RepoJournal
Agentic Coding Agentic Coding
70 wires and counting

$ follow Agentic Coding

Keep up with Agentic Coding in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-12
stories 59
RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

LANGCHAIN SHIPS THREE CRITICAL RELEASES IN 12 HOURS, CLOSES SETUPTOOLS VULNERABILITY

By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology

github-actions[bot] John Kennedy neubig Mikołaj Kondratek sanjayrohith langchain-oss-model-profiles[bot] opensource-joe
13 people shipped this
github-actions[bot] @github-actions[bot] 3 cited John Kennedy @jkennedyvz 1 cited neubig @neubig 1 cited Mikołaj Kondratek @mkondratek 1 cited sanjayrohith @sanjayrohith 1 cited langchain-oss-model-profiles[bot] @langchain-oss-model-profiles[bot] opensource-joe @opensource-joe lufen @lufen Haley Park @haleyparkdesign Saoud Rizwan @saoudrizwan abeatrix @abeatrix ProgrammerPlus1998 @ProgrammerPlus1998 swayam1010 @swayam1010

LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration.

Three production releases landed across the core stack [2][3][4]. Langchain-anthropic 1.5.5 adds reasoning token reporting to usage metadata and fixes a KeyError in Claude file-tool middleware [2]. Langchain-core 1.5.4 brings Pydantic 2.14 compatibility, closes a StructuredPrompt mutation bug that corrupted caller kwargs, and fixes internal event loop leaks in streaming tracers [4]. Langchain 1.3.15 exposes trace_policy on AgentMiddleware and patches history preservation in SummarizationMiddleware [3]. Separately, a critical setuptools bump from 81.0.0 to 84.0.0 resolved CVE-2026-59890 in the Hugging Face lockfile [1], keeping that integration shipping. In the agent space, OpenHands enforced typed TypeScript client calls across the agent-server API to eliminate auth bypass risks [5], Cline fixed a dashboard bug where recoverable agent errors were incorrectly terminating turns mid-run [6], and llama_index corrected CitationQueryEngine to assign unique IDs to citation chunks instead of reusing source node identifiers [7]. This 24-hour window saw 28 commits, 26 PRs, and 5 releases across the stack with zero critical security gaps remaining.

Action items

References

  1. [1] chore: bump setuptools in Hugging Face lockfile (#39603) ↗ langchain-ai/langchain
  2. [2] langchain-anthropic==1.5.5 ↗ langchain-ai/langchain
  3. [3] langchain==1.3.15 ↗ langchain-ai/langchain
  4. [4] langchain-core==1.5.4 ↗ langchain-ai/langchain
  5. [5] chore: enforce typed @openhands/typescript-client for agent-server API calls (no ad-hoc fetch) ↗ OpenHands/OpenHands
  6. [6] fix(hub): recoverable agent errors must not end the turn in the dashboard (#12962) ↗ cline/cline
  7. [7] fix(core): give each CitationQueryEngine citation node its own id and offsets ↗ run-llama/llama_index

$ ls ai-agents/reviews/ # the step-back reads

the week in review OpenCode remote-install hole, Claude Desktop file-open RCE the month in review OpenCode npm installs and Claude Desktop file bug
Topics: AI / ML AI Agents Full archive → Weekly reviews →

Quick answers

What shipped in Agentic Coding on August 12, 2026?
LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration. In total, 28 commits, 26 pull requests, and 5 releases landed.
Who contributed to Agentic Coding on August 12, 2026?
13 developers shipped this update, including John Kennedy, github-actions[bot], langchain-oss-model-profiles[bot], neubig, opensource-joe, lufen, Mikołaj Kondratek, and Haley Park, and 5 more.
What were the notable Agentic Coding updates?
chore: bump setuptools in Hugging Face lockfile (#39603), langchain-anthropic==1.5.5, and langchain==1.3.15.
♥

$ log Agentic Coding --recent

Enterprise permission defaults get teeth as Codex, Gemini CLI and Goose ship fixes 218 shipped Claude Code ships Sonnet 5.5 as default, Goose patches a security advisory 207 shipped Bedrock profile auth survives migration; Cloudflare AI Gateway streams now time out 91 shipped Codex survives Windows launchers, keeps WebSocket turns alive 70 shipped

$ log --all # elsewhere on the wire

@openclaw openclaw 2026.9.7 hardens update rollback, and Peekaboo ships GPT-6.1 Sol Local LLMs Ollama gates System One on declared capabilities, llama.cpp fixes a stale-UI trap

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux Anthropic

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.