$ the-wire · showcase
Codex 0.157 adds GPT-6 Sol and Luna, OpenCode ships a remote-install hole
By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4)
19 people shipped this
github-actions[bot]
@github-actions[bot]
2 cited
copyberry
@copyberry
2 cited
Celia Chen
@celia-oai
1 cited
diegogodinezr
@diegogodinezr
1 cited
gokay-ai
@gokay-ai
1 cited
poteat
@poteat
adamdotdevin
@adamdotdevin
opencode-agent[bot]
@opencode-agent[bot]
ugorla-dev
@ugorla-dev
jesussamuel-byte
@jesussamuel-byte
juanmichelini
@juanmichelini
neubig
@neubig
Chocolatine75
@Chocolatine75
ak684
@ak684
abeatrix
@abeatrix
Renee Huang
@reneehuang1
github-actions
@github-actions
Yuyang Li
@wudilyy999
Alex Hancock
@alexhancock
A model refresh and a default flip land in Codex, an OpenCode server upgrade request can install arbitrary npm packages cross-site, and Cline Desktop reaches Linux.
Cross-site OpenCode server upgrade request can install arbitrary packages for npm-based installations anomalyco/opencode
A cross-site upgrade request to an OpenCode server can install arbitrary packages for npm-based installations. If you run an OpenCode server reachable from a browser, treat this as a live exposure rather than a bug report.
0.157.0 openai/codex
Codex 0.157.0 adds GPT-6 Sol and Luna with Amazon Bedrock support and migration prompts for older models, turns on fullscreen transcripts by default, and starts the background server automatically for eligible interactive sessions, with recovery choices when server settings are incompatible. An `f` shortcut forks conversations open in another app while preserving drafts and queued prompts.
Default local threads to paginated history openai/codex
Local threads now default to paginated history, with the legacy full-history mode available only when you ask for it explicitly. The full-history resume, fork, and subagent helpers are renamed as legacy APIs, `thread/revert` is rejected for ephemeral threads, and the TUI no longer replays or attaches them.
Desktop v0.0.35 cline/cline
Cline Desktop runs on Linux, shipping x64 `.deb` and `.rpm` packages per release with the native GTK picker for Open folder and background downloads that install on Restart now. Plugin slash commands such as `/goal` now execute the plugin instead of being sent to the model as plain text.
fix(core): bound tool output size and optimize memory lifecycle in long-running agent loops google-gemini/gemini-cli
Tool output is now bounded by an upper byte limit before it reaches session history, and terminated child process streams release their event listeners, closing the unbounded growth seen in long agent loops running build scripts, test suites, or large file operations. Also set `--//:rusty_v8_from_source=true` for custom V8 flags.
Use prebuilt V8 archives for Bazel on macOS and GNU Linux openai/codex
Bazel builds on x64 and arm64 macOS and GNU Linux now pull checksum-pinned rusty_v8 150.4.0 archives with matching bindings when pointer compression and the V8 sandbox are enabled; `--//:rusty_v8_from_source=true` selects source-built archives and bindings together for custom V8 C++ flags or instrumentation.
fix: cap conversation Skills/Hooks/Tools dialogs at 90vw OpenHands/OpenHands
The Skills, Hooks, and Tools dialogs used to render at a fixed 640px with no viewport cap, pushing content and close controls off-screen at 390px. They now carry the shared `max-w-[90vw]` cap, with unit tests covering the 320/390/720 contract.
Add bounded credential-storage telemetry helpers (#47901) openai/codex
New `StorageTelemetry` records credential-storage operation counts, durations, secure-store outcomes, and file fallback reasons under bounded labels, and emits fallback warnings without credential payloads or error text. Typed keyring error causes now survive `std::io::Error` and the local secrets backend instead of being flattened.
Action items
