$ cat ai-agents/week/2026-09-07.log
the week in review · Sep 7 – Sep 13, 2026
OpenHands 1.18.0 ships XSS patch and Azure SSH
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
A Cline undici override closes CVE-2026-1525 while LangChain partners reconcile Azure AD auth and gateway tracing.
v1.18.0 OpenHands/OpenHands
The release adds Azure DevOps SSH remote support and fixes a cross-site scripting flaw in the static server, so agents running behind that server should be updated. It also includes the 1.17.0 manifest-driven dashboard and cloud LLM connection work.
security: collapse nested undici@5.29.0 onto 7.x (CVE-2026-1525) — residual of #13223 (#13809) cline/cline
Cline's root package.json now forces "undici": ">=7.29.0 <8", collapsing the last nested undici@5.29.0 copy under dify-ai-provider so no 5.x path remains. The override regenerates bun.lock with no new package versions, but any deployment still resolving the old tree stays exposed.
langchain-openai==1.6.1 langchain-ai/langchain
langchain-openai 1.6.1 adds Azure AD auth with the OpenAI 3.8 SDK and picks up a model-profile refresh. Teams using Azure-hosted OpenAI endpoints can now authenticate through AD instead of static keys.
langchain-anthropic==1.7.2 langchain-ai/langchain
The partner package stops discarding malformed tool-use blocks, so Anthropic responses that fail validation are preserved for inspection rather than silently dropped. This matters for agents that parse tool calls defensively.
langchain-core==1.6.3 langchain-ai/langchain
Tracing metadata for model name and provider can now be overridden from the gateway response, which reconciles spans when a proxy rewrites the backend. Teams running a gateway in front of multiple providers get accurate attribution without code changes.
langchain-openai==1.6.2 langchain-ai/langchain
The follow-up release adds reasoning effort support for GPT-6 Astra and bumps httpx2. Pair it with 1.6.1 for the full partner changes.
fix(desktop): keep desktop backend startup off the command path (#13829) cline/cline
Backend startup no longer blocks the command path, so the desktop app accepts input while the sidecar is still initializing. The change comes with a regression test that exercises shutdown during a queued startup.
ci: run e2e suites after merge to main OpenHands/OpenHands
Still in draft, the change runs e2e suites after merges to main and on release PRs rather than on every pull request. Alongside: model-profile refreshes and a deprecation test for the .text() access path in LangChain core.
$ ls ai-agents/week/ # the briefings behind this review
Keep up with Agentic Coding in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.