin-token-exception-advisory-searches-found-no-matchi
omp / high
2026-10-13-omp-ida-pro-became-agent-operable-owner-only-windows-daemons-require-closing-old-sessions
omp / high
2026-10-13-omp-invalid-approval-flags-and-late-ast-guards-were-fixed-but-eval-still-sits-outside-those
omp / high
2026-10-13-omp-loaded-extensions-can-add-privileged-model-context-and-rewrite-finished-reply-text
omp / high
2026-10-13-omp-mounted-device-docs-moved-out-of-the-system-prompt-by-default
omp / high
2026-10-13-omp-oauth-account-pools-became-workload-controls-then-needed-a-fix-for-spending-excluded-accou
omp / high
2026-10-13-omp-omp-ported-pi-cache-warming-and-filled-three-pi-1-x-compatibility-gaps-without-adopting
omp / high
2026-10-13-omp-per-model-compaction-numbers-became-scaled-bases-instead-of-exact-triggers
omp / high
2026-10-13-omp-process-control-moved-to-urls-and-per-call-subagent-model-overrides-disappeared-in-a-patch
omp / high
2026-10-13-omp-project-inputs-still-load-without-trust-approval-and-18-7-0-documented-that-design
omp / high
2026-10-13-omp-provider-exclusions-and-saved-model-restoration-stopped-silently-crossing-boundaries-with
omp / high
2026-10-13-omp-saved-streaming-tool-output-became-a-16-mib-head-and-tail-sample-by-default
omp / high
2026-10-13-omp-session-handoff-became-explicit-but-credential-export-writes-live-secrets-as-plain-json
omp / high
2026-10-13-omp-task-subagents-switched-to-plain-text-results-by-default-while-eval-spawns-stayed-structur
omp / high
2026-10-13-omp-the-agent-can-change-omp-settings-including-approval-policy-session-grants-span-keys-but
omp / high
2026-10-13-omp-the-close-is-18-10-4-44-releases-two-tag-only-versions-and-one-package-without-a-tag
omp / high
2026-10-13-omp-the-local-scratch-fallback-now-rejects-dot-session-ids-without-proving-a-general-session
omp / high
2026-10-13-omp-web-search-selection-moved-to-the-web-model-role-and-a-narrower-default-fallback-chain
openclaw / high
2026-10-13-openclaw-authority-inspection-and-in-chat-approvals-became-easier-to-use
openclaw / high
2026-10-13-openclaw-autonomous-workshop-maintenance-requires-its-own-approval-setting
openclaw / high
2026-10-13-openclaw-beta-3-prevents-stale-telegram-spool-imports-becoming-fresh-owner-turns
openclaw / high
2026-10-13-openclaw-beta-device-join-commands-offer-a-persistent-session-host
openclaw / high
2026-10-13-openclaw-chat-driven-configuration-follows-the-requesting-run-s-permission-mode
openclaw / high
2026-10-13-openclaw-chatgpt-sign-in-and-new-provider-integrations-reduce-entry-barriers
openclaw / high
2026-10-13-openclaw-desktop-sharing-and-provider-compaction-remove-setup-and-summary-work
openclaw / high
2026-10-13-openclaw-discord-and-slack-accept-bot-authored-messages-by-default-from-2026-9
openclaw / high
2026-10-13-openclaw-extended-stable-carries-the-august-approval-and-sandbox-fixes-with-narrower-defaults
openclaw / high
2026-10-13-openclaw-hooks-can-rewrite-approved-arguments-on-stable-binding-is-fixed-only-in-beta
openclaw / high
2026-10-13-openclaw-incognito-content-is-excluded-from-four-diagnostic-writers-after-9
openclaw / high
2026-10-13-openclaw-memory-saving-turns-retain-their-persistence-only-tool-boundary
openclaw / high
2026-10-13-openclaw-published-beta-3-adds-an-x-channel-and-plugin-browsing-beyond-stable
openclaw / high
2026-10-13-openclaw-quick-start-shortens-consent-while-usable-ai-access-remains-a-prerequisite
openclaw / high
2026-10-13-openclaw-seven-main-line-stables-shipped-with-distinct-release-qualification-omissions
openclaw / high
2026-10-13-openclaw-stable-2026-10-3-repairs-credentials-memory-and-post-compaction-turns
openclaw / high
2026-10-13-openclaw-stable-repaired-sandbox-revocation-and-credential-output-gaps-without-new-advisories
openclaw / high
2026-10-13-openclaw-typesafe-becomes-an-external-plugin-with-a-local-decision-model-route
openclaw / high
2026-10-13-openclaw-wider-advisory-databases-published-older-openclaw-issues-during-the-window
openclaw / high
2026-10-13-openclaw-workspace-file-tools-use-root-handles-while-residual-raw-path-migration-stays-open
openhands / high
2026-10-13-openhands-acp-pi-and-opencode-join-the-built-in-agents-on-local-backends-and-model-lists-come-from
openhands / high
2026-10-13-openhands-agent-profiles-gain-server-catalog-tools-and-a-persona-v1-25-0-global-settings-fallback
openhands / high
2026-10-13-openhands-anyio-tls-certificate-spoofing-remediation-reaches-the-canvas-v1-25-0-backends
openhands / high
2026-10-13-openhands-automation-members-can-create-work-and-cloud-profile-and-cookie-compatibility-improve
openhands / medium
2026-10-13-openhands-automations-the-agent-fills-the-setup-form-v1-27-0-and-enterprise-transcripts-become-org
openhands / high
2026-10-13-openhands-canvas-v1-25-0-refuses-agent-servers-older-than-1-51
openhands / high
2026-10-13-openhands-canvas-v1-26-0-adds-explicit-organization-scope-to-cloud-conversation-requests
openhands / high
2026-10-13-openhands-capacity-enforcement-and-optional-storage-policies-change-unattended-docker-runs
openhands / high
2026-10-13-openhands-credential-telemetry-and-approval-repairs-ship-as-ordinary-pull-requests
openhands / high
2026-10-13-openhands-delegated-agents-inherit-profile-tool-and-mcp-limits-from-sdk-v1-51
openhands / high
2026-10-13-openhands-dependency-repairs-leave-pyjwt-and-fsspec-version-alerts-in-the-newest-sdk-lock
openhands / medium
2026-10-13-openhands-digitalocean-managed-agents-becomes-a-canvas-backend-v1-27
openhands / high
2026-10-13-openhands-digitalocean-web-bridge-defaults-on-only-in-the-closing-main-ancestry
openhands / high
2026-10-13-openhands-docker-image-setting-local-backend-api-key-leaves-the-agent-server-with-no-key-at-all-open
openhands / high
2026-10-13-openhands-dockerworkspace-becomes-loopback-only-and-the-python-slim-image-drops-openvscode
openhands / high
2026-10-13-openhands-enterprise-1-71-0-repairs-llm-key-export-and-adds-an-opt-out-from-the-managed-proxy
openhands / high
2026-10-13-openhands-enterprise-docker-sandbox-ownership-moves-into-the-database-and-new-runtimes-ship
openhands / high
2026-10-13-openhands-git-sync-encryption-re-export-and-configured-webhook-deduplication-reach-stable
openhands / high
2026-10-13-openhands-in-conversation-secret-requests-are-merged-but-absent-from-canvas-v1-27
openhands / high
2026-10-13-openhands-install-snapshot-at-cutoff-is-canvas-v1-27-1-with-separately-pinned-services
openhands / high
2026-10-13-openhands-model-router-lets-a-classifier-pick-the-model-for-each-task-and-first-router-creation-atte
openhands / high
2026-10-13-openhands-openhands-ships-its-own-agent-driven-qa-harness-and-recipes-for-27-feature-families-and
openhands / high
2026-10-13-openhands-per-conversation-docker-containers-ship-through-oh-conversation-runtime-the-execution-only
openhands / high
2026-10-13-openhands-profile-secret-scopes-do-not-bind-the-agent-s-own-terminal-the-stack-s-session-key-is-in
openhands / high
2026-10-13-openhands-sdk-v1-54-0-restores-gemini-requested-model-handling
openhands / high
2026-10-13-openhands-the-v1-27-0-docker-image-crash-loops-v1-27-1-fixes-it-and-adds-a-boot-test-before-tags-mov
openhands / high
2026-10-13-openhands-v1-25-0-stops-serving-the-session-key-to-the-network-npm-desktop-and-docker-installs-befor
paperclip / high
2026-10-13-paperclip-beta-decision-model-setup-defaults-company-sponsorship-on-when-a-shared-connection-is-save
paperclip / high
2026-10-13-paperclip-beta-quota-checks-use-the-selected-account-and-preserve-rotated-credentials-durably
paperclip / high
2026-10-13-paperclip-beta-records-oauth-scope-provenance-instead-of-treating-requests-as-provider-proof
paperclip / high
2026-10-13-paperclip-beta-widens-human-operator-authority-and-tightens-budget-accounting-with-conditional-unpri
paperclip / high
2026-10-13-paperclip-certain-scoped-tools-use-grants-could-authorize-tools-outside-their-restrictions-until-v20
paperclip / high
2026-10-13-paperclip-correction-grok-always-approve-stayed-on-when-paperclip-removed-the-dontask-default
paperclip / high
2026-10-13-paperclip-docs-now-cover-v2026-1012-0-but-the-vps-node-command-violates-the-engine-floor
paperclip / high
2026-10-13-paperclip-github-skill-packages-ship-in-stable-automatic-future-instruction-refresh-reaches-canary
paperclip / high
2026-10-13-paperclip-october-13-canary-can-replace-a-restricted-checkout-conflict-with-an-authorized-remote-clo
paperclip / high
2026-10-13-paperclip-october-13-canary-gives-call-api-rest-permission-parity-and-more-private-saved-receipts
paperclip / high
2026-10-13-paperclip-october-13-canary-hides-agent-created-task-rows-by-default-without-changing-read-acls
paperclip / high
2026-10-13-paperclip-paperclip-cut-default-role-and-planning-instructions-without-a-completed-live-comparison
paperclip / high
2026-10-13-paperclip-stable-soft-budget-warnings-look-like-stopped-work-the-wording-fix-is-canary-only
paperclip / high
2026-10-13-paperclip-three-stable-releases-followed-beta-exposure-their-source-match-is-not-a-release-guarantee
paperclip / high
2026-10-13-paperclip-v2026-1001-0-defaults-native-acpx-native-opencode-and-legacy-coding-paths-to-full-auto
paperclip / high
2026-10-13-paperclip-v2026-1005-0-adds-managed-paid-website-work-through-browser-use-cloud
paperclip / high
2026-10-13-paperclip-v2026-1005-0-defers-optional-personal-app-consent-until-the-tool-is-used
paperclip / high
2026-10-13-paperclip-v2026-1005-0-forced-mcp-aggregators-on-and-enabled-native-api-tools-by-default
paperclip / high
2026-10-13-paperclip-v2026-1005-0-lets-an-agent-record-a-user-chat-reply-as-a-confirmation-decision
paperclip / high
2026-10-13-paperclip-v2026-1005-0-narrows-new-google-oauth-requests-without-narrowing-old-tokens
paperclip / high
2026-10-13-paperclip-v2026-1005-0-persists-agent-files-but-new-writes-omit-prior-content-revisions
paperclip / high
2026-10-13-paperclip-v2026-1012-0-gives-new-standard-agents-14-grants-including-unscoped-tool-use
paperclip / high
2026-10-13-paperclip-v2026-1012-0-lets-low-trust-agents-take-a-human-exact-task-outside-intake-scope
paperclip / high
2026-10-13-paperclip-v2026-1012-0-requires-a-writer-drain-earlier-integration-migrations-are-conditional
paperclip / high
2026-10-13-paperclip-v2026-1012-0-ships-flag-off-assistant-mcp-connections-acting-as-a-real-signed-in-user
pi-coding-agent / high
2026-10-13-pi-coding-agent-a-starting-session-is-busy-during-before-agent-start-in-1-2
pi-coding-agent / high
2026-10-13-pi-coding-agent-anthropic-inline-tool-definitions-preserve-cache-prefixes-from-1-0
pi-coding-agent / high
2026-10-13-pi-coding-agent-bun-codemode-cancellation-and-a-two-worker-limit-are-repaired-only-on-main
pi-coding-agent / high
2026-10-13-pi-coding-agent-canceled-requests-no-longer-discard-rotated-oauth-tokens-in-1-0
pi-coding-agent / high
2026-10-13-pi-coding-agent-codemode-lets-the-model-script-tool-calls-the-tool-calls-stay-gated-its-model-calls-do-not
pi-coding-agent / high
2026-10-13-pi-coding-agent-codemode-output-gets-host-memory-limits-and-linear-joining
pi-coding-agent / high
2026-10-13-pi-coding-agent-compaction-and-branch-summaries-omit-thinking-blocks-in-1-2
pi-coding-agent / high
2026-10-13-pi-coding-agent-custom-stream-functions-must-return-assistantmessageeventstream-from-1-1
pi-coding-agent / high
2026-10-13-pi-coding-agent-extensions-gained-more-reach-in-the-1-0-line-and-before-agent-start-now-also-gates-extensi
pi-coding-agent / high
2026-10-13-pi-coding-agent-headless-runs-fail-loudly-where-they-used-to-pass-and-the-tui-went-fullscreen-by-default
pi-coding-agent / high
2026-10-13-pi-coding-agent-hidden-custom-messages-can-be-revealed-in-html-exports-from-0-99
pi-coding-agent / high
2026-10-13-pi-coding-agent-hygiene-fixes-shipped-as-release-notes-again-with-no-advisory
pi-coding-agent / high
2026-10-13-pi-coding-agent-image-and-classifier-models-share-the-models-surface-from-0-99
pi-coding-agent / high
2026-10-13-pi-coding-agent-internal-pi-dependency-versions-are-pinned-on-main-not-in-1-2
pi-coding-agent / high
2026-10-13-pi-coding-agent-kimi-k3-and-nemotron-3-ultra-replace-retired-provider-defaults
pi-coding-agent / high
2026-10-13-pi-coding-agent-mcp-1-2-0-stops-dispatching-calls-abandoned-during-oauth-refresh
pi-coding-agent / high
2026-10-13-pi-coding-agent-mcp-is-built-into-the-cli-from-0-99-0-project-servers-wait-for-trust-stdio-servers-inherit
pi-coding-agent / high
2026-10-13-pi-coding-agent-mcp-json-lists-resource-capability-instead-of-enumerating-counts-in-1-2
pi-coding-agent / high
2026-10-13-pi-coding-agent-npm-installs-stopped-pinning-transitive-dependencies-in-1-0-1-the-installer-is-the-pinned
pi-coding-agent / high
2026-10-13-pi-coding-agent-project-trust-re-read-at-1-2-0-headless-runs-already-refuse-protected-resources-and-the
pi-coding-agent / high
2026-10-13-pi-coding-agent-prompt-length-pricing-tiers-stop-disappearing-from-model-cost-estimates
pi-coding-agent / high
2026-10-13-pi-coding-agent-provider-changes-chatgpt-sign-in-on-the-openai-provider-short-lived-anthropic-credentials
pi-coding-agent / high
2026-10-13-pi-coding-agent-radius-and-openrouter-catalogs-honor-account-specific-lists-more-closely
pi-coding-agent / high
2026-10-13-pi-coding-agent-resumed-sessions-recover-active-tools-on-main-with-explicit-cli-selection-taking-precedenc
pi-coding-agent / high
2026-10-13-pi-coding-agent-sampling-overrides-can-vary-by-thinking-level-from-1-0
pi-coding-agent / high
2026-10-13-pi-coding-agent-session-share-destination-becomes-explicit-on-main-not-in-1-2
pi-coding-agent / high
2026-10-13-pi-coding-agent-standalone-binaries-loaded-the-launch-directory-s-env-into-pi-s-own-environment-until-1-1
pi-coding-agent / high
2026-10-13-pi-coding-agent-symlinked-agents-md-files-load-in-nested-worktrees-after-1-2-0-repairs-deduplication
pi-coding-agent / high
2026-10-13-pi-coding-agent-the-experimental-plugin-and-server-stack-left-the-coding-agent-the-durable-harness-now-shi
pi-coding-agent / high
2026-10-13-pi-coding-agent-the-system-theme-became-default-and-custom-themes-now-validate-at-startup
pi-coding-agent / high
2026-10-13-pi-coding-agent-tools-stopped-being-a-strict-allowlist-once-codemode-or-tool-search-is-in-the-list-1-0
pi-coding-agent / high
2026-10-13-pi-coding-agent-unfinished-responses-tool-calls-fail-instead-of-executing-mixed-commands-from-0-99
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-5-0-adds-inspectable-agent-dag-scripts-and-code-mode-preflight-checks
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-5-0-and-0-6-0-publishing-shas-match-their-current-tags-npm-clients-lack-recorded-provena
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-5-0-guards-console-state-patches-against-prototype-chain-paths
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-5-0-replaces-runner-state-and-authored-run-methods-with-declared-state-and-lifecycle-hoo
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-5-0-ships-wildcard-cors-on-the-unauthenticated-all-interface-server
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-6-0-adds-workflow-held-gemini-conversations-and-stops-retrying-nontransient-gemini-4xx
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-0-6-0-moves-code-mode-into-the-workflow-old-code-mode-histories-need-a-tested-cutover
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-auto-mode-can-approve-or-deny-without-a-person-but-a-remembered-tool-name-bypasses-the-eva
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-first-class-messages-shipped-in-0-5-0-the-packaged-skip-all-route-is-gone-and-the-examples
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-main-after-0-6-0-8-commits-unreleased-code-mode-gets-a-virtual-filesystem-and-agent-memory
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-release-locks-match-19-dependency-advisories-the-root-lock-update-is-main-only
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-the-nexus-mcp-extra-cannot-resolve-from-public-pypi-alone-as-observed
temporal-agent-harness / high
2026-10-13-temporal-agent-harness-the-repository-chat-server-sends-approvals-to-slack-and-discord-without-its-own-approver
unreal-agent / high
2026-10-13-unreal-agent-a-failed-model-response-can-still-schedule-valid-tool-calls-in-v0-3-1-including-during-rec
unreal-agent / high
2026-10-13-unreal-agent-the-async-tool-loop-holds-at-v0-3-1-now-batching-fast-tool-results-with-one-second-grace
unreal-agent / high
2026-10-13-unreal-agent-the-launch-post-published-benchmark-tables-on-22-september-run-on-builds-absent-from-the
unreal-agent / high
2026-10-13-unreal-agent-the-runner-trusts-its-workspace-a-repository-s-env-can-choose-the-endpoint-that-receives
unreal-agent / high
2026-10-13-unreal-agent-v0-2-0-moves-sessions-out-of-the-workspace-after-a-61-8-gb-runaway-an-old-session-id-resum
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-accepts-a-per-request-output-token-cap-but-openai-codex-rejects
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-adds-an-anthropic-provider-that-requests-server-side-model-fallback-unless-anthropi
unreal-agent / medium
2026-10-13-unreal-agent-v0-3-1-attempts-automatic-compaction-at-catalog-thresholds-uncataloged-models-get-a-zero
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-changes-the-public-go-api-even-though-the-session-file-format-remains
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-deduplicates-every-input-kind-across-restarts-and-lets-settings-change-the-existing
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-delivers-operation-failures-through-updates-after-add-or-cancel-accepts-the-request
unreal-agent / medium
2026-10-13-unreal-agent-v0-3-1-fixes-sigterm-handling-but-retains-false-success-responses-provider-dependent-dupli
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-moves-installs-to-an-unsigned-homebrew-cask-that-strips-macos-quarantine-v0-3-0-is
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-refreshes-harbor-s-multidict-lock-to-fix-an-items-view-reference-leak
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-refreshes-harbor-s-pyjwt-lock-to-include-parser-key-validation-and-jwks-redirect
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-refreshes-harbor-s-urllib3-lock-to-fix-proxy-tls-confusion-and-streaming-resource
unreal-agent / high
2026-10-13-unreal-agent-v0-3-1-ships-an-interactive-tui-that-runs-bash-as-you-in-the-current-directory-with-no-app
agent-flywheel / high
2026-09-21-agent-flywheel-bundled-agents-still-float-codex-installs-latest-claude-from-the-upstream-installer
agent-flywheel / high
2026-09-21-agent-flywheel-carry-forward-safe-mode-is-still-not-a-boundary-at-v0-9-0-dangerous-aliases-unchanged
agent-flywheel / high
2026-09-21-agent-flywheel-contract-watch-items-changelog-records-versions-again-published-cost-figures-unchanged
agent-flywheel / high
2026-09-21-agent-flywheel-main-after-v0-9-0-codex-alias-re-pinned-to-gpt-6-astra-ubuntu-26-04-lts-paths-reviewed-plu
agent-flywheel / high
2026-09-21-agent-flywheel-v0-8-0-the-maintainer-states-v0-7-0-never-installed-v0-8-0-is-the-first-working-pinned-cut
agent-flywheel / high
2026-09-21-agent-flywheel-v0-9-0-per-tool-holds-smoke-checked-rollback-partial-failure-exit-codes-service-repair
agent-zero / high
2026-09-21-agent-zero-carry-forward-acp-defaults-unchanged-at-v2-11-and-v2-12-ssrf-tests-intact-blob-changed-for
agent-zero / high
2026-09-21-agent-zero-the-ready-branch-carries-secret-substitution-and-browser-cross-chat-fixes-that-are-in-no
agent-zero / high
2026-09-21-agent-zero-v2-11-makes-chat-completions-the-default-model-transport-breaking-and-adds-context-doctor
agent-zero / high
2026-09-21-agent-zero-v2-12-also-fixes-whatsapp-media-path-traversal-file-overwrite-in-the-container-and-an-imap
agent-zero / high
2026-09-21-agent-zero-v2-12-exposes-connected-cli-and-launcher-host-folders-in-the-webui-files-panel
agent-zero / high
2026-09-21-agent-zero-v2-12-fixes-an-unauthenticated-telegram-webhook-that-let-anyone-forge-allowed-user-prompts
agent-zero / high
2026-09-21-agent-zero-v2-12-makes-plugin-lifecycle-go-through-hooks-py-and-removes-disabled-capabilities-from
antigravity / high
2026-09-21-antigravity-1-1-18-a-valueless-prompt-flag-could-silently-turn-the-sandbox-off
antigravity / high
2026-09-21-antigravity-customization-inheritance-flipped-to-on-for-markdown-agents-plugin-mcp-servers-namespaced
antigravity / high
2026-09-21-antigravity-default-gates-loosened-workspace-reads-auto-granted-1-1-20-always-proceed-now-covers-mcp
antigravity / high
2026-09-21-antigravity-default-gates-tightened-url-fetch-now-asks-1-1-28-allow-always-pins-the-script-1-1-21-head
antigravity / high
2026-09-21-antigravity-headless-became-a-first-class-driver-unlimited-default-timeout-structured-errors-backgroun
antigravity / high
2026-09-21-antigravity-remote-control-grew-into-a-boot-persistent-service-and-remote-triggered-turns-ran-without
antigravity / high
2026-09-21-antigravity-settings-json-the-1-1-16-no-overwrite-fix-was-incomplete-1-1-20-closes-the-startup-path
antigravity / high
2026-09-21-antigravity-the-tag-vs-notes-collision-is-repaired-from-1-1-18-on-every-in-window-tag-now-carries-its
antigravity / high
2026-09-21-antigravity-unsandboxed-permission-rules-are-deprecated-in-favor-of-command-rules
claude-code / high
2026-09-21-claude-code-2-1-251-repository-settings-lose-tracing-env-and-a-symlink-toctou-closes
claude-code / high
2026-09-21-claude-code-2-1-257-authority-batch-project-bypass-ignored-ask-rules-skipped-in-auto
claude-code / high
2026-09-21-claude-code-2-1-271-model-names-its-own-egress-hosts-subagent-output-framed-as-subagent
claude-code / high
2026-09-21-claude-code-2-1-278-auto-mode-classifier-moves-server-side-by-default
claude-code / high
2026-09-21-claude-code-agents-md-support-and-task-scaffolding-removed-for-current-models
claude-code / medium
2026-09-21-claude-code-auto-mode-is-the-starting-mode-and-docs-list-isolation-needed-none
claude-code / high
2026-09-21-claude-code-claude-ai-skills-and-plugins-sync-into-terminal-sessions-by-default
claude-code / high
2026-09-21-claude-code-deny-rules-extended-into-bash-and-reverted-twice
claude-code / high
2026-09-21-claude-code-effort-model-and-cost-governance-and-claude-plugin-eval
claude-code / high
2026-09-21-claude-code-gateway-key-sent-to-telemetry-and-credential-files-uploaded-to-cloud-sessions
claude-code / medium
2026-09-21-claude-code-gitspawn-ultrareview-path-ran-repo-git-config-before-trust-no-fix-named-through-2-1-278
claude-code / high
2026-09-21-claude-code-managed-mcp-and-policy-lists-go-fail-closed-allowedmcpservers-semantics-flip
claude-code / high
2026-09-21-claude-code-plugin4shell-disclosed-in-window-fix-shipped-in-2-1-179-with-a-silent-changelog
claude-code / high
2026-09-21-claude-code-restricted-and-permission-prompts-none-refuse-instead-of-asking
claude-code / high
2026-09-21-claude-code-stable-froze-on-2-1-236-for-eighteen-days-then-jumped-to-2-1-267
codex / high
2026-09-21-codex-channel-fourteen-stables-in-32-days-three-hotfix-trains
codex / high
2026-09-21-codex-codex-mcp-server-removed-app-server-is-the-only-integration-path-and-it-is-officially-expe
codex / high
2026-09-21-codex-default-model-moved-to-gpt-6-astra-in-the-0-153-x-hotfix-train-not-in-a-minor
codex / high
2026-09-21-codex-guardian-no-longer-runs-in-full-access-or-user-approval-mode
codex / high
2026-09-21-codex-guardian-v2-stayed-off-by-default-in-every-stable-of-the-window-carry-forward
codex / high
2026-09-21-codex-hooks-mcp-and-extensions-new-interception-points
codex / high
2026-09-21-codex-planning-tool-off-by-default-permission-profile-persistence-extended-to-tui-turns-cd-and
codex / high
2026-09-21-codex-python-sdk-0-154-0-external-content-with-tool-level-authority-not-user-authority
codex / high
2026-09-21-codex-sandbox-and-credential-hardening-no-advisories
codex / high
2026-09-21-codex-untrusted-projects-stop-feeding-agents-md-and-startup-stops-running-workspace-helpers-befo
cursor / high
2026-09-21-cursor-cli-install-channel-serves-an-unnoted-build-no-digest-and-the-cli-changelog-stops-at-08
cursor / high
2026-09-21-cursor-cloud-agents-without-an-scm-start-from-scratch-writes-to-origin-by-default
cursor / medium
2026-09-21-cursor-economics-cursor-models-pool-and-bundling-undated-doc-state
cursor / high
2026-09-21-cursor-grok-bot-a-separate-teammate-product-now-documented-inside-cursor-s-docs-and-bundled-in
cursor / high
2026-09-21-cursor-hooks-beforemcpexecution-gains-server-identity-and-the-doc-tells-allowlist-hooks-to-deny
cursor / high
2026-09-21-cursor-no-in-window-security-advisory-despite-a-public-sandbox-escape-claim
cursor / high
2026-09-21-cursor-projects-a-coordinator-that-spawns-agents-on-its-own-beta-cloud-only
cursor / high
2026-09-21-cursor-self-hosted-machines-the-headline-says-execution-stays-in-your-network-the-docs-list-what
deepseek-harness / high
2026-09-21-deepseek-harness-architecture-posture-unchanged-at-both-newest-pins-no-privileged-core-any-row-replaceable
deepseek-harness / high
2026-09-21-deepseek-harness-breaking-changes-an-operator-hits-on-upgrade
deepseek-harness / high
2026-09-21-deepseek-harness-capability-half-what-an-operator-can-do-now-that-they-could-not-on-2026-08
deepseek-harness / high
2026-09-21-deepseek-harness-default-model-moved-to-deepseek-v4-1-flash-default-wire-protocol-moved-to-messages-on-alph
deepseek-harness / high
2026-09-21-deepseek-harness-defaults-that-removed-human-gates-public-webfetch-without-per-request-approval-web-termina
deepseek-harness / high
2026-09-21-deepseek-harness-more-outbound-data-to-deepseek-by-default-the-session-log-upload-flipped-on-in-the-alpha
deepseek-harness / high
2026-09-21-deepseek-harness-security-fixes-a-bubblewrap-escape-via-proc-safety-md-now-says-nothing-is-audited
deepseek-harness / high
2026-09-21-deepseek-harness-still-no-non-prerelease-tag-the-project-split-into-an-rc-line-and-an-alpha-line-and-npm
deepseek-harness / high
2026-09-21-deepseek-harness-the-web-ui-now-requires-authentication-on-every-api-request-the-host-fence-comment-still
eve / high
2026-09-21-eve-approval-integrity-three-ways-an-approval-could-authorize-the-wrong-thing-closed-in-window
eve / high
2026-09-21-eve-auto-a-model-can-now-approve-tool-calls
eve / high
2026-09-21-eve-breaking-capability-moves-persistent-subagents-by-default-one-workflow-sessions-workflow
eve / high
2026-09-21-eve-carry-forward-turnpolicy-queue-binds-on-slack-and-custom-channels-at-0-63-0-default-is-sti
eve / high
2026-09-21-eve-channel-facts-npm-published-three-versions-with-no-git-tag-latest-is-0-64
eve / high
2026-09-21-eve-chat-channel-approvals-private-slack-dm-routing-telegram-and-chat-sdk-hitl-pending-approva
eve / high
2026-09-21-eve-credential-exposure-byok-provider-key-served-from-eve-v1-info-chatgpt-login-stored-in-plai
eve / high
2026-09-21-eve-cross-principal-authority-queued-messages-from-different-users-ran-under-the-last-sender
eve / high
2026-09-21-eve-self-modification-is-no-longer-development-only-a-deployed-mode-edits-a-git-checkout-and
eve / high
2026-09-21-eve-trace-content-defaults-flipped-four-times-0-55-0-recorded-anonymous-content-for-a-day
flue / high
2026-09-21-flue-2-0-4-and-2-0-5-were-broken-publishes-2-0-6-is-the-first-good-cut-after-v2-0
flue / high
2026-09-21-flue-2-0-7-fixes-harness-tool-infinite-recursion-and-lost-tool-results-on-abort
flue / high
2026-09-21-flue-2-1-0-per-tool-timeoutms-mcp-tool-annotations-preserved-configurable-trace-budgets
flue / high
2026-09-21-flue-docs-on-main-skill-allowed-tools-is-guidance-not-a-security-boundary
flue / high
2026-09-21-flue-release-channel-changed-changesets-per-package-github-releases-and-a-next-dist-tag
gemini-cli / high
2026-09-21-gemini-cli-autoedit-path-check-never-loaded-and-seatbelt-reached-docker-socket
gemini-cli / high
2026-09-21-gemini-cli-build-file-edit-gate-is-preview-only-at-close
gemini-cli / high
2026-09-21-gemini-cli-extension-install-still-checks-out-fetch-head-after-plugin4shell-disclosure
gemini-cli / high
2026-09-21-gemini-cli-v0-57-0-promotes-every-preview-only-item-from-the-previous-brief
gemini-cli / high
2026-09-21-gemini-cli-v0-59-0-and-v0-60-0-harden-mcp-oauth-web-fetch-credentials-and-extensions
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-81-fail-closed-managed-settings-acp-allow-all-revoke-fixed-per-entry-managed-plugins
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-83-and-1-0-87-enterprise-login-pinning-mcp-policy-race-closed-marketplace-lockdown
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-83-sandbox-cuts-localhost-and-pins-linux-egress-to-the-proxy-breaking-default
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-83-sandbox-grants-file-tools-read-access-to-token-bearing-dev-config-by-default
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-85-allowmanagedhooksonly-was-bypassable-by-extension-callbacks
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-85-cli-parser-rewrite-and-copilot-plugins-flag-removals-breaking
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-85-copilot-allow-all-falsey-values-used-to-enable-auto-approval
github-copilot-cli / high
2026-09-21-github-copilot-cli-1-0-85-session-scoped-sandbox-bypass-for-users-when-policy-allows
github-copilot-cli / high
2026-09-21-github-copilot-cli-capability-worktrees-out-of-experimental-fleet-custom-agents-read-repo-instructions
github-copilot-cli / medium
2026-09-21-github-copilot-cli-content-exclusion-now-documented-as-applying-to-the-cli-docs-only
github-copilot-cli / medium
2026-09-21-github-copilot-cli-plugin4shell-no-changelog-line-names-a-fix-through-1-0-87
grok-build / high
2026-09-21-grok-build-enterprise-enforcement-signed-requirements-toml-model-restriction-enforced-and-managed-onl
grok-build / high
2026-09-21-grok-build-folder-trust-now-gates-project-permission-rules-instructions-and-skills-previously-applied
grok-build / high
2026-09-21-grok-build-grok-bot-is-not-grok-build
grok-build / high
2026-09-21-grok-build-headless-and-auto-mode-more-that-runs-without-a-person
grok-build / high
2026-09-21-grok-build-hooks-gained-power-and-still-fail-open
grok-build / high
2026-09-21-grok-build-public-changelog-is-a-curated-lagging-subset-the-in-tree-notes-are-the-fuller-record
grok-build / high
2026-09-21-grok-build-sandbox-profiles-now-write-deny-grok-s-own-config-trust-and-policy-files
grok-build / high
2026-09-21-grok-build-the-channel-question-now-has-an-answer-version-string-per-version-binary-digest-and-a-sour
hermes-agent / high
2026-09-21-hermes-agent-agent-max-turns-default-flipped-from-500-to-unlimited-in-v2026-8
hermes-agent / high
2026-09-21-hermes-agent-approval-gate-integrity-cluster-in-v2026-9-21-breaker-attribution-smart-approval-silence
hermes-agent / high
2026-09-21-hermes-agent-approvals-deny-now-applies-inside-isolated-containers-v2026-9
hermes-agent / high
2026-09-21-hermes-agent-capability-and-defaults-in-v2026-9-21-skills-auto-load-stream-json-one-shot-footprint-cura
hermes-agent / high
2026-09-21-hermes-agent-capability-real-profile-browsing-password-blind-vault-sha-pinned-plugin-catalog
hermes-agent / high
2026-09-21-hermes-agent-carry-forward-the-three-approval-fixes-reached-v2026-8-19-on-2026-08-21-confirmed
hermes-agent / high
2026-09-21-hermes-agent-computer-use-ran-destructive-desktop-actions-unapproved-on-every-non-cli-host-until-v2026
hermes-agent / high
2026-09-21-hermes-agent-delegation-docs-now-agree-with-config-250-10-from-v2026-9
hermes-agent / high
2026-09-21-hermes-agent-ghsa-2fmg-cjqm-hhrj-a-weak-webhook-route-could-inherit-a-privileged-sibling-s-toolsets-fix
hermes-agent / high
2026-09-21-hermes-agent-ghsa-7x36-8jrh-v4pw-a-copied-repo-s-git-config-could-run-code-on-the-host-before-any-promp
hermes-agent / high
2026-09-21-hermes-agent-multiplex-profiles-leaked-allow-all-allowlists-vault-secrets-and-files-across-profiles-unt
hermes-agent / high
2026-09-21-hermes-agent-unattended-platforms-webhook-msgraph-webhook-api-server-now-deny-dangerous-commands-by-def
omnigent / high
2026-09-21-omnigent-budgets-did-not-reach-native-descendants-in-any-in-window-tag-scheduled-task-caps-attach
omnigent / high
2026-09-21-omnigent-capability-more-sandboxes-more-harnesses-per-person-git-identity
omnigent / high
2026-09-21-omnigent-carry-forward-acp-result-phase-fail-open-unchanged-usage-page-still-flag-gated
omnigent / high
2026-09-21-omnigent-carry-forward-shared-editor-approval-did-not-narrow-adjacent-editor-powers-did-two-of-them
omnigent / high
2026-09-21-omnigent-carry-forward-spend-caps-are-gated-before-the-next-call-on-already-reconciled-spend-the
omnigent / high
2026-09-21-omnigent-governance-layering-on-policy-server-outage-native-claude-codex-tool-calls-now-defer-to
omnigent / high
2026-09-21-omnigent-omnigent-now-answers-wrapped-harnesses-safety-prompts-and-flips-their-approval-routing
omnigent / high
2026-09-21-omnigent-policy-engine-hardening-spawn-bounds-persist-sub-agents-enforce-their-own-guardrails-verdi
omnigent / high
2026-09-21-omnigent-three-bundle-upload-advisories-published-2026-09-16-all-fixed-in-v0-14-0-by-one
omp / high
2026-09-21-omp-a-repository-under-review-can-write-omp-s-policy-project-local-config-and-extensions-load
omp / high
2026-09-21-omp-channel-tag-ahead-of-release-recurred-three-times-and-one-release-never-reached-npm
omp / high
2026-09-21-omp-collab-relay-sessions-a-view-only-link-could-steer-the-session-after-a-host-reconnect-fixe
omp / high
2026-09-21-omp-eval-became-the-orchestration-surface-bash-patterns-still-does-not-gate
omp / high
2026-09-21-omp-stored-state-fixes-cross-project-hindsight-recall-on-move-config-yml-erasure-dotenv-leakag
omp / high
2026-09-21-omp-the-four-install-paths-agree-on-18-2-8-at-window-close-nix-unpinned-builds-9-commits-past
omp / high
2026-09-21-omp-v18-2-1-closes-a-cluster-of-approval-bypasses-including-one-where-a-missing-context-resolv
openclaw / high
2026-09-21-openclaw-75-advisories-published-in-one-batch-the-exec-approval-family-is-patched-in-2026-8
openclaw / high
2026-09-21-openclaw-approval-ux-grant-once-bind-to-the-operation-revoke-later
openclaw / high
2026-09-21-openclaw-breaking-changes-an-upgrader-will-hit
openclaw / high
2026-09-21-openclaw-defaults-widened-agent-reach-several-times-each-on-a-named-stable
openclaw / high
2026-09-21-openclaw-distribution-one-prompt-install-a-linux-desktop-app-a-linux-update-channel
openclaw / high
2026-09-21-openclaw-extended-stable-moved-to-a-july-line-that-predates-every-fix-above
openclaw / high
2026-09-21-openclaw-grok-xai-small-in-window-moves-the-subscription-login-predates-the-window
openclaw / high
2026-09-21-openclaw-seven-stables-in-20-days-with-release-gates-visibly-waived
openclaw / high
2026-09-21-openclaw-the-approved-exec-fix-is-now-in-stable-but-not-on-extended-stable
openclaw / high
2026-09-21-openclaw-the-codex-sandbox-stop-success-fix-and-the-rest-of-the-parent-s-main-only-pile-reached-the
openclaw / high
2026-09-21-openclaw-the-workspace-symlink-then-boundary-fix-is-in-stable-not-in-extended-stable
openhands / high
2026-09-21-openhands-acp-harness-surfacing-becomes-an-explicit-per-harness-decision-the-acp-registry-pin-now
openhands / high
2026-09-21-openhands-automations-get-view-manage-permissions-creator-only-re-enable-a-visible-run-as-identity
openhands / high
2026-09-21-openhands-carry-forward-v1-15-0-is-the-in-window-tag-with-the-wrong-profile-fix-and-it-ships-the-opp
openhands / high
2026-09-21-openhands-docker-conversation-runtime-settings-reach-the-bundled-agent-server-v1-20-0-docker-executi
openhands / high
2026-09-21-openhands-four-security-fixes-shipped-as-plain-prs-electron-link-origin-bypass-runtime-config-xss
openhands / high
2026-09-21-openhands-profiles-become-enforceable-scopes-mcp-servers-v1-19-0-and-secrets-v1-20-0-with-a-skill
openhands / medium
2026-09-21-openhands-provider-connections-ui-shipped-in-v1-15-0-ahead-of-the-server-api-it-works-from-v1-16-0
openhands / high
2026-09-21-openhands-v1-15-0-removes-the-pdf-preview-sandbox-tagged
paperclip / high
2026-09-21-paperclip-carry-forward-acpx-thought-text-containment-c2cfd55e-11801-first-reached-stable-in-v2026
paperclip / high
2026-09-21-paperclip-carry-forward-the-review-policy-lock-and-cwe-78-cli-guidance-reached-stable-in-v2026-824
paperclip / high
2026-09-21-paperclip-docs-and-site-caught-up-to-v2026-916-1-install-guide-still-does-not-name-the-lanes
paperclip / high
2026-09-21-paperclip-v2026-824-0-new-interactions-default-to-resolver-policy-anyone
paperclip / medium
2026-09-21-paperclip-v2026-824-0-sandbox-capability-contract-resolves-fail-closed-managed-previews-default-to
paperclip / high
2026-09-21-paperclip-v2026-831-0-bad-agent-bearer-tokens-401-instead-of-silently-becoming-the-local-user
paperclip / high
2026-09-21-paperclip-v2026-831-0-paperclip-stopped-setting-the-wrapped-grok-cli-s-permission-mode-to-dontask
paperclip / high
2026-09-21-paperclip-v2026-916-0-agent-apis-stopped-returning-plaintext-credentials-including-to-the-agent-itse
paperclip / high
2026-09-21-paperclip-v2026-916-0-authority-moved-to-people-and-connections-some-defaults-widened
paperclip / high
2026-09-21-paperclip-v2026-916-0-x-forwarded-host-is-honored-only-from-a-trusted-proxy
pi-coding-agent / high
2026-09-21-pi-coding-agent-bug-uploads-diagnostics-and-optionally-the-transcript-to-radius-without-login
pi-coding-agent / high
2026-09-21-pi-coding-agent-compaction-docs-now-match-the-package-session-compact-failed-shipped-in-0-84
pi-coding-agent / high
2026-09-21-pi-coding-agent-extensions-gained-authenticated-model-calls-and-full-transcript-control-context-handlers
pi-coding-agent / medium
2026-09-21-pi-coding-agent-harnesstax-study-same-model-same-success-up-to-five-times-the-cost
pi-coding-agent / high
2026-09-21-pi-coding-agent-rpc-steer-and-follow-up-no-longer-bypass-extension-input-handlers
pi-coding-agent / high
2026-09-21-pi-coding-agent-the-dev-harness-reached-main-and-a-tag-in-v0-85-0-its-plugin-surface-was-published-to-npm
pi-coding-agent / high
2026-09-21-pi-coding-agent-user-bash-fails-closed-an-extension-that-routes-commands-into-a-vm-no-longer-falls-back
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-0-4-0-closes-an-mcp-approval-bypass-in-the-openai-agents-integration-and-fails-closed-on
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-in-the-coding-example-opencode-always-maps-to-remember-true-which-allow-lists-the-tool-by
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-main-after-0-4-0-in-window-137-deletes-the-operator-command-channel-and-the-packaged-slash
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-no-double-run-tool-calls-holds-for-completed-activities-on-replay-not-for-a-tool-interrupt
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-readme-drift-the-repo-front-page-at-window-close-documents-a-dispatch-model-the-wheel-does
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-tags-0-3-0-and-0-4-0-were-re-pointed-after-their-release-pages-went-live-the-wheel-came
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-the-caller-s-agentconfig-approval-policy-wins-over-the-agent-s-default-dangerously-skip
temporal-agent-harness / medium
2026-09-21-temporal-agent-harness-the-packaged-server-binds-0-0-0-0-with-no-authentication-main-adds-wildcard-cors
temporal-agent-harness / high
2026-09-21-temporal-agent-harness-what-lands-in-workflow-history-and-where-the-default-payload-offload-goes
agent-flywheel / high
2026-08-20-agent-flywheel-optional-ee-fmd-pi-pfr-stack-on-main-no-new-tag
agent-zero / high
2026-08-20-agent-zero-v2-10-tags-acp-and-interactive-browser-and-adds-ssrf-regression-tests
antigravity / high
2026-08-20-antigravity-1-1-16-no-longer-overwrites-unreadable-settings-json-with-defaults
antigravity / high
2026-08-20-antigravity-1-1-17-github-release-is-the-1-1-16-tree
claude-code / high
2026-08-20-claude-code-2-1-236-macos-read-deny-wildcards-bind-2-1-238-trust-gates-mcp-headershelper
codex / high
2026-08-20-codex-0-148-0-cut-stable-guardian-v2-is-in-the-tag-and-off-by-default
codex / high
2026-08-20-codex-0-149-0-is-npm-latest-and-restores-permission-profile-on-resume
deepseek-harness / high
2026-08-20-deepseek-harness-library-latest-still-frozen-sqlite-schema-17-has-no-migration
deepseek-harness / high
2026-08-20-deepseek-harness-still-prerelease-gate-still-a-plugin-ui-still-unauthenticated
eve / high
2026-08-20-eve-0-39-1-stops-duplicate-tool-calls-while-approval-pending
eve / high
2026-08-20-eve-0-39-3-restores-turnpolicy-queue-after-silent-steer-fallback
eve / high
2026-08-20-eve-0-40-through-0-42-redact-credentials-and-stop-channel-metadata-leaking-into-approvals
gemini-cli / high
2026-08-20-gemini-cli-enableagents-false-still-loads-builtins-on-0-56-0
gemini-cli / high
2026-08-20-gemini-cli-git-env-hardening-is-preview-not-0-56-0
gemini-cli / high
2026-08-20-gemini-cli-v0-56-0-is-stable-and-two-chore-commits-past-v0-55-1
hermes-agent / high
2026-08-20-hermes-cli-execute-code-approval-and-yolo-toggle-still-unreleased
hermes-agent / high
2026-08-20-hermes-delegation-docs-still-say-50-and-3-at-v2026-8-18
hermes-agent / high
2026-08-20-hermes-git-pull-skill-scan-reached-v2026-8-18
hermes-agent / high
2026-08-20-hermes-steer-stop-and-update-honesty-reached-v2026-8-18
omnigent / high
2026-08-20-omnigent-deny-tag-push-reaches-v0-10-0
omnigent / high
2026-08-20-omnigent-v0-10-0-adds-multi-sandbox-and-keeps-shared-editor-approval
omnigent / high
2026-08-20-omnigent-v0-10-0-usage-page-off-parent-gates-unchanged
omp / high
2026-08-20-omp-bash-patterns-do-not-gate-eval
omp / high
2026-08-20-omp-v17-3-7-released-the-write-fallback-hook-v17-3-6-still-has-no-release
openclaw / high
2026-08-20-openclaw-approved-exec-fix-still-in-no-release
openclaw / high
2026-08-20-openclaw-codex-sandbox-stop-can-return-success-while-children-run
openhands / high
2026-08-20-openhands-v1-14-0-git-sync-page-404s-against-bundled-automation
openhands / high
2026-08-20-openhands-wrong-profile-fix-still-unreleased-at-window-close
paperclip / high
2026-08-20-paperclip-acpx-thought-text-can-land-in-issue-comments
paperclip / high
2026-08-20-paperclip-namespaced-canary-train-still-running-stable-unmoved
pi-coding-agent / high
2026-08-20-pi-live-docs-describe-compaction-event-not-in-0-84-2
pi-coding-agent / high
2026-08-20-pi-new-harness-lives-on-dev-not-on-a-tag
agent-zero / high
2026-08-17-agent-zero-acp-bridge-and-an-interactive-internal-browser-viewport-are-staged-on
agent-zero / high
2026-08-17-agent-zero-agent-zero-v2-9-makes-tool-mcp-and-skill-access-a-scoped-policy
agent-zero / high
2026-08-17-agent-zero-ssrf-fix-for-cve-2026-4308-was-silently-lost-in-a-plugin-refactor-and
agent-zero / high
2026-08-17-agent-zero-time-travel-snapshotting-shipped-with-no-retention-at-all-v2-9-adds
agent-zero / high
2026-08-17-agent-zero-v2-9-bundles-a-migrate-agents-plugin-that-imports-agent-definitions
antigravity / high
2026-08-17-antigravity-1-1-12-discloses-that-mode-was-ignored-entirely-in-headless-runs-plan
antigravity / high
2026-08-17-antigravity-1-1-12-fixes-silent-loss-of-settings-persistence-and-a-forced-re-login
antigravity / medium
2026-08-17-antigravity-1-1-12-lets-the-headless-agent-settle-its-own-questions-instead-of
antigravity / high
2026-08-17-antigravity-1-1-13-adds-gemini-api-key-auth-and-a-custom-base-url-routing-around
antigravity / high
2026-08-17-antigravity-1-1-13-fixes-a-model-driven-path-traversal-in-define-subagent-no
antigravity / high
2026-08-17-antigravity-1-1-13-stops-extracting-an-executable-ripgrep-into-tmp-without
antigravity / high
2026-08-17-antigravity-the-tag-named-1-1-13-does-not-contain-the-1-1-13-changelog-three-tag
claude-code / high
2026-08-17-claude-code-a-seven-item-permission-bypass-cluster-in-v2-1-232-powershell-parameter
claude-code / high
2026-08-17-claude-code-auto-mode-becomes-the-built-in-starting-permission-mode-on-pro-max-and
claude-code / high
2026-08-17-claude-code-claude-code-s-stable-channel-sits-seven-releases-behind-latest-2-1-226
claude-code / medium
2026-08-17-claude-code-managed-settings-gateway-now-fails-boot-on-malformed-policy-instead-of
claude-code / high
2026-08-17-claude-code-remote-control-hardens-into-an-operable-surface-account-switch-kill
claude-code / high
2026-08-17-claude-code-subagent-forking-is-on-by-default-a-forked-subagent-inherits-the-full
claude-code / high
2026-08-17-claude-code-todo-and-task-tracking-tools-removed-on-opus-4-8-sonnet-5-fable-5
claude-code / high
2026-08-17-claude-code-windows-nt-namespace-paths-bypassed-path-validation-opening-an-ntlm
codex / high
2026-08-17-codex-codex-shipped-no-stable-release-for-ten-days-0-148-0-is-422-commits
codex / medium
2026-08-17-codex-config-lockfile-support-removed-on-the-unreleased
codex / high
2026-08-17-codex-guardian-v2-a-model-driven-risk-classifier-gating-tool-calls-was-built
codex / high
2026-08-17-codex-import-from-claude-code-and-cursor-announced-on-the-changelog-but-the
codex / low
2026-08-17-codex-the-entire-codex-documentation-and-changelog-moved-off-developers
deepseek-harness / high
2026-08-17-deepseek-harness-a-dsh-plugin-is-an-unsandboxed-in-process-module-with-no-permission
deepseek-harness / high
2026-08-17-deepseek-harness-cordis-is-vendored-and-republished-under-deepseek-s-scope-at-a-version
deepseek-harness / high
2026-08-17-deepseek-harness-deepseek-s-own-harness-ships-a-supported-path-to-run-openai-and
deepseek-harness / high
2026-08-17-deepseek-harness-everything-is-a-plugin-including-the-components-that-enforce-the-limits
deepseek-harness / high
2026-08-17-deepseek-harness-nothing-authenticates-the-web-ui-on-127-0-0-1-3080-and-the-api-fence
deepseek-harness / high
2026-08-17-deepseek-harness-npm-latest-is-current-on-the-cli-and-stale-on-almost-every-library
deepseek-harness / high
2026-08-17-deepseek-harness-rc-7-s-actual-contents-plugin-owned-settings-cards-low-reasoning-effort
deepseek-harness / high
2026-08-17-deepseek-harness-sandbox-escalation-dead-loops-any-danger-full-access-session-and-rc-7
deepseek-harness / high
2026-08-17-deepseek-harness-the-cli-withdrew-host-0-0-0-0-on-launch-day-and-renamed-it-a-remote
deepseek-harness / high
2026-08-17-deepseek-harness-the-default-posture-confines-file-writes-only-reads-network-and-process
deepseek-harness / high
2026-08-17-deepseek-harness-the-public-repo-is-a-mirror-the-release-identity-is-a-private
deepseek-harness / high
2026-08-17-deepseek-harness-the-whole-project-ships-to-exactly-one-channel-and-it-is-a
eve / high
2026-08-17-eve-eve-0-32-0-renames-the-approval-gate-denial-from-deny-to-cancel-and
eve / high
2026-08-17-eve-eve-0-33-0-makes-channel-messages-interrupt-the-running-turn-by
eve / high
2026-08-17-eve-eve-0-34-0-adds-request-and-response-approval-policies-that-can
eve / high
2026-08-17-eve-eve-0-35-0-stops-recording-model-and-tool-inputs-and-outputs-in-traces
eve / high
2026-08-17-eve-eve-0-36-0-changes-the-default-agent-model-from-claude-sonnet-5-to-zai
eve / high
2026-08-17-eve-eve-0-36-0-moves-sveltekit-deployment-onto-vercel-s-stable-services
eve / high
2026-08-17-eve-eve-0-37-0-exposes-vercel-sandbox-drives-as-mountable-storage-for-live
eve / high
2026-08-17-eve-eve-0-38-0-replaces-frontend-stop-with-turn-targeted-cancel-and-lets
eve / high
2026-08-17-eve-eve-0-39-0-promotes-chatgpt-subscription-models-to-a-stable-chatgpt-api
eve / high
2026-08-17-eve-eve-0-39-0-removes-glob-and-grep-from-the-default-agent-tool-set-and
gemini-cli / high
2026-08-17-gemini-cli-capacity-exhaustion-errors-became-terminal-in-stable-v0-55-1-retries
gemini-cli / high
2026-08-17-gemini-cli-gemini-cli-v0-55-1-the-0-55-line-s-only-stable-with-release-notes-that
gemini-cli / high
2026-08-17-gemini-cli-git-subprocesses-stop-inheriting-the-workspace-s-own-git-config-git
gemini-cli / high
2026-08-17-gemini-cli-google-starts-merging-agent-authored-prs-into-the-gemini-cli-default
gemini-cli / high
2026-08-17-gemini-cli-mcp-oauth-token-refresh-repaired-for-discovery-configured
gemini-cli / high
2026-08-17-gemini-cli-the-preview-channel-is-not-ahead-of-stable-v0-56-0-preview-1-is-v0-55-1
hermes-agent / high
2026-08-17-hermes-agent-a-failed-git-probe-was-deleting-delegated-subagents-uncommitted-work
hermes-agent / high
2026-08-17-hermes-agent-a-hijacked-upstream-repo-pulled-the-blender-mcp-entry-out-of-the
hermes-agent / high
2026-08-17-hermes-agent-bot-mode-ships-bundled-and-on-by-default-and-the-bot-to-bot-protocol
hermes-agent / high
2026-08-17-hermes-agent-computer-use-gets-a-non-yolo-path-to-attach-to-your-signed-in
hermes-agent / high
2026-08-17-hermes-agent-concurrent-delegated-children-default-3-to-10-by-the-same-migration
hermes-agent / high
2026-08-17-hermes-agent-delegate-task-learns-to-list-steer-and-stop-its-own-running
hermes-agent / high
2026-08-17-hermes-agent-delegated-subagents-can-each-get-their-own-git
hermes-agent / high
2026-08-17-hermes-agent-fifteen-out-of-fifteen-destructive-windows-commands-passed-approval
hermes-agent / high
2026-08-17-hermes-agent-hermes-moves-to-the-mcp-2-x
hermes-agent / high
2026-08-17-hermes-agent-mcp-servers-with-no-handshake-now-connect-the-2026-07-28-stateless
hermes-agent / high
2026-08-17-hermes-agent-plugin-install-and-update-now-security-scan-the-tree-before-it-can
hermes-agent / high
2026-08-17-hermes-agent-repos-can-vendor-their-own-skills-behind-a-per-repo-trust
hermes-agent / high
2026-08-17-hermes-agent-shareable-profile-archives-finally-get-a-secret
hermes-agent / high
2026-08-17-hermes-agent-the-delegation-docs-still-document-the-defaults-that-were-replaced
hermes-agent / high
2026-08-17-hermes-agent-the-gap-in-that-trust-gate-a-git-pull-could-inject-a-skill-into-an
hermes-agent / high
2026-08-17-hermes-agent-the-per-subagent-tool-call-budget-jumps-50-to-250-and-a-migration
hermes-agent / high
2026-08-17-hermes-agent-three-stable-tags-in-fourteen-days-with-release-notes-that-describe
omnigent / medium
2026-08-17-omnigent-both-of-omp-s-stored-state-behaviour-systems-had-scoping-and-delivery
omnigent / high
2026-08-17-omnigent-github-policy-denies-force-push-by-default-in-v0-9
omnigent / high
2026-08-17-omnigent-omnigent-now-gates-acp-harnesses-delegated-file-i-o-with-its-own-result
omnigent / high
2026-08-17-omnigent-omnigent-s-max-cost-usd-is-still-a-downgrade-gate-not-a-hard-stop
omnigent / high
2026-08-17-omnigent-shell-gate-parser-failed-open-on-option-taking-command-wrappers-fixed
omnigent / high
2026-08-17-omnigent-smart-routing-picks-the-harness-and-the-model-and-a-routed-switch
omnigent / high
2026-08-17-omnigent-the-same-blind-approval-hole-reappeared-through-a-tool-s-wire-level
omnigent / high
2026-08-17-omnigent-v0-9-0-reverted-owner-only-approval-a-shared-editor-can-again-authorize
omp / medium
2026-08-17-omp-omp-replaced-libarchive-tar-parsing-with-a-hardened-in-process
omp / high
2026-08-17-omp-omp-s-always-ask-approval-prompt-opened-before-the-diff-rendered-fixed
omp / high
2026-08-17-omp-omp-s-updater-can-now-migrate-your-install-from-npm-bun-to-a-standalone
omp / high
2026-08-17-omp-omp-tags-v17-3-6-and-v17-3-7-carry-an-extension-hook-that-brokers
omp / high
2026-08-17-omp-omp-v17-3-0-fixed-the-lsp-concurrency-defects-created-by-the-shared
openclaw / high
2026-08-17-openclaw-an-exec-approval-prompt-could-surface-in-a-channel-it-did-not-come
openclaw / high
2026-08-17-openclaw-approved-exec-could-run-different-bytes-than-the-ones-you
openclaw / medium
2026-08-17-openclaw-macos-app-fulfils-computer-use-natively-under-the-signed-app-s-own-tcc
openclaw / high
2026-08-17-openclaw-onboarding-printed-a-reusable-gateway-token-inside-a-dashboard
openclaw / high
2026-08-17-openclaw-one-paste-node-onboarding-openclaw-devices-join-code-to-npx-openclaw
openclaw / high
2026-08-17-openclaw-plugin-and-skill-installs-gain-a-reviewable-warn-verdict-and-an
openclaw / high
2026-08-17-openclaw-the-agent-s-screen-becomes-a-first-class-surface-click-to-control-in
openclaw / high
2026-08-17-openclaw-the-boundary-fix-jumped-beta-lines-2026-7-2-was-abandoned-2026-8-1-beta
openhands / high
2026-08-17-openhands-a-fix-that-stops-the-agent-silently-starting-under-the-wrong-profile
openhands / high
2026-08-17-openhands-context-window-meter-usage-drawer-and-manual-compaction-shipped-in-v1
openhands / medium
2026-08-17-openhands-enterprise-can-now-chain-its-built-in-litellm-to-a-customer-s-own-llm
openhands / high
2026-08-17-openhands-enterprise-conversations-are-force-paused-at-12-hours-and-the-cap-is
openhands / high
2026-08-17-openhands-github-said-v1-13-0-was-latest-for-four-days-while-npm-still-served-1
openhands / high
2026-08-17-openhands-launcher-services-no-longer-spawn-through-an-implicit
openhands / high
2026-08-17-openhands-the-bot-driven-docs-train-ran-out-of-order-and-lost-a
openhands / high
2026-08-17-openhands-the-default-model-changed-twice-in-fourteen-days-both-times-to-a-free
openhands / high
2026-08-17-openhands-the-docs-finally-state-where-openhands-lives-now-and-that-host-process
openhands / high
2026-08-17-openhands-the-openhands-release-line-passed-1-11-0-a-second-time-and-nothing
paperclip / high
2026-08-17-paperclip-agents-got-a-read-only-secrets-catalog-endpoint-that-returns-names-and
paperclip / high
2026-08-17-paperclip-breaking-docker-latest-changed-meaning-from-every-master-merge-to
paperclip / medium
2026-08-17-paperclip-command-injection-class-fix-cwe-78-in-paperclip-s-own-cli-guidance-on
paperclip / high
2026-08-17-paperclip-correction-to-this-publication-s-own-record-the-canary-lane-was-never
paperclip / high
2026-08-17-paperclip-experimental-cloud-sync-removed-company-import-export-is-the-only
paperclip / high
2026-08-17-paperclip-no-new-security-advisory-published-in-the
paperclip / high
2026-08-17-paperclip-paperclip-built-a-four-channel-release-train-canary-to-nightly-to-beta
paperclip / high
2026-08-17-paperclip-paperclip-tagged-again-v2026-817-0-the-first-stable-in-26-days-carrying
paperclip / high
2026-08-17-paperclip-review-policy-bypass-on-interaction-verdict-routes-fixed-on-master-in
paperclip / high
2026-08-17-paperclip-the-gap-reopened-the-day-the-release-shipped-master-is-176-commits-past
paperclip / high
2026-08-17-paperclip-the-official-site-and-docs-still-say-v2026-722-0-and-do-not-mention-the
paperclip / high
2026-08-17-paperclip-the-stable-that-shipped-on-2026-08-17-contains-no-code-merged-after
pi-coding-agent / high
2026-08-17-pi-coding-agent-ai-agent-pi-documented-as-a-process-marker-distinct-from-pi-coding
pi-coding-agent / high
2026-08-17-pi-coding-agent-compaction-failures-now-raise-an-extension-event-on-main-in-no
pi-coding-agent / high
2026-08-17-pi-coding-agent-defaulttools-makes-the-built-in-tool-set-configurable-per-project-the
pi-coding-agent / high
2026-08-17-pi-coding-agent-experimental-strict-json-schema-constrained-sampling-for-the-default
pi-coding-agent / high
2026-08-17-pi-coding-agent-the-v0-84-0-streaming-rewrite-dropped-cumulative-usage-from-json-and
pi-coding-agent / high
2026-08-17-pi-coding-agent-transitive-nanoid-dev-dependency-bumped-for-a-high-severity-dos-build
agent-zero / high
2026-08-10-agent-zero-spynel-announced-as-a-preview-an-orchestration-layer-over-codex-claude
antigravity / high
2026-08-10-antigravity-1-1-11-discloses-that-a-malformed-allowlist-entry-auto-approved-every
antigravity / high
2026-08-10-antigravity-1-1-11-makes-config-json-the-sole-owner-of-plugin-enablement-so-a
antigravity / high
2026-08-10-antigravity-1-1-11-mcp-admin-controls-were-skipped-for-the-first-five-minutes-of
antigravity / high
2026-08-10-antigravity-1-1-11-print-mode-answered-interactive-slash-commands-as-prose
claude-code / high
2026-08-10-claude-code-claude-code-sessions-can-now-message-each-other-and-mentions-another
claude-code / high
2026-08-10-claude-code-claude-code-shell-commands-could-hide-part-of-themselves-from-the
claude-code / high
2026-08-10-claude-code-plugin-marketplace-supply-chain-sha-256-pinned-zip-archives-gitlab
claude-code / high
2026-08-10-claude-code-sandbox-credential-masking-gains-extraction-jwt-aware-decoding-and-aws
claude-code / high
2026-08-10-claude-code-self-hosted-environments-run-claude-code-cloud-sessions-on
claude-code / high
2026-08-10-claude-code-ultraplan-research-preview-removed-review-folded-into-code-review-and
codex / high
2026-08-10-codex-0-146-1-hotfix-backports-safer-permission-defaults-for-cyber-specialty
codex / high
2026-08-10-codex-0-147-0-ships-portable-agent-plugins-and-simultaneously-fences-their
codex / high
2026-08-10-codex-approve-for-me-puts-a-model-not-a-human-in-the-approval
codex / high
2026-08-10-codex-bearer-tokens-and-secrets-redacted-from-displayed-commands-and-replayed
codex / high
2026-08-10-codex-codex-exec-full-auto-removed-outright-in-0-147
codex / high
2026-08-10-codex-codex-now-demands-an-explicit-trust-decision-for-unfamiliar-project
codex / high
2026-08-10-codex-network-authority-hardening-continued-after-0-146-0-but-stayed-alpha
codex / high
2026-08-10-codex-opt-in-mcp-2026-07-28-protocol-support-lands-in
eve / high
2026-08-10-eve-eve-0-30-0-closes-a-host-header-path-to-the-synthetic-local-dev
eve / high
2026-08-10-eve-eve-0-30-7-adds-experimental-persistent-subagent-sessions-so-delegated
eve / high
2026-08-10-eve-eve-0-31-0-replaces-continuation-token-sessions-with-fixed-id-addressed
flue / high
2026-08-10-flue-flue-v2-0-2-makes-conditional-tool-additions-prompt-cache-safe-on
flue / medium
2026-08-10-flue-flue-v2-0-2-publishes-an-agent-behavior-reference-page-stating-the
flue / high
2026-08-10-flue-flue-v2-0-2-renames-the-sandbox-types-to-their-roles-and-replaces-the
flue / high
2026-08-10-flue-flue-v2-0-3-takes-ownership-of-the-cloudflare-agents-sdk-pin-instead-of
gemini-cli / high
2026-08-10-gemini-cli-gemini-cli-v0-54-0-https-enforced-for-google-credential-auth-keychain
gemini-cli / high
2026-08-10-gemini-cli-stable-version-numbers-went-discontinuous-0-54-0-to-0-54-4-in-27-hours
gemini-cli / high
2026-08-10-gemini-cli-the-autonomous-pr-pipeline-that-writes-those-commits-landed-in-repo
hermes-agent / high
2026-08-10-hermes-agent-delegate-task-gains-caller-declared-output
hermes-agent / high
2026-08-10-hermes-agent-docker-sandboxed-sessions-were-sharing-one-container-and-each-other-s
hermes-agent / high
2026-08-10-hermes-agent-mcp-servers-can-be-marked-untrusted-and-every-write-capable-tool-then
hermes-agent / high
2026-08-10-hermes-agent-profile-export-import-ships-a-whole-setup-including-unscrubbed-secrets
hermes-agent / high
2026-08-10-hermes-agent-terminal-exception-results-and-acp-stderr-were-handing-raw-secrets-to
hermes-agent / high
2026-08-10-hermes-agent-writes-to-agents-md-claude-md-and-soul-md-now-always-stop-for-a
omnigent / high
2026-08-10-omnigent-omnigent-added-an-automated-nightly-channel-that-exists-only-as-git
omnigent / high
2026-08-10-omnigent-tag-push-protection-exists-only-on-the-nightly-channel-no-stable-tag
omnigent / high
2026-08-10-omnigent-v0-8-0-narrowed-sandbox-dotfile-masking-to-top-level-only-by-default-on
omnigent / high
2026-08-10-omnigent-worktree-guard-s-absolute-path-arm-shipped-fixed-in-v0-8-0-ten-hours
omp / high
2026-08-10-omp-omp-added-an-exact-path-extension-allowlist-that-bypasses-ambient
omp / high
2026-08-10-omp-omp-shipped-a-desktop-and-browser-relay-surface-driving-the-user-s-real
openclaw / high
2026-08-10-openclaw-auto-updates-stop-being-silent-countdown-hold-1-h-and-an-updates
openclaw / high
2026-08-10-openclaw-cloud-worker-desktops-become-observable-behind-a-labs
openclaw / high
2026-08-10-openclaw-extended-stable-becomes-a-real-populated-channel-and-it-is-numbered
openclaw / high
2026-08-10-openclaw-github-releases-and-npm-disagree-about-when-stable-last
openclaw / high
2026-08-10-openclaw-openclaw-s-extended-stable-moved-to-2026-6-34-in-the-window-and-still
openhands / high
2026-08-10-openhands-openhands-enterprise-shipped-0-36-1-to-0-41-0-with-a-changelog-whose
openhands / high
2026-08-10-openhands-per-run-llm-cost-is-now-visible-in-the-activity-log-and-leaves-the
paperclip / high
2026-08-10-paperclip-agents-can-hand-credentials-to-paperclip-as-inert-proposals-that-only-a
paperclip / high
2026-08-10-paperclip-standard-trust-agents-got-default-open-write-access-to-any-company
paperclip / high
2026-08-10-paperclip-the-audit-page-and-the-activity-list-merged-into-one-attributed
pi-coding-agent / high
2026-08-10-pi-coding-agent-agent-reset-wiped-transcript-and-runtime-state-mid-run-it-now-rejects
pi-coding-agent / high
2026-08-10-pi-coding-agent-agents-override-md-lets-any-directory-replace-the-operator-s-context
pi-coding-agent / high
2026-08-10-pi-coding-agent-bun-standalone-binaries-crashed-at-startup-in-any-directory-containing
pi-coding-agent / high
2026-08-10-pi-coding-agent-cloudflare-ai-gateway-requests-were-silently-escaping-to-api-openai-com
pi-coding-agent / high
2026-08-10-pi-coding-agent-extension-tool-call-handlers-can-terminate-a-blocked-batch-without
pi-coding-agent / high
2026-08-10-pi-coding-agent-fullscreen-tui-mode-mermaid-and-latex-rendering-baseten-and-qwen-token
pi-coding-agent / high
2026-08-10-pi-coding-agent-json-and-rpc-message-update-becomes-delta-only-ending-quadratic-stdout
pi-coding-agent / high
2026-08-10-pi-coding-agent-pi-auth-check-adds-a-third-command-that-prints-a-live-provider
pi-coding-agent / high
2026-08-10-pi-coding-agent-the-session-and-harness-api-is-replaced-wholesale-with-the-v4-lane
agent-zero / high
2026-08-03-agent-zero-ships-a-stop-control
antigravity / high
2026-08-03-antigravity-permission-scope-widens-in-an-unreadable-product
claude-code / high
2026-08-03-claude-code-publishes-nothing-for-ten-days
codex / high
2026-08-03-codex-network-authority-wave-reaches-stable
gemini-cli / high
2026-08-03-gemini-cli-a2a-workspace-self-trust-rce-reaches-stable
hermes-agent / high
2026-08-03-hermes-approval-guardrails-and-runaway-caps-reach-a-tag
omnigent / high
2026-08-03-omnigent-spend-cap-is-a-downgrade-gate-not-a-ceiling
omnigent / high
2026-08-03-omnigent-stateful-policies-claim-checks-out-in-the-tag
omnigent / medium
2026-08-03-omnigent-v070-routing-picks-the-harness
omnigent / high
2026-08-03-omnigent-worktree-guard-inert-on-windows-runners
openclaw / high
2026-08-03-openclaw-sandbox-boundary-fix-stops-at-beta
openhands / high
2026-08-03-openhands-release-line-renumbered-below-its-own-predecessor
pi-coding-agent / medium
2026-08-03-pi-ships-credential-export-commands
agent-flywheel / high
The locked Antigravity launcher restores ACFS policy on every run
agent-flywheel / high
One study counted 110 traced repositories for an individual account and 97 for Microsoft
agent-flywheel / high
Agent Flywheel publishes a reference budget, not an install requirement
agent-flywheel / high
The Antigravity DCG hook fails open when checks are indeterminate
agent-flywheel / high
Vibe mode writes passwordless sudo; safe mode does not revoke it
agent-flywheel / high
Agent Flywheel v0.7.0 was a pre-window update-reliability release
agent-flywheel / high
Agent Flywheel's dangerous shortcuts are installed in both modes
agent-zero / high
Agent Zero v2.2 makes model setup explicit
antigravity / medium
Antigravity lists 1.0.15 and 1.0.16 without public tags
claude-code / high
Claude Code v2.1.198 lets background agents commit, push, and open draft PRs
codex / high
Codex 0.143 remains alpha-only
codex / high
Codex v0.142.5 stops logging full Responses WebSocket payloads
eve / high
Eve 0.17.2 through 0.19.0 add governance and channels
flue / high
Flue rewrites adapter contracts on main without a new tag
gemini-cli / high
Gemini CLI @file hardening is nightly-only
gemini-cli / high
Gemini CLI nightly fixes a memory-import symlink escape
hermes-agent / high
Hermes Agent v2026.7.1 tags the security wave
heypi / high
heypi remains on beta with no material in-window change
openclaw / high
OpenClaw beta adds scoped capability profiles
openhands / high
OpenHands' Authlib CVE fix remains on main
paperclip / high
Paperclip operating-state work remains canary-only
pi-coding-agent / high
Pi Coding Agent v0.80.3 holds with no in-window release
agent-zero / medium
2026-07-01-agent-zero-agent-zero-v2-0-bundles-security-dependency-fixes-litell
agent-zero / high
2026-07-01-agent-zero-agent-zero-v2-0-major-release-ships-responses-api-become
agent-zero / high
2026-07-01-agent-zero-agent-zero-v2-1-hardens-the-new-responses-api-path-fallb
antigravity / high
2026-07-01-antigravity-in-window-release-train
antigravity / medium
2026-07-01-antigravity-sandbox-model
antigravity / high
2026-07-01-antigravity-strict-approve-matching
antigravity / high
2026-07-01-antigravity-subagent-auto-approve
antigravity / high
2026-07-01-antigravity-successor-to-gemini-consumer
claude-code / high
2026-07-01-claude-code-v2-1-191-rewind-now-resumes-a-conversation-from-before-c
claude-code / high
2026-07-01-claude-code-v2-1-193-automode-classifyallshell-setting-routes-all-ba
claude-code / high
2026-07-01-claude-code-v2-1-193-new-opentelemetry-claude-code-assistant-respons
claude-code / high
2026-07-01-claude-code-v2-1-195-hook-matchers-with-hyphenated-identifiers-e-g-c
claude-code / high
2026-07-01-claude-code-v2-1-196-remote-control-disabled-when-anthropic-base-url
claude-code / high
2026-07-01-claude-code-v2-1-196-security-fix-claude-mcp-list-get-no-longer-spaw
claude-code / high
2026-07-01-claude-code-v2-1-197-claude-sonnet-5-becomes-the-default-model-in-cl
codex / high
2026-07-01-codex-0-143-0-remains-alpha-only-through-window-end-alpha-31-d
codex / high
2026-07-01-codex-codex-0-142-1-stable-adds-opt-in-windows-system-proxy-su
codex / high
2026-07-01-codex-codex-0-142-2-stable-remote-plugin-mcp-and-image-input-h
codex / high
2026-07-01-codex-codex-0-142-2-stable-ships-mcp-tools-now-use-tool-search
codex / high
2026-07-01-codex-codex-0-142-2-tightens-powershell-safety-commands-with-a
codex / high
2026-07-01-codex-codex-0-142-3-and-0-142-4-stable-are-maintenance-only-no
codex / medium
2026-07-01-codex-codex-remote-reaches-general-availability-control-a-conn
eve / medium
2026-07-01-eve-eve-dev-gains-http-basic-userinfo-and-repeatable-h-heade
eve / high
2026-07-01-eve-hitl-approval-resume-contract-repaired-text-replies-like
eve / high
2026-07-01-eve-per-session-token-limits-added-maxinputtokenspersession
eve / high
2026-07-01-eve-recursive-subagent-delegation-depth-capped-default-maxsu
eve / high
2026-07-01-eve-workflow-sdk-turbo-first-delivery-beta-path-disabled-run
flue / medium
2026-07-01-flue-flue-1-0-0-beta-6-fixes-packaged-agent-skill-resource-av
flue / medium
2026-07-01-flue-flue-1-0-0-beta-7-adds-durable-structured-data-parts-wor
flue / high
2026-07-01-flue-flue-1-0-0-beta-8-replaces-the-session-store-model-with
flue / medium
2026-07-01-flue-flue-1-0-0-beta-9-adds-server-authored-conversation-time
gemini-cli / medium
2026-07-01-gemini-cli-at-reference-file-defensive-path-resolution-null-byte-sa
gemini-cli / high
2026-07-01-gemini-cli-case-insensitive-sensitive-path-blocklist-vscode-human-i
gemini-cli / high
2026-07-01-gemini-cli-consumer-service-retired
gemini-cli / medium
2026-07-01-gemini-cli-coretools-setting-migrated-to-tools-core-config-rename-i
gemini-cli / high
2026-07-01-gemini-cli-skill-install-path-traversal-fix-reaches-stable-in-v0-49
gemini-cli / high
2026-07-01-gemini-cli-v0-49-0-stable-released-baseline-advance-from-v0-47-0
gemini-cli / high
2026-07-01-gemini-cli-v0-50-0-preview-channel-opened-v0-50-0-preview-1
hermes-agent / high
2026-07-01-hermes-agent-command-approval-bypass-closed-gnu-long-flag-prefix-abbr
hermes-agent / high
2026-07-01-hermes-agent-mcp-oauth-401-recovery-task-no-longer-garbage-collected
hermes-agent / high
2026-07-01-hermes-agent-mcp-reload-could-freeze-the-cli-process-loop-plus-voice
hermes-agent / high
2026-07-01-hermes-agent-path-traversal-fix-model-supplied-tool-call-ids-could-es
hermes-agent / high
2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-e
hermes-agent / high
2026-07-01-hermes-agent-skills-read-before-write-guard-added-for-background-revi
openclaw / medium
2026-07-01-openclaw-permission-boundary-fix-on-main-not-yet-in-a-stable-tag
openclaw / medium
2026-07-01-openclaw-security-hardening-commit-on-main-not-yet-tagged-bound-o
openclaw / high
2026-07-01-openclaw-v2026-6-10-stable-adds-fast-auto-automatic-fast-mode-and
openclaw / high
2026-07-01-openclaw-v2026-6-11-stable-ships-channel-control-and-operator-wor
openhands / high
2026-07-01-openhands-cloud-1-39-0-tagged-2026-06-24-with-a-large-16-item-cve
openhands / high
2026-07-01-openhands-cloud-1-40-0-tagged-2026-06-26-shipping-a-4-item-cve-ghs
openhands / high
2026-07-01-openhands-new-untagged-cve-fix-on-main-after-cloud-1-40-0-cve-2026
openhands / high
2026-07-01-openhands-oss-line-received-no-new-tag-in-window-newest-non-cloud
paperclip / medium
2026-07-01-paperclip-ceo-authorization-hardening-against-cross-company-access
paperclip / high
2026-07-01-paperclip-heartbeat-preflight-budget-caps-hard-daily-run-count-and
paperclip / high
2026-07-01-paperclip-run-config-fingerprinting-prevents-stale-reuse-of-sessio
paperclip / high
2026-07-01-paperclip-skill-mutations-gated-behind-a-dedicated-skills-create-p
paperclip / high
2026-07-01-paperclip-stable-release-v2026-626-0-ships-tagging-previously-mast
pi-coding-agent / high
2026-07-01-pi-coding-agent-v0-80-3-adds-claude-sonnet-5-support-anthropic-compatibl
pi-coding-agent / high
2026-07-01-pi-coding-agent-v0-80-3-adds-read-only-rpc-session-inspection-get-entrie
pi-coding-agent / high
2026-07-01-pi-coding-agent-v0-80-3-adds-two-ui-editor-settings-outputpad-horizontal
agent-flywheel / high
The tagged ACFS license includes an OpenAI and Anthropic rider
agent-zero / high
2026-06-24-agent-zero-ready-branch-still-untagged
codex / high
2026-06-24-codex-0.143.0-alpha-train
flue / high
2026-06-24-flue-react-beta-and-observability-shipped-correction
heypi / high
2026-06-24-heypi-0.2.0-beta-governance-hardening
heypi / high
2026-06-24-heypi-admin-panel-and-audit-default-off
heypi / high
2026-06-24-heypi-approvals-opt-in-not-default
heypi / high
2026-06-24-heypi-channel-discipline-tags-no-releases
heypi / high
2026-06-24-heypi-durability-disclaimer
heypi / high
2026-06-24-heypi-governance-shell-on-pi
heypi / high
2026-06-24-heypi-sandbox-runtimes
heypi / high
2026-06-24-heypi-scaffolder-onboarding
heypi / high
2026-06-24-heypi-secret-handoff
openhands / high
2026-06-24-openhands-dependency-cve-batch-main-unreleased
claude-code / high
2026-06-23-claude-code-agent-permission-rules-enforced
claude-code / high
2026-06-23-claude-code-auto-mode-destructive-command-blocks
claude-code / high
2026-06-23-claude-code-background-subagent-permission-prompts
claude-code / high
2026-06-23-claude-code-foreground-subagent-depth-limit
claude-code / high
2026-06-23-claude-code-mcp-cli-login-logout
claude-code / high
2026-06-23-claude-code-scheduled-trigger-input-classification
codex / high
2026-06-23-codex-computer-use-eea-rollout
codex / high
2026-06-23-codex-eea-uk-swiss-feature-rollout
codex / high
2026-06-23-codex-environment-scoped-approvals
codex / high
2026-06-23-codex-multi-agent-delegation-modes
codex / high
2026-06-23-codex-rollout-token-budgets
flue / high
2026-06-23-flue-1.0-beta.1-and-beta.2-tags
flue / high
2026-06-23-flue-define-naming-unification
flue / high
2026-06-23-flue-defineskill-typescript-skills
flue / high
2026-06-23-flue-event-index-decoupled-from-stream-offset
flue / high
2026-06-23-flue-logs-removed-typed-run-apis
flue / high
2026-06-23-flue-run-unified-through-http-app
flue / high
2026-06-23-flue-skill-naming-ascii-spec
flue / high
2026-06-23-flue-workflow-runs-private-by-default
flue / high
2026-06-23-flue-workflows-rebuilt-on-actions
gemini-cli / high
2026-06-23-gemini-antigravity-banner-uncapped-in-stable
gemini-cli / high
2026-06-23-gemini-antigravity-migration-to-stable
gemini-cli / high
2026-06-23-gemini-skill-path-traversal-stranded-in-preview
hermes-agent / medium
2026-06-23-hermes-0day-mitigation-wave-main-unreleased
hermes-agent / high
2026-06-23-hermes-background-async-subagents-tagged
hermes-agent / high
2026-06-23-hermes-managed-scope-etc-hermes
hermes-agent / high
2026-06-23-hermes-v0.17.0-reach-release
openclaw / high
2026-06-23-openclaw-clawhub-skill-provenance-stable
openclaw / high
2026-06-23-openclaw-codex-auto-plugin-approvals-stable
openclaw / high
2026-06-23-openclaw-wcag-aa-reaches-stable
openhands / high
2026-06-23-openhands-acp-env-leak-closed
openhands / high
2026-06-23-openhands-apikey-keycloak-decouple
openhands / high
2026-06-23-openhands-channel-posture
openhands / high
2026-06-23-openhands-concurrency-limit-revert
openhands / high
2026-06-23-openhands-conversation-secret-enricher
openhands / high
2026-06-23-openhands-cve-sweep
openhands / high
2026-06-23-openhands-dynamic-sandbox-spec-service
openhands / high
2026-06-23-openhands-hide-personal-workspaces-ui-only
openhands / high
2026-06-23-openhands-sandbox-concurrency-list-count
openhands / high
2026-06-23-openhands-slack-attachments
paperclip / high
2026-06-23-paperclip-heartbeat-preflight-budget-caps
paperclip / high
2026-06-23-paperclip-same-company-ceo-authz-centralization
paperclip / high
2026-06-23-paperclip-task-watchdog-control-plane
paperclip / high
2026-06-23-paperclip-v2026.618.0-multitenant-cluster-tagged
pi-coding-agent / high
2026-06-23-pi-extension-compaction-event-context
pi-coding-agent / high
2026-06-23-pi-mistral-prompt-caching
pi-coding-agent / high
2026-06-23-pi-selective-provider-base-entrypoints
pi-coding-agent / high
2026-06-23-pi-vulnerable-dependency-update
eve / high
Eve AI Gateway OIDC readiness
eve / high
Eve durable execution on the Workflow SDK
eve / high
Eve fast beta velocity: a stability calibration note
eve / high
Eve's filesystem-first agent model: an agent is a directory of files
eve / high
Eve human-in-the-loop approval gates (the authority surface)
eve / high
Eve initial public release (eve@0.10.0, Vercel)
eve / high
Eve sandboxed compute across three backends (Vercel, Microsandbox, Docker)
eve / high
Eve subagents and MCP connections
agent-zero / high
2026-06-04-agent-zero-remote-control-csrf-ws-origin-hardening
codex / high
2026-06-04-codex-cli-0137-remote-control-pairing-and-managed-config
gemini-cli / high
2026-06-05-gemini-cli-antigravity-transition-banner-uncapped
openhands / high
2026-06-05-openhands-cve-2026-42342-react-router
paperclip / high
2026-06-05-paperclip-low-trust-review-containment
paperclip / high
2026-06-05-paperclip-positioning-pivot-away-from-zero-human-companies
claude-code / high
2026-06-06-claude-code-sendmessage-authority-hardening
hermes-agent / high
2026-06-06-hermes-agent-v0.16.0-surface-release
claude-code / high
2026-06-08-claude-code-otel-cert-trust-fix
flue / high
2026-06-08-flue-v0100-durable-agent-execution
pi-coding-agent / high
2026-06-08-pi-coding-agent-project-trust-system
codex / high
2026-06-09-chatgpt-ios-1-2026-153-goal-worktree-inline-review
claude-code / high
2026-06-09-claude-code-fable-5-launch
codex / high
2026-06-09-codex-app-26608-migrate-from-claude-code-and-cowork
codex / high
2026-06-09-codex-cli-0139-code-mode-web-search-schema-fidelity
gemini-cli / high
2026-06-09-gemini-cli-antigravity-cli-migration-path
openclaw / high
2026-06-09-openclaw-mobile-state-clarity-and-clawhub-skills
pi-coding-agent / high
2026-06-09-pi-coding-agent-claude-fable-5-support
claude-code / high
2026-06-10-claude-code-background-worker-settings-bleed
claude-code / high
2026-06-10-claude-code-nested-subagent-spawning
flue / high
2026-06-10-flue-v0102-durable-streams-replace-websocket-sse
gemini-cli / high
2026-06-10-gemini-cli-flash-3-5-ga-routing-to-stable
openhands / high
2026-06-10-openhands-hide-personal-workspaces
openhands / high
2026-06-10-openhands-ohe-default-org-bootstrap
codex / high
2026-06-11-codex-app-26609-developer-mode-cdp-and-computer-use-controls
claude-code / high
2026-06-12-claude-code-availablemodels-bypass-fixes
claude-code / high
2026-06-12-claude-code-enforce-available-models
openclaw / high
2026-06-12-openclaw-security-boundary-sweep
openhands / high
2026-06-12-openhands-cve-2026-41305-postcss-xss
paperclip / high
2026-06-12-paperclip-auto-complete-approved-review-atomicity
paperclip / high
2026-06-12-paperclip-cloud-tenant-never-instance-admin
paperclip / high
2026-06-12-paperclip-per-company-jwt-signing-keys
hermes-agent / high
2026-06-13-hermes-agent-sensitive-write-and-status-leak-hardening
openclaw / high
2026-06-13-openclaw-control-ui-accessibility-pass
openhands / high
2026-06-13-openhands-pluginspec-source-credential-redaction
openhands / high
2026-06-14-openhands-ohe-multimodel-discovery-byok-gating
claude-code / high
2026-06-15-claude-code-automode-classifies-subagent-spawns
claude-code / high
2026-06-15-claude-code-tool-param-value-permission-syntax
codex / high
2026-06-15-codex-cli-0140-usage-import-session-delete
gemini-cli / high
2026-06-15-gemini-cli-skill-install-path-traversal-fix
hermes-agent / high
2026-06-15-hermes-agent-async-background-subagents
openhands / high
2026-06-15-openhands-conversation-concurrency-limits
openhands / high
2026-06-15-openhands-mcp-for-acp-agents
codex / high
2026-06-16-codex-computer-use-eea-uk-switzerland-and-chronicle
flue / high
2026-06-16-flue-v100-beta1-leading-release
hermes-agent / high
2026-06-16-hermes-agent-skill-memory-poisoning-fixes
openclaw / high
2026-06-16-openclaw-admin-gated-http-override-surfaces
openclaw / high
2026-06-16-openclaw-keyfree-web-search-opt-in
codex / high
Codex CLI 0.135.0 - Enhanced diagnostics and permission profiles
flue / high
OpenTelemetry tracing integration added
hermes-agent / high
v0.15.0 Velocity Release - Agent architecture refactor and multi-agent platform
openhands / high
Dependency: Upgrade LiteLLM to 1.84.1
openhands / high
Analytics: Restore PostHog onboarding-completed and create-pr-button-clicked events
openhands / high
Feature: Seed Default LLM profile from legacy config on profiles upgrade
hermes-agent / high
v0.15.2 Packaging Hotfix - Plugin manifest distribution fix
hermes-agent / high
v0.15.1 Patch Release - Dashboard reload loop hotfix and Docker hardening
paperclip / high
Paperclip v2026.529.0 - Inline annotations, skills CLI, sidebar controls, self-hosted admin flow, and live model discovery
claude-code / high
Auto Mode Expansion to Bedrock and Vertex
openclaw / high
OpenClaw 2026.5.31-beta.3 with gateway enhancements and channel stability
pi-coding-agent / medium
OpenAI GPT-5.5 thinking metadata correction
flue / high
Authentication headers in `flue logs`, WebSocket runId inspection, and FlueApiError export
flue / high
Automatic `.env` loading and dev reload on config changes
flue / high
Major API refactor: routing imports, source discovery, provider ID, SDK mount paths, and Cloudflare migrations ownership
flue / high
Workers AI reasoning effort forwarding
openclaw / high
OpenClaw 2026.5.31-beta.4 with Tailscale service-name binding and state migration
openclaw / high
OpenClaw 2026.6.1-beta.1 introducing Skill Workshop with proposal management
openclaw / high
OpenClaw 2026.6.1-beta.2 with Control UI improvements and latency instrumentation
openhands / high
Feature: Proxy runtime git/changes and git/diff via app-conversations
openhands / high
UX: Preserve returnTo through onboarding interstitial
pi-coding-agent / high
Extension mode context detection
pi-coding-agent / high
Extension system prompt options API
pi-coding-agent / high
TUI overlay focus control hardening
agent-zero / high
Improved code execution verification and raised timeouts for builds, installs, and tests
agent-zero / high
Document Query Plugin extracted to standalone plugin with parser strategy pattern
agent-zero / high
Enhanced memory management with staleness tracking and explicit forget guidance
agent-zero / high
Unified provider-aware OAuth account management surfaces
agent-zero / high
Office, Desktop, and Editor plugins made toggleable with protected API endpoint
agent-zero / high
Remote Link renamed to Remote Control with multiple tunnel providers
agent-zero / high
Screenshot artifacts reverted to durable chat-scoped storage
agent-zero / high
Hardened Xpra desktop control with structured workflows and canvas sizing fixes
codex / high
ChatGPT for iOS 1.2026.146 - Face ID/passcode lock and SSH support for Windows
claude-code / high
Accessibility: Reduce Motion Setting Honored
claude-code / high
Agent Progress Counter in Agent View
claude-code / high
Build Tool Config Write Protection
claude-code / high
Edit Tool Read Requirement Relaxation
claude-code / high
Linux Clipboard Tool Support
claude-code / high
Managed Settings Policy Enforcement
claude-code / high
Parallel Tool Execution Fault Isolation
claude-code / high
Shell Startup File Write Protection
claude-code / high
Telemetry Metric Labels from OTEL Attributes
claude-code / high
Workflow Agent Worktree File Editing
claude-code / high
WSL Clipboard Interop Fix
codex / high
Amazon Bedrock integration - AWS-managed model deployment
codex / high
Codex CLI 0.136.0 - Session archiving and remote execution improvements
codex / high
Codex Sites plugin - Website and web app creation and deployment
flue / high
Fixed relative cwd double-scoping in custom sandbox connectors
flue / high
Cloudflare WebSocket error handling for session restoration
flue / high
SDK option types export and workflow run retention behavior change
flue / high
WebSocket security hardening: query string stripping and requestId validation
openhands / high
Infrastructure: Update default agent server image to 1.23.1
openhands / high
Security: Fix CVE-2026-41238 via dompurify upgrade to 3.4.0
openhands / high
Performance: Avoid Keycloak full scan in Resend sync
pi-coding-agent / high
Authentication file mode set at creation time
pi-coding-agent / high
Extension cache moved to user-private directory
pi-coding-agent / high
Git package installation path traversal protection
pi-coding-agent / high
HTML export URL sanitization against stored XSS
pi-coding-agent / high
Removal of stale Codex models
pi-coding-agent / high
OAuth browser launch URI validation and shell-safe spawning
pi-coding-agent / high
Ant Ling provider with reasoning support
pi-coding-agent / high
NVIDIA NIM provider dynamic model discovery
pi-coding-agent / high
ZAI Coding Plan China provider integration
claude-code / high
Agent Status Monitoring Enhancement
claude-code / high
Agent Output Terminal Width
claude-code / high
Read-Only Config Directory Startup Fix
claude-code / high
Effort Level Default Persistence Confirmation
claude-code / high
IDE Rename: Windsurf to Devin Desktop
claude-code / high
MCP Per-Server Timeout Enforcement
claude-code / high
Read Deny Rules Glob/Grep Filtering
claude-code / high
Remote Control UI Persistence
claude-code / high
Slash Command Autocomplete Behavior
claude-code / high
Tool Search Enhancement for Grep/Glob
claude-code / high
WebFetch Permission Rules Enforcement
claude-code / high
Windows Permission Path Matching
flue / high
Autonomous skill activation
gemini-cli / high
CI Workflow: pull_request_target for Fork PR Write Access
gemini-cli / high
Invalid preferredEditor Spam Loop Prevention
gemini-cli / high
Flash Backend Definitions and Auto Mode Update
gemini-cli / high
Gemini 3.5 Flash GA Model Transition with Experiment Flag
gemini-cli / high
Policy File Resilience: EBUSY Fallback and TOML Recovery
gemini-cli / high
Optimized PR Size Labeler with Batch Processing
gemini-cli / high
PTY Resize Hardening Against Native Crashes
gemini-cli / high
v0.45.0 Stable Release
hermes-agent / high
Dashboard and desktop client clipboard and UI enhancements
hermes-agent / high
Desktop client session management and connectivity hardening
hermes-agent / high
Documentation clarification for remote desktop connectivity
hermes-agent / high
Windows schtasks locale-safe encoding and PTY resize hardening
hermes-agent / high
i18n locales distribution in Python packaging
hermes-agent / high
Installer self-update robustness and logging improvements
hermes-agent / high
Nous Portal quick-setup flow integration with model picker
hermes-agent / high
TUI /save snapshot storage under Hermes home
openclaw / high
OpenClaw 2026.6.1-beta.3 release with Control UI refinements
openclaw / high
OpenClaw 2026.6.1 stable release with reliability enhancements and major features
openhands / high
Security: Route ACP provider credentials via agent_context.secrets instead of acp_env
openhands / high
Operational: Cascade-delete sole-org requester on DELETE /api/organizations
openhands / high
Security: Fix CVE-2026-42305 via dulwich upgrade to 1.2.5
openhands / high
Security: Fix CVE-2026-44492 via axios upgrade to 1.16.0
openhands / high
Security: Upgrade vitest testing framework to ^4.1.0
agent-zero / high
Agent Zero: Host Desktop Control With Required Visual Verification
claude-code / high
Claude Code: Auto Mode Becomes the Default Permission Posture
claude-code / high
Claude Code: Three De-Facto Security Advisories Without an Advisory Surface
codex / high
Codex: Goal Mode Graduates and Remote Computer-Use After Mac Lock Ships
codex / high
Codex: Permission Profiles Get Inheritance and an Org-Managed Enforcement File
gemini-cli / high
Gemini CLI: Auto Modes Collapse and PolicyEngine Reaches Into ACP
gemini-cli / high
Gemini CLI: Local and Remote Session Invocation Protocols Land Stable
hermes-agent / high
Hermes Agent: Foundation Release Reframes the Project as Distribution Primitive
openclaw / high
OpenClaw: Content-Boundary Hardening Suite Across Inbound Surfaces
openhands / high
OpenHands: A GUI Front-End for Other Harnesses, Plus Org-Level LLM Profiles
paperclip / high
Paperclip: Scoped Agent Permissions, Layered Routine Secrets, Document Locks
openclaw / high
OpenClaw: Per-Sender Tool Policies (v2026.5.12-beta.3)
agent-zero / high
Agent Zero v1.11--v1.13: Visible Computer, ODF Documents, and Persistent Desktop
claude-code / high
Claude Code: Agent View, Goal Completion, and a Hardening Governance Surface
codex / high
Codex: PreToolUse Hook Input Rewrites
flue / high
Flue v0.4.0--v0.5.3: Initial Profile, Observability Wave, and Sandbox Architecture
gemini-cli / high
Gemini CLI: Session Resume Reliability Fix
hermes-agent / high
Hermes Agent v0.13.0: Durable Kanban, Persistent Goals, and a Security Hardening Wave
openhands / medium
OpenHands: Sub-Agent Delegation and Critic Evaluation Surface
paperclip / high
Paperclip v2026.512.0: Secrets Vaults, Cursor Cloud, and Control-Plane Hardening
pi-coding-agent / high