$ the-wire · showcase
Codex proxy config grows up, Cline hook context lands
By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology
![openhands-release-bot[bot]](https://avatars.githubusercontent.com/u/225919603?v=4)
21 people shipped this
copyberry
@copyberry
1 cited
Celia Chen
@celia-oai
1 cited
openhands-release-bot[bot]
@openhands-release-bot[bot]
1 cited
Mikołaj Kondratek
@mkondratek
1 cited
Bee
@abeatrix
1 cited
Abhijay007
@Abhijay007
1 cited
dicksontsai
@dicksontsai
timgu0
@timgu0
GitHub Actions
@actions-user
MrMushrooooom
@MrMushrooooom
dc85
@dc85
rekram1-node
@rekram1-node
urielefrenvirtusa
@urielefrenvirtusa
diegogodinezr
@diegogodinezr
OpenHands Bot
@all-hands-bot
smolpaws
@smolpaws
neubig
@neubig
John Choi
@johnwschoi
lifeizhou-ap
@lifeizhou-ap
James Dumay
@i386
charles
@crwvrosenblum
Today's useful changes are all about the seams: how your agent talks to proxies, how hook output reaches the model, and how much a recipe is allowed to ask for.
Support caller-provided MITM CAs in the network proxy openai/codex
Codex's network proxy now accepts a caller-supplied MITM CA via the new network.mitm_ca config, with certificate_file and private_key_file, so you can put your own trusted cert in front of proxied traffic instead of the generated one. MITM must still be enabled, and setup validates absolute paths, cert/key matching, file sizes, and Unix private-key permissions while rejecting symlinks and keys ...
fix(hooks): deliver run-start hook context in the SDK runtime; core-layer blocking is opt-in (#13524) cline/cline
Run-start hooks (UserPromptSubmit, TaskStart, TaskResume) previously had their output discarded entirely on the SDK core layers, where agent_start and agent_resume spawned detached with stdio ignored, so even a cancel never landed. They now deliver context the way legacy did, as hook_context blocks in the same turn as the user prompt, but core-layer blocking is opt-in, so an operator relying on...
Honor system proxy settings for standalone web search (#47142) openai/codex
Standalone web search was creating a default HTTP client and quietly bypassing your configured proxy route even when respect_system_proxy was enabled. It now receives the configured HttpClientFactory and builds its client through the API route policy, so search requests go out the same way as everything else.
feat(recipe): enforce parameter limits (max 32 params, 200 select options, 128 KiB) aaif-goose/goose
Goose enforces hard limits on recipe parameters at both the CLI and scheduler entry points: 32 parameters per recipe, 200 select options total, and 128 KiB of serialized parameters. Each limit fails validation before any further processing with an error naming the maximum, so a recipe that has been quietly oversized will now be rejected at launch.
v1.21.0 OpenHands/OpenHands
OpenHands 1.21.0 adds the ability to request Docker execution workspaces from Docker servers, alongside fixes for stale conversation history merges and Forgejo PR and issue list queries. Upgrade if you run conversations against remote Docker hosts or a Forgejo instance.
fix(desktop): Sign in failing while the sidecar is still starting or being respawned CLINE-3274 (#14203) cline/cline
Quiet closing item for the long tail: Cline Desktop now respawns a sidecar that dies before publishing its endpoint and keeps waiting inside get_desktop_backend_endpoint instead of failing the request, opencode added Grok 4.7 to Zen and Go at Grok 4.6's pricing and retention, gemini-cli emits a pending tool_call update before request_permission in ACP mode so client UIs can link them, and goose...
Action items
