Agentic Coding — full archive
94 daily briefings · 10 reviews.
$ ls ai-agents/reviews/ # the step-back reads
- week Claude Code RCE via malicious git executable
- week Claude Code plugin SHA pin bypass allows attacker code
- week Claude Code makes Sonnet 5.5 the default
- week OpenCode remote-install hole, Claude Desktop file-open RCE
- week Cline desktop exits beta after backend and sign-out fixes
- week OpenHands 1.18.0 ships XSS patch and Azure SSH
- month OpenCode npm installs and Claude Desktop file bug
- week LangChain 1.4.0 alphas add MCP adapter
- week Cline ships v4.1.15 amid a week of desktop, telemetry, and tool-signature fixes
- month LangChain tightens tool gatekeeping, Cline rewind matures, OpenHands surfaces agents
- Goose 1.56 ships subagent controls; Cline fixes dropped prompts and stalled resumes
- Claude thinking text loss, AWS signing for nonempty bodies
- Codex scopes MITM credential substitution, Gemini CLI stops clobbering read-only files
- Codex stops sleeping through your input; gemini-cli 0.65.0 lands
- Cline pulls Google Search from Gemini API, Codex adds a startup config probe
- Codex hooks its model requests, Goose caps subagents
- Codex adds zstd for app-server WebSockets, opencode fixes retries
- Cline's GPT-6 fix ships across desktop, CLI and SDK; Codex tightens plugin hook trust
- Codex presets and inline model flags, credential masking for remote exec
- Cline drops in-process plugins, Gemini CLI fixes terminal flicker
- Claude Code RCE via malicious git, Cline CLI drops the JS runtime requirement
- Codex cleans helper dirs, opencode stops listing Azure at startup
- Codex TUI gains clipboard paste, daemon restart, subagent shortcuts
- OpenCode 1.19.0 stops auto-installing updates and opens the door to OpenCode 2
- Claude Code plugin pins can be bypassed, Codex tightens its sandbox
- Stop ends the run, plugins get a default policy, and codex honors API-key gates
- Cline drops dead CLI flags, gemini-cli fixes auth retry loop, Gemini adds OTLP headers
- Claude Code 2.1.292 adds marketplace installs and subagent effort control
- Codex preserves CRLF, Goose scopes extensions per session
- Codex TUI now honors server model and reasoning defaults; Codex gains a stable environment tools flag
- Codex keeps deferred tools stable across turns, Windows Terminal Shift+Enter fixed
- Codex drops the tool-namespace capability gate, Goose ships 1.53.0
- Goose exports sessions to HTML, Codex gets model-listing auth recovery
- Diff panes get one git process, Gemini CLI stops hanging, cline fixes custom providers
- Enterprise permission defaults get teeth as Codex, Gemini CLI and Goose ship fixes
- Claude Code ships Sonnet 5.5 as default, Goose patches a security advisory
- Bedrock profile auth survives migration; Cloudflare AI Gateway streams now time out
- Codex survives Windows launchers, keeps WebSocket turns alive
- Claude Desktop file-open bug, Codex TUI fixes, DeepSeek allowance made permanent
- Codex 0.157 adds GPT-6 Sol and Luna, OpenCode ships a remote-install hole
- Goose patches MCP redirect SSRF, Claude Code adds gateway IAM
- Codex caps inbound exec-server messages, Gemini CLI adds 3.8 Flash
- Codex proxy config grows up, Cline hook context lands
- Codex moves fullscreen transcript to a TUI config key
- Cline desktop bundles shrink, goose unblocks its own clicks
- Claude Code reads AGENTS.md, Gemini CLI stops crashing on cancel
- OpenHands 1.20.0 ships agent profiles, Gemini CLI fixes OAuth token loss
- Compaction triggers on real token counts, LangChain 1.4.1 ships
- Open MCP gateway args fixed, Cline desktop stops losing its backend
- Cline Desktop exits beta, LangChain wires up GPT-6 Astra
- Cline desktop 0.0.27 fixes broken sign-out and dead-token auth errors
- OpenHands patches XSS in static server, adds Azure DevOps SSH remote support
- LangChain core 1.6.3 reconciles gateway tracing, OpenHands scopes agent profiles to MCP servers
- Anthropic 1.7.2 preserves invalid tool blocks, Cline stops resurrecting deleted prompts
- OpenHands 1.17.0 adds cloud LLM connections, custom automation manifests
- Cline collapses lingering undici 5.x to fix CVE-2026-1525
- Cline desktop commands unblocked from slow backend startup
- DeepSeek strict mode routed to beta endpoint
- LangChain Azure AD auth rides OpenAI 3.8.0
- LangChain adds async OpenAI tools; OpenHands fixes flaky CI
- LangChain 1.4.0 and anthropic 1.7.1 ship with MCP adapter, Claude Fable 5.1
- Cline desktop stops false hub-update nag, shows device sign-in code
- LangChain 1.4.0 alphas land with new MCP namespace, Claude Fable 5.1 support
- llama_index clears 243 unfixable alerts by raising dependency pins
- OpenHands settings disable save on revert, UI fixes land
- Cline fixes hook telemetry and crashes; LlamaIndex purges unfixable packages
- Langchain ships MCP adapter, Cline fixes telemetry and CVEs
- AGENT TOOL SIGNATURES NOW ENFORCED BEFORE EXECUTION
- Cline desktop plugins crash on launch
- CLINE OVERHAULS DESKTOP UX
Never miss a Agentic Coding briefing.
Get Agentic Coding's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.
One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →