Coding Agents Digest
What changed in AI coding agents, selected and explained

← All snapshots

📊 Weekly snapshot · Oct 22 to Oct 29, 2026

Claude Code and Codex changed defaults this week, and Kilo Code’s zod security fix means updating its VS Code extension.

1. Defaults shift under you again

Codex turns memory v2 on for new profiles (rust-v0.165.0) and runs its Guardian classifier in conversation mode by default (rust-v0.164.0). Claude Code widens automatic model switches to custom model names (2.1.312).

So what: a setting that gave you one result last week may give another now, so check the new defaults before you rely on them.

2. Security fixes and tighter sandboxes

Kilo Code upgrades zod in its VS Code extension to fix a memory-exhaustion advisory (v7.8.20). OpenCode’s bundled Bun gets security fixes (v1.19.4), and Claude Code’s sandboxed commands can no longer change the --mcp-config file (2.1.309).

So what: update the tools that carry security fixes, and give sandboxed commands the explicit access they still need.

3. Compaction gets fixes in two tools

Antigravity CLI 1.4.10 stops subagents from losing their task after compaction (1.4.10). Kilo Code fixes early auto-compaction (v7.8.20) and gives large-session compaction more output space (v7.8.23).

So what: long sessions are less likely to stall or lose their task, so restarting them is needed less often.

Releases in these 7 days

Kilo Code 7 · Claude Code 6 · Antigravity CLI 6 · Codex CLI 2 · OpenCode 2

Action needed at the time

  • Zod memory-exhaustion fix (Kilo Code v7.8.20): update the VS Code extension to v7.8.20 or later.
  • claude ultrareview needs workspace trust (Claude Code 2.1.309): scripts pass --trust-workspace.
  • sed -i edits are no longer undone by /rewind (Claude Code 2.1.309): keep a git commit or backup first.
  • Sandbox hides ~/.docker, ~/.kube and ~/_netrc (Antigravity CLI 1.4.6): grant those commands access explicitly.
  • MCP prompts no longer run shell expressions (Kilo Code v7.8.16): rewrite those prompts without shell expressions.
  • Bundled Bun runtime gets security fixes (OpenCode v1.19.4): update to v1.19.4 or later.
  • Plugin MCP sign-ins may need a new login (Antigravity CLI 1.4.7): sign in to each OAuth server again.
  • Remote MCP servers that redirect no longer connect (Kilo Code v7.8.18): change each to its final URL.
  • Safety event no longer sent (Claude Code 2.1.312): change any alert that counts claude_code.safety_event.
  • Model switches cover custom model names (Claude Code 2.1.312): set CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK=1 to keep the old behavior.
  • Google apps need their own approval (Antigravity CLI 1.4.9): approve Gmail, Docs, Drive and Cloud Console one by one.

👀 Watch next: Update Kilo Code to v7.8.20 or later, and approve Gmail, Docs, Drive and Cloud Console one by one in Antigravity CLI 1.4.9 if you use them through the agent. Kilo Code v7.8.22 shipped without notes, so its changes are not yet known.