Coding Agents Digest

📊 Weekly snapshot · Oct 22 to Oct 29, 2026 · Claude Code and Codex changed defaults this week, and Kilo Code's zod security fix means updating its VS Code extension.

2026-10-29T08:11:00+03:00

Claude Code and Codex changed defaults this week, and Kilo Code’s zod security fix means updating its VS Code extension.

1. Defaults shift under you again

Codex turns memory v2 on for new profiles (rust-v0.165.0) and runs its Guardian classifier in conversation mode by default (rust-v0.164.0). Claude Code widens automatic model switches to custom model names (2.1.312).

So what: a setting that gave you one result last week may give another now, so check the new defaults before you rely on them.

2. Security fixes and tighter sandboxes

Kilo Code upgrades zod in its VS Code extension to fix a memory-exhaustion advisory (v7.8.20). OpenCode’s bundled Bun gets security fixes (v1.19.4), and Claude Code’s sandboxed commands can no longer change the --mcp-config file (2.1.309).

So what: update the tools that carry security fixes, and give sandboxed commands the explicit access they still need.

3. Compaction gets fixes in two tools

Antigravity CLI 1.4.10 stops subagents from losing their task after compaction (1.4.10). Kilo Code fixes early auto-compaction (v7.8.20) and gives large-session compaction more output space (v7.8.23).

So what: long sessions are less likely to stall or lose their task, so restarting them is needed less often.

Releases in these 7 days

Kilo Code 7 · Claude Code 6 · Antigravity CLI 6 · Codex CLI 2 · OpenCode 2

Action needed at the time

Zod memory-exhaustion fix (Kilo Code v7.8.20): update the VS Code extension to v7.8.20 or later.
claude ultrareview needs workspace trust (Claude Code 2.1.309): scripts pass --trust-workspace.
sed -i edits are no longer undone by /rewind (Claude Code 2.1.309): keep a git commit or backup first.
Sandbox hides ~/.docker, ~/.kube and ~/_netrc (Antigravity CLI 1.4.6): grant those commands access explicitly.
MCP prompts no longer run shell expressions (Kilo Code v7.8.16): rewrite those prompts without shell expressions.
Bundled Bun runtime gets security fixes (OpenCode v1.19.4): update to v1.19.4 or later.
Plugin MCP sign-ins may need a new login (Antigravity CLI 1.4.7): sign in to each OAuth server again.
Remote MCP servers that redirect no longer connect (Kilo Code v7.8.18): change each to its final URL.
Safety event no longer sent (Claude Code 2.1.312): change any alert that counts claude_code.safety_event.
Model switches cover custom model names (Claude Code 2.1.312): set CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK=1 to keep the old behavior.
Google apps need their own approval (Antigravity CLI 1.4.9): approve Gmail, Docs, Drive and Cloud Console one by one.

👀 Watch next: Update Kilo Code to v7.8.20 or later, and approve Gmail, Docs, Drive and Cloud Console one by one in Antigravity CLI 1.4.9 if you use them through the agent. Kilo Code v7.8.22 shipped without notes, so its changes are not yet known.

Read on the website →

Oct 29, 2026, 08:11 · Antigravity CLI 1.4.10 and five Kilo Code releases shipped; Kilo's zod fix is a security update, so update its VS Code extension.

2026-10-29T08:11:00+03:00

Antigravity CLI, Kilo Code · 6 releases, 9 bug fixes

Antigravity CLI

Lighter streaming (1.4.10). Agent replies write about 70% fewer bytes to the terminal, which keeps output smooth over slow SSH connections. Source
Large images no longer rejected (1.4.10). Images are capped at 2000 pixels per side and large PNGs are sent as JPEGs, so conversations with many screenshots stop failing on the request size limit. Source
Less memory after startup (1.4.10). About 100 MB left over from startup goes back to the operating system 15 seconds after the interactive UI opens; print and headless modes are unaffected. Source

Kilo Code

⚠️ Zod memory-exhaustion fix (v7.8.20). The VS Code extension now uses a patched zod that fixes a memory-exhaustion advisory; update to v7.8.20 or later. Source
Base branch choice (v7.8.20). Agents can choose the base branch when they start an Agent Manager worktree session. Source
Hosted workspaces in the local API (v7.8.21). The local session-host API can now create, list, read and delete hosted workspaces and start sessions in them. Source
Bug fixes (v7.8.20, v7.8.23, v7.8.25). Six fixes cover compaction, background job exit codes, scheduled tasks run by several processes and the npm user-agent; v7.8.22 has no notes of its own. v7.8.20, v7.8.22, v7.8.23, v7.8.25

Across tools

Compaction fixes in two tools. Antigravity CLI 1.4.10 stops subagents from losing their task after compaction, and Kilo Code fixes early auto-compaction (v7.8.20) and gives large-session compaction more output space (v7.8.23). Sources: Antigravity CLI, Kilo Code

Read on the website →

Oct 28, 2026, 22:12 · Antigravity CLI 1.4.9 adds image paste and splits Google app approvals; other tools had no new stable release.

2026-10-28T22:12:00+03:00

Antigravity CLI · 1 release, 8 bug fixes

Antigravity CLI

⚠️ Google apps need their own approval (1.4.9). Approving a Google site such as www.google.com no longer also allows Gmail, Docs, Drive or Cloud Console, so approve each app you need separately. Source
Paste images into the prompt (1.4.9). Paste an image with your terminal’s paste key, such as Cmd+V, or drag image files into the prompt to attach them; this also works over SSH with X11 or Wayland forwarding. Source
Stricter plugin name check (1.4.9). agy plugin validate warns when a plugin name is not lowercase kebab-case, suggests a valid name, and fails under --strict. Source

Read on the website →

Oct 28, 2026, 08:11 · Claude Code 2.1.312 stops sending a safety OpenTelemetry event and changes model switching; Codex 0.165.0 turns memory v2 on for new profiles.

2026-10-28T08:11:00+03:00

Claude Code, Codex CLI, OpenCode · 3 releases, 28 bug fixes

Claude Code

⚠️ Safety event no longer sent (2.1.312). Claude Code stops sending the claude_code.safety_event OpenTelemetry event, so change any alert or dashboard that counts it. Source
⚠️ Model switches cover custom model names (2.1.312). After a flagged message, Claude Code can now switch models for unrecognized names such as custom deployment names; set CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK=1 to keep the old behavior. Source
Click to send in fullscreen (2.1.312). Clicking the “to send now” hint under a queued message sends it right away, as its key does. Source

Codex CLI

Memory v2 on for new profiles (rust-v0.165.0). Fresh profiles start with memory v2, which can import memories from other agents, so review what it keeps if that matters to you. Source
Built-in Vertex AI provider (rust-v0.165.0). Set model_provider = "gcp" to use Google Cloud Vertex AI. Source

OpenCode

No user-facing changes (v1.19.5). The one listed change is a CI fix: the v1 release job uses GITHUB_TOKEN instead of the OpenCode app token. Source

Across tools

Defaults change again. Codex turns memory v2 on for new profiles, and Claude Code widens automatic model switches to custom model names, so both change behavior without a new command. Sources: Codex CLI, Claude Code

Read on the website →

Oct 27, 2026, 22:12 · Antigravity CLI 1.4.8 speeds up /diff and cleans up subagents on delete; Codex and Kilo Code could not be read.

2026-10-27T22:12:00+03:00

Antigravity CLI · 1 release, 6 bug fixes

Antigravity CLI

Faster /diff (1.4.8). It opens sooner in large repositories and long conversations, and [ and ] jump between turns in the Per Turn tab. Source
Auto mode asks you less often (1.4.8). Its review of commands that would leave the sandbox gets more time overall, and any single slow check now stops after 10 seconds. Source
Deleting a conversation cleans up its subagents (1.4.8). Running subagents are stopped, and their saved history and shared or branched workspaces are removed with it. Source

Codex CLI

Not checked (source could not be read).

Kilo Code

Not checked (source could not be read).

Read on the website →

Oct 27, 2026, 08:12 · Claude Code 2.1.311 and Kilo Code 7.8.18 shipped; Kilo's MCP update needs one URL check.

2026-10-27T08:12:00+03:00

Claude Code, Kilo Code · 2 releases, 57 bug fixes

Claude Code

Long sessions no longer stop at 200K tokens (2.1.311). Standard-context sessions now compact and continue, instead of stopping with “Usage credits required for 1M context”. Source
ultrathink now runs at xhigh effort (2.1.311). Typed in the interactive terminal, it runs that turn at xhigh effort on Opus 5.5, Sonnet 5.5, Haiku 5.5 and Fable 5.1 through Anthropic’s API. Source
Compaction asks for the summary again (2.1.311). When the model’s reply has no summary, Claude Code usually asks once more before it replaces the conversation. Source

Kilo Code

⚠️ Remote MCP servers that redirect no longer connect (v7.8.18). The MCP TypeScript SDK update fixes security issues, but a server whose URL redirects to another origin, or gets a 301, 302 or 303 redirect to a POST, now fails; use the server’s final URL. Source
Hosted cloud sessions in the local Kilo API (v7.8.18). Editors can discover, read and interact with them without handling provider credentials. Source

Read on the website →

Oct 24, 2026, 08:11 · Claude Code 2.1.310 and Antigravity CLI 1.4.7 shipped; one ⚠️: plugin MCP servers that use OAuth may need a new sign-in.

2026-10-24T08:11:00+03:00

Claude Code, Antigravity CLI · 2 releases, 21 bug fixes

Claude Code

Lower memory use for -p and Agent SDK compaction (2.1.310). Non-interactive sessions use less memory when they compact a very large transcript, which helps long scripted runs. Source
Clearer MCP timeout error in non-interactive runs (2.1.310). If an MCP server’s elicitation goes unanswered, Claude now gets a message saying no answer came and not to repeat the call. Source

Antigravity CLI

⚠️ Plugin MCP sign-ins may need a new login (1.4.7). Their OAuth tokens now belong to the signed-in user, so sign in to each plugin MCP server that uses OAuth again after you update to 1.4.7. Source
Hooks get lastUserInput (1.4.7). Hook commands receive your latest message on stdin, so a hook can screen prompts before the agent acts on them. Source
Auto mode asks less often (1.4.7). Routine commands such as cleaning up temporary files, stopping a local process or running a formatter need less approval. Source
Lighter headless -p runs (1.4.7). They use much less CPU, and they no longer start your custom status line or window title commands. Source

Read on the website →

Oct 23, 2026, 08:12 · Codex 0.164.0 adds /presets; Claude Code 2.1.309 and agy 1.4.6 change sandbox and rewind behavior.

2026-10-23T08:12:00+03:00

Claude Code, Antigravity CLI, Codex CLI, Kilo Code · 4 releases, 72 bug fixes

Claude Code

⚠️ claude ultrareview needs workspace trust (2.1.309). Scripts must pass --trust-workspace after any PR number or base branch, or set CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1, because without a terminal the command now refuses to run. Source
⚠️ sed -i edits are no longer undone by /rewind (2.1.309). They now run as normal Bash commands, so keep a git commit or a backup before using sed -i. Source
Sandboxed commands can’t change the MCP config (2.1.309). Commands and auto-accepted edits can no longer modify the file passed with --mcp-config. Source

Antigravity CLI

⚠️ Sandbox hides ~/.docker, ~/.kube and ~/_netrc (1.4.6). Sandboxed commands that use Docker registry or Kubernetes cluster credentials now need an explicit grant, or they are blocked. Source
Configure plugin MCP servers in /plugin (1.4.6). A new row sets or changes a plugin’s MCP server variables without disabling and re-enabling the plugin. Source
Permission grants cover subagents (1.4.6). Allowing an action for the conversation now applies to the main agent and all its subagents, so you stop getting the same prompt. Source

Codex CLI

⚠️ Guardian v2 defaults to conversation mode (rust-v0.164.0). Its async classification now uses that mode by default, so its verdicts can differ from before; check them before you rely on them. Source
Ten numbered /presets slots (rust-v0.164.0). Keep reusable prompts and slash commands in ten numbered slots. Source
Inline arguments for /model and /permissions (rust-v0.164.0). Set the model, reasoning effort, speed or permission profile in the same command. Source

Kilo Code

⚠️ MCP prompts no longer run shell expressions (v7.8.16). Shell expressions in MCP prompts are now plain text, so any MCP prompt that relied on them will change output. Source
Kilo Cloud provider (v7.8.16). A built-in provider lists, reads, starts and describes cloud-hosted sessions, backed by a new internal Session Host registry. Source
Links limited to HTTP and HTTPS (v7.8.16). Browser links and MCP OAuth URLs must be HTTP or HTTPS, which also fixes URL handling on Windows and WSL. Source
Stable v7.8.17 has no notes of its own (v7.8.17). It says “No notable changes”; the three items above come from pre-release v7.8.16, covered here. Source

Across tools

Sandboxes and MCP servers are locked down. Claude Code stops sandboxed commands from editing the --mcp-config file, agy blocks ~/.docker, ~/.kube and ~/_netrc from sandboxed commands, and Kilo Code stops running shell expressions in MCP prompts. Sources: Claude Code, Antigravity CLI, Kilo Code

Read on the website →

Oct 22, 2026, 17:18 · Antigravity CLI 1.4.5 cuts idle CPU use; OpenCode 1.19.4 upgrades its Bun runtime. Nothing needs action.

2026-10-22T17:18:00+03:00

Antigravity CLI, OpenCode · 2 releases, 3 bug fixes

Antigravity CLI

Lighter CPU and memory use (1.4.5). The idle CLI roughly halves its CPU use by pausing redraws when nothing changes, and long conversations render and load faster. Source
Cron schedules spread out (1.4.5). Recurring schedules made with the agent’s schedule tool now fire at a set offset within their period instead of exactly on the cron boundary; daily 9:00 schedules still fire in their minute. Source

OpenCode

Bun runtime upgraded (v1.19.4). The bundled Bun runtime moves to 1.4.4, which carries security fixes for Brotli, TLS, HTTP and WebSocket, and root certificates are updated to NSS 3.131.1. Source

Read on the website →

📊 Weekly snapshot · Oct 15 to Oct 22, 2026 · The agents got more autonomous and more careful, and their plugin systems got stricter.

2026-10-22T07:42:00+03:00

The agents got more autonomous and more careful, and their plugin systems got stricter.

1. Autonomy, with a guard in front

agy extended Auto mode, where a review agent checks risky commands, to subagents (1.4.3) and Windows (1.4.4); Claude Code added /auto-mode-setup (2.1.304).

So what: “approve every command” is ending; how good the safety check is becomes the real difference.

2. Plugins are checked before they load

agy plugin validate now uses the loader’s own rules, with --strict and --json for CI (1.4.0), and it warns about Claude Code-style hook keys (1.4.3).

So what: if you write plugins for more than one agent, test them in each one’s validator.

3. Long sessions got cheaper

Claude Code made idle compaction a /config switch (2.1.302); agy cut CPU and memory use while streaming (1.4.4).

So what: leaving an agent session open all day is becoming normal.

Releases in these 7 days

Claude Code 8 · Antigravity CLI 6 · OpenCode 3 · Kilo Code 2 · Codex CLI 1

Action needed at the time

Standalone Claude Design closes on Dec 14, 2026 (Claude Code 2.1.302): move the work you want to keep.
Session sharing removed (OpenCode 1.19.1): old share links already stopped working.

👀 Watch next: OpenCode 2 is opt-in for now; the day a v2 release becomes “Latest” will be big news. Codex has shipped about 10 alphas since its last stable.

Read on the website →

Oct 22, 2026, 07:42 · Claude Code 2.1.308 ships only bug fixes and reliability work; nothing needs action.

2026-10-22T07:42:00+03:00

Claude Code · 1 release, bug fixes (count not given)

Claude Code

Bug fixes only (2.1.308). The notes list “bug fixes and reliability improvements”, no details. Source

Read on the website →

Oct 22, 2026, 05:23 · OpenCode discontinues session sharing (1.19.1); 1.19.3 adds configurable reasoning variants.

2026-10-22T05:23:00+03:00

OpenCode · 3 releases, 5 bug fixes

OpenCode

⚠️ Session sharing discontinued (1.19.1). Existing share links stop working and share URLs can no longer be imported, so save anything you need from shared sessions first. Source
Configurable reasoning variants (1.19.3). You can set model reasoning options to generate reasoning variants; this replaces the catalog variants but keeps your variant overrides. Source

Read on the website →

Oct 22, 2026, 01:50 · Auto mode lands in agy, Claude Code narrows MCP permission rules, Cline starts Cloud sessions.

2026-10-22T01:50:00+03:00

Claude Code, Antigravity CLI, Codex CLI, Cline, Kilo Code · 22 releases, 456 bug fixes

Claude Code

⚠️ MCP allow rules now match only the exact server (2.1.299). A rule mcp__a no longer allows a server named a__b, so write mcp__<server>__* with the full server name or some tools will start asking for approval. Source
⚠️ Standalone Claude Design closes on December 14, 2026 (2.1.302). /design-sync and /design-login now show this notice, so plan to move any work you keep there. Source
Idle compaction (2.1.299). A conversation over 200K tokens that sits idle for about 54 minutes is compacted before its prompt cache expires, so coming back after a break costs much less; turn it off with "idleCompaction": false. Source
/auto-mode-setup (2.1.304). It reads your project and recent sessions to teach auto mode about your environment, which helps when auto mode blocks normal commands. Source

Antigravity CLI

Auto mode (1.3.5). It approves edits and safe commands without asking, and a separate agent reviews commands that would leave the sandbox; pick it with --mode auto or Shift+Tab. Source
agy plugin validate --strict --json (1.4.0). It now uses the same rules the CLI uses to load plugins, so you can run it in CI and fail on warnings. Source

Codex CLI

Steer Codex mid-answer, plus a searchable /config (0.163.0). A follow-up sent while Codex is responding changes its direction right away, without waiting for the turn to end. Source

Cline

⚠️ OpenAI Compatible base URLs are used exactly as typed (v4.1.25). A new host-only URL like https://abc.com no longer gets /v1 added, so type it yourself if your server needs it. Source
Cloud sessions (v4.1.25). Run a task in a hosted sandbox on a GitHub repo and branch you choose; it is rolling out gradually and is turned on in Settings. Source

Kilo Code

New Agent Manager worktree dialog (v7.8.15). It adds a base-branch picker, so parallel agents in git worktrees start from the right branch. Source

Across tools

More autonomy, with a reviewer in front. agy got Auto mode with a review agent, and Claude Code got a guided setup for its auto mode; Claude Code, agy and Cline also all added automatic retries for broken streams or tool calls. Sources: agy, Claude Code, Cline

Read on the website →