RepoJournal
Agentic Coding Agentic Coding
60 wires and counting

$ follow Agentic Coding

Keep up with Agentic Coding in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-05
stories 121
RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

HITL APPROVAL GATES STOP SILENTLY FAILING OPEN, AIOHTTP FIXES REDIRECT LEAKS ACROSS LANGCHAIN STACK

By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology

dependabot abeatrix shivamlalakiya imnishitha neubig all-hands-bot gkorland
13 people shipped this
dependabot @dependabot 4 cited abeatrix @abeatrix 2 cited shivamlalakiya @shivamlalakiya 2 cited imnishitha @imnishitha 1 cited neubig @neubig 1 cited all-hands-bot @all-hands-bot 1 cited gkorland @gkorland 1 cited hieptl @hieptl sleeyax @sleeyax oab24413gmai @oab24413gmai mkondratek @mkondratek Anai-Guo @Anai-Guo Asjad Abbas @asjad3

LangChain plugged a critical security hole in human-in-the-loop middleware where invalid configurations silently disabled approval gates, while simultaneously patching a cascade of aiohttp vulnerabilities that leak headers across origin boundaries.

The HumanInTheLoopMiddleware now raises ValueError immediately if allowed_decisions config is missing, empty, or misspelled [1], stopping approval gates from silently defaulting to open. This was a silent failure mode that could allow unauthorized tool execution in production agents. In parallel, LangChain bumped aiohttp from 3.14.1 to 3.14.3 across the core library [2], the XAI partners module [3], the HuggingFace integration [4], and the Fireworks integration [5], fixing a client bug where only the first Authorization, Cookie, and Proxy-Authorization headers were dropped on cross-origin redirects. That fix matters: agents making authenticated requests through proxies or redirect chains were leaking credentials. OpenHands shipped MCP credential preservation during Canvas mutations [6] and tightened CI enforcement requiring frontend screenshot/video evidence and human sign-off [7]. Cline added lazy session persistence and initiation mode to the SDK [9], while fixing connector instance claiming before socket connect [8]. LLama Index fixed FalkorDB's schema, vector ranking, and Cypher injection vulnerabilities in property graph retrieval [10], corrected Weaviate metadata for pre-existing collections [11], and opened Memory to any AsyncDBChatStore instead of just SQLAlchemy [12].

Action items

References

  1. [1] fix(langchain): stop HITL approval gates from silently failing open ↗ langchain-ai/langchain
  2. [2] chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/langchain ↗ langchain-ai/langchain
  3. [3] chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/partners/xai ↗ langchain-ai/langchain
  4. [4] chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/partners/huggingface ↗ langchain-ai/langchain
  5. [5] chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/partners/fireworks ↗ langchain-ai/langchain
  6. [6] fix: preserve MCP credentials during Canvas mutations ↗ OpenHands/OpenHands
  7. [7] ci: require frontend screenshot/video and checked human-tested box ↗ OpenHands/OpenHands
  8. [8] fix(cli): claim connector instance before socket connect ↗ cline/cline
  9. [9] feat(sdk): add session initiation mode and lazy session persistence ↗ cline/cline
  10. [10] fix(falkordb): correct schema, vector ranking, filters and batching in property graph store ↗ run-llama/llama_index
  11. [11] fix(weaviate): return real properties as node metadata for pre-existing collections ↗ run-llama/llama_index
  12. [12] feat(core): allow Memory to accept any AsyncDBChatStore ↗ run-llama/llama_index

$ ls ai-agents/reviews/ # the step-back reads

the week in review Cline desktop exits beta after backend and sign-out fixes the month in review LangChain tightens tool gatekeeping, Cline rewind matures, OpenHands surfaces agents
Topics: AI / ML AI Agents Full archive → Weekly reviews →

Quick answers

What shipped in Agentic Coding on August 5, 2026?
LangChain plugged a critical security hole in human-in-the-loop middleware where invalid configurations silently disabled approval gates, while simultaneously patching a cascade of aiohttp vulnerabilities that leak headers across origin boundaries. In total, 58 commits and 63 pull requests landed.
Who contributed to Agentic Coding on August 5, 2026?
13 developers shipped this update, including imnishitha, dependabot, neubig, all-hands-bot, hieptl, sleeyax, oab24413gmai, and abeatrix, and 5 more.
What were the notable Agentic Coding updates?
fix(langchain): stop HITL approval gates from silently failing open, chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/langchain, and chore: bump aiohttp from 3.14.1 to 3.14.3 in /libs/partners/xai.
♥

$ log Agentic Coding --recent

Cline desktop bundles shrink, goose unblocks its own clicks 92 shipped Claude Code reads AGENTS.md, Gemini CLI stops crashing on cancel 193 shipped OpenHands 1.20.0 ships agent profiles, Gemini CLI fixes OAuth token loss 150 shipped Compaction triggers on real token counts, LangChain 1.4.1 ships 96 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Local LLMs Metal MoE/SSM fusion lands, MiMo-V2.5 fp8 sharding fixed

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.