Claude Code and Codex changed defaults this week, and Kilo Code's zod security fix means updating its VS Code extension.

22:12Antigravity CLI3 items · ⚠ 1▸

22:12Antigravity CLI · 1 release, 8 bug fixes

Antigravity CLI

• ⚠️ Google apps need their own approval (1.4.9). Approving a Google site such as www.google.com no longer also allows Gmail, Docs, Drive or Cloud Console, so approve each app you need separately. Source
• Paste images into the prompt (1.4.9). Paste an image with your terminal’s paste key, such as Cmd+V, or drag image files into the prompt to attach them; this also works over SSH with X11 or Wayland forwarding. Source
• Stricter plugin name check (1.4.9). agy plugin validate warns when a plugin name is not lowercase kebab-case, suggests a valid name, and fails under --strict. Source

Claude Code · no updatesCodex CLI · no updatesKilo Code · no updatesOpenCode · no updates

08:11Claude Code · Codex CLI · OpenCode7 items · ⚠ 2▸

08:11Claude Code, Codex CLI, OpenCode · 3 releases, 28 bug fixes

Claude Code

• ⚠️ Safety event no longer sent (2.1.312). Claude Code stops sending the claude_code.safety_event OpenTelemetry event, so change any alert or dashboard that counts it. Source
• ⚠️ Model switches cover custom model names (2.1.312). After a flagged message, Claude Code can now switch models for unrecognized names such as custom deployment names; set CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK=1 to keep the old behavior. Source
• Click to send in fullscreen (2.1.312). Clicking the “to send now” hint under a queued message sends it right away, as its key does. Source

Codex CLI

• Memory v2 on for new profiles (rust-v0.165.0). Fresh profiles start with memory v2, which can import memories from other agents, so review what it keeps if that matters to you. Source
• Built-in Vertex AI provider (rust-v0.165.0). Set model_provider = "gcp" to use Google Cloud Vertex AI. Source

OpenCode

• No user-facing changes (v1.19.5). The one listed change is a CI fix: the v1 release job uses GITHUB_TOKEN instead of the OpenCode app token. Source

Across tools

• Defaults change again. Codex turns memory v2 on for new profiles, and Claude Code widens automatic model switches to custom model names, so both change behavior without a new command. Sources: Codex CLI, Claude Code

Antigravity CLI · no updatesKilo Code · no updates

22:12Antigravity CLI3 items▸

22:12Antigravity CLI · 1 release, 6 bug fixes

Antigravity CLI

• Faster /diff (1.4.8). It opens sooner in large repositories and long conversations, and [ and ] jump between turns in the Per Turn tab. Source
• Auto mode asks you less often (1.4.8). Its review of commands that would leave the sandbox gets more time overall, and any single slow check now stops after 10 seconds. Source
• Deleting a conversation cleans up its subagents (1.4.8). Running subagents are stopped, and their saved history and shared or branched workspaces are removed with it. Source

Claude Code · no updatesCodex CLI · not checkedKilo Code · not checkedOpenCode · no updates

08:12Claude Code · Kilo Code5 items · ⚠ 1▸

08:12Claude Code, Kilo Code · 2 releases, 57 bug fixes

Claude Code

• Long sessions no longer stop at 200K tokens (2.1.311). Standard-context sessions now compact and continue, instead of stopping with “Usage credits required for 1M context”. Source
• ultrathink now runs at xhigh effort (2.1.311). Typed in the interactive terminal, it runs that turn at xhigh effort on Opus 5.5, Sonnet 5.5, Haiku 5.5 and Fable 5.1 through Anthropic’s API. Source
• Compaction asks for the summary again (2.1.311). When the model’s reply has no summary, Claude Code usually asks once more before it replaces the conversation. Source

Kilo Code

• ⚠️ Remote MCP servers that redirect no longer connect (v7.8.18). The MCP TypeScript SDK update fixes security issues, but a server whose URL redirects to another origin, or gets a 301, 302 or 303 redirect to a POST, now fails; use the server’s final URL. Source
• Hosted cloud sessions in the local Kilo API (v7.8.18). Editors can discover, read and interact with them without handling provider credentials. Source

Antigravity CLI · no updatesCodex CLI · no updatesOpenCode · no updates

08:11Claude Code · Antigravity CLI6 items · ⚠ 1▸

08:11Claude Code, Antigravity CLI · 2 releases, 21 bug fixes

Claude Code

• Lower memory use for -p and Agent SDK compaction (2.1.310). Non-interactive sessions use less memory when they compact a very large transcript, which helps long scripted runs. Source
• Clearer MCP timeout error in non-interactive runs (2.1.310). If an MCP server’s elicitation goes unanswered, Claude now gets a message saying no answer came and not to repeat the call. Source

Antigravity CLI

• ⚠️ Plugin MCP sign-ins may need a new login (1.4.7). Their OAuth tokens now belong to the signed-in user, so sign in to each plugin MCP server that uses OAuth again after you update to 1.4.7. Source
• Hooks get lastUserInput (1.4.7). Hook commands receive your latest message on stdin, so a hook can screen prompts before the agent acts on them. Source
• Auto mode asks less often (1.4.7). Routine commands such as cleaning up temporary files, stopping a local process or running a formatter need less approval. Source
• Lighter headless -p runs (1.4.7). They use much less CPU, and they no longer start your custom status line or window title commands. Source

Codex CLI · no updatesKilo Code · no updatesOpenCode · no updates

08:12Claude Code · Antigravity CLI · Codex CLI · Kilo Code14 items · ⚠ 5▸

08:12Claude Code, Antigravity CLI, Codex CLI, Kilo Code · 4 releases, 72 bug fixes

Claude Code

• ⚠️ claude ultrareview needs workspace trust (2.1.309). Scripts must pass --trust-workspace after any PR number or base branch, or set CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1, because without a terminal the command now refuses to run. Source
• ⚠️ sed -i edits are no longer undone by /rewind (2.1.309). They now run as normal Bash commands, so keep a git commit or a backup before using sed -i. Source
• Sandboxed commands can’t change the MCP config (2.1.309). Commands and auto-accepted edits can no longer modify the file passed with --mcp-config. Source

Antigravity CLI

• ⚠️ Sandbox hides ~/.docker, ~/.kube and ~/_netrc (1.4.6). Sandboxed commands that use Docker registry or Kubernetes cluster credentials now need an explicit grant, or they are blocked. Source
• Configure plugin MCP servers in /plugin (1.4.6). A new row sets or changes a plugin’s MCP server variables without disabling and re-enabling the plugin. Source
• Permission grants cover subagents (1.4.6). Allowing an action for the conversation now applies to the main agent and all its subagents, so you stop getting the same prompt. Source

Codex CLI

• ⚠️ Guardian v2 defaults to conversation mode (rust-v0.164.0). Its async classification now uses that mode by default, so its verdicts can differ from before; check them before you rely on them. Source
• Ten numbered /presets slots (rust-v0.164.0). Keep reusable prompts and slash commands in ten numbered slots. Source
• Inline arguments for /model and /permissions (rust-v0.164.0). Set the model, reasoning effort, speed or permission profile in the same command. Source

Kilo Code

• ⚠️ MCP prompts no longer run shell expressions (v7.8.16). Shell expressions in MCP prompts are now plain text, so any MCP prompt that relied on them will change output. Source
• Kilo Cloud provider (v7.8.16). A built-in provider lists, reads, starts and describes cloud-hosted sessions, backed by a new internal Session Host registry. Source
• Links limited to HTTP and HTTPS (v7.8.16). Browser links and MCP OAuth URLs must be HTTP or HTTPS, which also fixes URL handling on Windows and WSL. Source
• Stable v7.8.17 has no notes of its own (v7.8.17). It says “No notable changes”; the three items above come from pre-release v7.8.16, covered here. Source

Across tools

• Sandboxes and MCP servers are locked down. Claude Code stops sandboxed commands from editing the --mcp-config file, agy blocks ~/.docker, ~/.kube and ~/_netrc from sandboxed commands, and Kilo Code stops running shell expressions in MCP prompts. Sources: Claude Code, Antigravity CLI, Kilo Code

OpenCode · no updates

17:18Antigravity CLI · OpenCode3 items▸

17:18Antigravity CLI, OpenCode · 2 releases, 3 bug fixes

Antigravity CLI

• Lighter CPU and memory use (1.4.5). The idle CLI roughly halves its CPU use by pausing redraws when nothing changes, and long conversations render and load faster. Source
• Cron schedules spread out (1.4.5). Recurring schedules made with the agent’s schedule tool now fire at a set offset within their period instead of exactly on the cron boundary; daily 9:00 schedules still fire in their minute. Source

OpenCode

• Bun runtime upgraded (v1.19.4). The bundled Bun runtime moves to 1.4.4, which carries security fixes for Brotli, TLS, HTTP and WebSocket, and root certificates are updated to NSS 3.131.1. Source

Claude Code · no updatesCodex CLI · no updatesKilo Code · no updates

07:42Claude Code1 item▸

07:42Claude Code · 1 release, bug fixes (count not given)

Claude Code

• Bug fixes only (2.1.308). The notes list “bug fixes and reliability improvements”, no details. Source

Antigravity CLI · no updatesCodex CLI · no updatesKilo Code · no updatesOpenCode · no updates

05:23OpenCode2 items · ⚠ 1▸

05:23OpenCode · 3 releases, 5 bug fixes

OpenCode

• ⚠️ Session sharing discontinued (1.19.1). Existing share links stop working and share URLs can no longer be imported, so save anything you need from shared sessions first. Source
• Configurable reasoning variants (1.19.3). You can set model reasoning options to generate reasoning variants; this replaces the catalog variants but keeps your variant overrides. Source

Claude Code · no updatesAntigravity CLI · no updatesCodex CLI · no updatesKilo Code · no updates

01:50Claude Code · Antigravity CLI · Codex CLI · Cline · Kilo Code11 items · ⚠ 3▸

01:50Claude Code, Antigravity CLI, Codex CLI, Cline, Kilo Code · 22 releases, 456 bug fixes

Claude Code

• ⚠️ MCP allow rules now match only the exact server (2.1.299). A rule mcp__a no longer allows a server named a__b, so write mcp__<server>__* with the full server name or some tools will start asking for approval. Source
• ⚠️ Standalone Claude Design closes on December 14, 2026 (2.1.302). /design-sync and /design-login now show this notice, so plan to move any work you keep there. Source
• Idle compaction (2.1.299). A conversation over 200K tokens that sits idle for about 54 minutes is compacted before its prompt cache expires, so coming back after a break costs much less; turn it off with "idleCompaction": false. Source
• /auto-mode-setup (2.1.304). It reads your project and recent sessions to teach auto mode about your environment, which helps when auto mode blocks normal commands. Source

Antigravity CLI

• Auto mode (1.3.5). It approves edits and safe commands without asking, and a separate agent reviews commands that would leave the sandbox; pick it with --mode auto or Shift+Tab. Source
• agy plugin validate --strict --json (1.4.0). It now uses the same rules the CLI uses to load plugins, so you can run it in CI and fail on warnings. Source

Codex CLI

• Steer Codex mid-answer, plus a searchable /config (0.163.0). A follow-up sent while Codex is responding changes its direction right away, without waiting for the turn to end. Source

Cline

• ⚠️ OpenAI Compatible base URLs are used exactly as typed (v4.1.25). A new host-only URL like https://abc.com no longer gets /v1 added, so type it yourself if your server needs it. Source
• Cloud sessions (v4.1.25). Run a task in a hosted sandbox on a GitHub repo and branch you choose; it is rolling out gradually and is turned on in Settings. Source

Kilo Code

• New Agent Manager worktree dialog (v7.8.15). It adds a base-branch picker, so parallel agents in git worktrees start from the right branch. Source

Across tools

• More autonomy, with a reviewer in front. agy got Auto mode with a review agent, and Claude Code got a guided setup for its auto mode; Claude Code, agy and Cline also all added automatic retries for broken streams or tool calls. Sources: agy, Claude Code, Cline