$ ls ai-agents/reviews/ # the step-back reads
Agentic Coding in review
One review per week (and month): what shipped, what broke, what to act on.
Nov 2–8, 2026 weekly [act] 8 stories
Codex pauses Bazel release artifacts for Cargo-only builds
Codex publisher 0.167.0-alpha.2 ships Cargo assets only, while Gemini CLI cuts v0.67.0 with model and sandbox fixes.
Oct 26–Nov 1, 2026 weekly [act] 8 stories
Claude Code closes a TOCTOU hole in its edit tool
The same week Claude Code added a permissions flag to block writes outside working directories, opencode patched a webfetch redirect bypass.
Oct 19–25, 2026 weekly [act] 8 stories
Goose 1.56 ships subagent concurrency caps and resume
Gemini CLI 0.65.0 enforces read-only workspace settings in untrusted folders, and Cline stopped sending native Google Search on the Gemin...
Oct 12–18, 2026 weekly [act] 8 stories
Claude Code RCE via malicious git executable
Cline shipped v3.0.71 to v3.0.73 for people running plugins on Windows without a JS runtime, and restored GPT-6 on OpenAI endpoints.
Oct 5–11, 2026 weekly [act] 8 stories
Claude Code plugin SHA pin bypass allows attacker code
Two Claude Code advisories land the same week, plus releases from Gemini CLI, Goose, OpenCode, and Codex.
Oct 1–31, 2026 monthly [act] 8 stories
Claude Code patches four sandbox-escape flaws
A symlink TOCTOU write, a pin bypass, a search-path RCE and an edit-tool escape all landed against Claude Code this month.
Sep 28–Oct 4, 2026 weekly [act] 8 stories
Claude Code makes Sonnet 5.5 the default
The same release hardens permission denies against plugins you install, and a Goose advisory lands in 1.53.0.
Sep 21–27, 2026 weekly [act] 8 stories
OpenCode remote-install hole, Claude Desktop file-open RCE
Two host-level holes dominate the period, alongside Codex 0.157 with GPT-6 Sol and Luna and Claude Code gateway IAM.
Sep 14–20, 2026 weekly [plan] 8 stories
Cline desktop exits beta after backend and sign-out fixes
Claude Code and LangChain both shipped GPT-6 and AGENTS.md support, while OpenHands 1.20.0 added agent profiles.
Sep 7–13, 2026 weekly [act] 8 stories
OpenHands 1.18.0 ships XSS patch and Azure SSH
A Cline undici override closes CVE-2026-1525 while LangChain partners reconcile Azure AD auth and gateway tracing.
Sep 1–30, 2026 monthly [act] 8 stories
OpenCode npm installs and Claude Desktop file bug
Two exploitable holes this month: one on OpenCode servers installed via npm, one on macOS Claude Desktop opening files from Cowork folders.
Aug 31–Sep 6, 2026 weekly [act]
LangChain 1.4.0 alphas add MCP adapter
OpenHands bug fixes and llama_index CI hardening rounded out a week focused on reliability, plus Cline SDK v0.0.82 breaking the changes.
Aug 24–30, 2026 weekly
Cline ships v4.1.15 amid a week of desktop, telemetry, and tool-signature fixes
Cline's v4.1.15 release and a sustained push across the agent stack to fix telemetry, desktop stability, and tool-call safety defined a w...
Aug 1–31, 2026 monthly
LangChain tightens tool gatekeeping, Cline rewind matures, OpenHands surfaces agents
August hardened the AI agent stack: LangChain sealed leaks in tool arguments and streaming callbacks, Cline made checkpoints and hubs dep...
Keep up with Agentic Coding in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.