Releases Index

Coding Agents

AI pair programmers and autonomous coding agents — IDE-integrated assistants and cloud agents that read, edit, and ship code.

This week's digestOct 5 – 11, 2026

Agents get faster models, safer sandboxes, and a phone in the loop

OpenAI brought GPT-6.1 Sol Ultrafast to Codex as its new default, Anthropic hardened Claude Code's sandbox and shipped a cheaper Haiku default, and Cursor let developers steer their local agents from an iPhone.

Read the digest17 releases covered
Week of Oct 12in progress · digest Monday
MonOct 12, 20262 releases
CursorCognition
Daily summary

Devin gains cross-session memory with nightly dreaming

Devin now carries personal memory across sessions with a nightly review pass and org-level controls, while cutting its session resume window from 30 days to 14.

  • Devin remembers what it learns about you across sessions, with memory files reviewable and toggleable under Settings > Customization > Memory and a nightly "dreaming" pass refining them; memory is personal, not org-shared, and admins can enable, disable, or force it.
  • Devin's session resume window dropped to 14 days after sleep, down from 30.
  • Devin added font and font size settings, command palette shortcuts, real transcript diff cards for large edits, per-type notification switches, server-synced preferences, AGENTS.md loaded on repo setup, and non-expiring PR attachment links on Enterprise.

Origin marketplace launches; apps open to public submissions

Origin now integrates with over 20 apps for deployments, CI, code review, security, monitoring, and project management, from partners including Cloudflare, Linear, Sentry, and Socket Security. The marketplace is open to public submissions, with apps authenticating via app JWT and installation access tokens and writing back check runs, pull request comments, and reviews through the Origin API.

Details
Origin App Marketplace listing apps across deployments, CI, code review, security, monitoring, and project management
Devin

Devin gains persistent memory; session resume window now 14 days

Devin now remembers what it learns about you across sessions, with memory files reviewable and toggleable under Settings > Customization > Memory and a nightly review of recent sessions listed as recent dreaming sessions. Sessions can now be resumed for 14 days after going to sleep, down from 30. Plus a long tail of updates: font and font size settings, command palette shortcuts, real transcript diff cards for large edits, per-type notification switches, server-synced user preferences, AGENTS.md loaded on repo setup, and non-expiring PR attachment links on Enterprise.

Details
Week of Oct 518 releases
DigestAgents get faster models, safer sandboxes, and a phone in the loopRead →
SatOct 10, 20261 release
xAI
Grok Build

Shell commands stop on quit; worktree rm spares open sessions

v1.0.52

Shell commands no longer keep running after quitting grok or after grok receives a signal, and grok worktree rm and gc no longer delete worktrees that open sessions are using or directories grok did not create. Fixed a model switch reverting on restart, automatic compaction on context overflow errors and after repeated refills, and MCP replies with invalid characters timing out, plus smaller fixes across hooks, /model, and the terminal UI.

Details
FriOct 9, 20261 release
Anthropic
Daily summary

Claude Code fixes a file-corrupting edit bug and managed hook enforcement

Claude Code stopped Edit and NotebookEdit from mangling non-UTF-8 files and made blocking managed hooks actually refuse tool calls, alongside new subagent compaction and gateway policy controls.

  • Claude Code now refuses edits to files that aren't valid UTF-8 instead of silently replacing every non-ASCII character
  • Managed-settings PreToolUse and prompt hooks that block a tool call now refuse it and end the turn, as administrators expect
  • Subagents gained an autoCompactWindow so they can compact earlier than the main conversation, plus a workflow subagent model override
  • The Claude apps gateway accepts a code policy key, applying CLI settings inside Claude Desktop's Code tab
Claude Code

Managed hook denials end turn; non-UTF-8 edits refused

v2.1.296

Managed-settings PreToolUse and prompt hooks that block a tool call now refuse it and end the turn, and Edit and NotebookEdit no longer replace every non-ASCII character in files that are not valid UTF-8 — such edits are refused instead. Adds a code key to the Claude apps gateway's managed.policies[], autoCompactWindow for subagents, CLAUDE_CODE_WORKFLOW_SUBAGENT_MODEL, an allow_large option for the Read tool, plus a long list of fixes across MCP servers, plugins, self-hosted runners, cloud sessions, and Windows.

Details
ThuOct 8, 20264 releases
xAIOpenAIAnthropic
Daily summary

Claude Code hooks gain hard-block failure mode

Claude Code hooks can now fail closed with an onFailure block, gateway upstreams accept per-endpoint model allowlists, and instruction-style prompt and agent hooks no longer let blocked actions through.

  • Claude Code hooks can be set to block the action when they fail to start, time out, or exit unexpectedly, instead of silently letting it proceed.
  • Prompt and agent hooks written as instructions, such as "Block commands that...", now actually block what they describe, and Stop/SubagentStop prompt hooks judge completion more reliably.
  • Claude apps gateway upstreams accept an optional models list limiting which models are routed there, including during failover.
  • Fixed the context-1m beta rejection that broke all requests on [1m] models, remote MCP reconnect loops against servers that drop connections, and claude -p text output losing earlier responses when background work started a new turn.
Grok Build

/share removed from CLI; cancel/resend no longer reverts files

v1.0.51

The /share command and session sharing are removed from the CLI, and memory is now only an on or off switch. Cancel and edit-resend on long sessions no longer revert workspace files, and headless grok -p waits for background goals to finish and reports their outcome.

Details
Codex

TUI no longer crashes on multiline async questions; startup fix

v0.162.1

Fixed a TUI crash when asynchronous questions contain multiple lines, now preserving line breaks and complete hyperlink destinations. Startup failures caused by feature-setting differences between a running background server and CLI defaults are also fixed, with compatibility checks now applying only to explicit command-line feature overrides.

Details

Claude Code

2 updates

Command and HTTP hooks support onFailure: "block" so a hook that fails to start, times out, or exits unexpectedly blocks the action instead of allowing it, and Claude apps gateway upstreams now accept an optional models list that limits which models are sent there, including on failover. Also fixed context-1m beta rejection breaking all requests on [1m] models, remote MCP reconnects looping against servers that drop connections, and claude -p text output dropping earlier responses when background work started another turn.

Details

Fixed an issue where prompt and agent hooks written as instructions, such as "Block commands that...", allowed what they should block. Improved how prompt hooks on Stop and SubagentStop written as instructions are judged, so Claude is less likely to stop early.

Details
WedOct 7, 20264 releases
OpenAICognitionAnthropic
Daily summary

Claude Code defaults to a cheaper Haiku as Devin adds notifications

Claude Code made Claude Haiku 5.5 its default Haiku model with 1M context at lower per-token pricing and fixed a memory leak in HTTP MCP connections, while Devin shipped a notification inbox with a settings page for inbox and phone delivery.

  • Claude Code now defaults to Claude Haiku 5.5 on the Anthropic API, bringing 1M context at $0.10/$0.50 per Mtok and fixing a leak that retained every HTTP MCP request until close, plus work retraction after context compaction
  • Devin added a notification inbox with a sidebar bell and a Settings > Notifications page for choosing inbox and phone delivery, and now redacts saved secrets containing private keys line by line in command output

Codex

2 updates

Adds tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled, plus /copy for navigating and copying transcript blocks, Ctrl+Insert to copy selections, and tui.mouse_scroll_speed for mouse-wheel scrolling. Fixed Linux sandbox startup with multiple denied files and restored ordinary drive-letter file access on Windows 10.

Details

Ultrafast mode speeds up token generation with GPT-6.1 Sol in Codex and ChatGPT Work, available on Pro $500 and eligible Enterprise and Edu plans. Enterprise access is off by default and workspace owners must enable it; inference residency is supported in the United States and Europe (EEA + Switzerland).

Details
Devin

Notification inbox lands; private keys redacted line-by-line

Devin now has a notification inbox with a bell in the sidebar and a Settings > Notifications page for choosing inbox and phone delivery, the ⌘K palette mirrors sidebar pages and exposes pull request review actions, and saved secrets containing a private key are redacted line by line in command output. Other changes cover Microsoft Teams and Slack messaging, merge queue status, Devin Review permissions for custom roles, security profiles for Teams group chats, analytics corrections, and plugin row and Settings dialog styling.

Details
Claude Code

Haiku 5.5 default; MCP connection memory leak fixed

v2.1.293

Claude Haiku 5.5 (claude-haiku-5-5) is now the default Haiku model on the Anthropic API with 1M context and $0.10/$0.50 per Mtok. Fixed a memory leak where an HTTP MCP connection retained every request until it closed, along with fixes for work retraction after context compaction and lost messages when backgrounding sessions.

Details
TueOct 6, 20263 releases
OpenAIAnthropic
Daily summary

Claude Code closes sandbox escapes and adds plugin marketplace install

Claude Code patched multiple sandbox and permission bypasses — including sandboxed commands reading staged review uploads and a tampered settings cache disabling the policy plugin — while adding marketplace-sourced plugin installs and an effort parameter for sub-agents.

  • Claude Code closed several sandbox and permission bypasses: sandboxed commands could read staged /ultrareview upload copies, managed read-deny paths failed to drop project grants, network-path reads skipped the permission prompt, and a tampered settings cache could disable the policy plugin
  • Claude Code plugins can now be installed directly from a marketplace with claude plugin install --marketplace <source>, applying the same policy checks as adding a marketplace
  • The Agent tool gained an effort parameter so sub-agents run at a caller-specified effort level

Codex

2 updates

GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs, and Daybreak is now opt-in via --enable cli_daybreak or features.cli_daybreak=true, with controls, indicators, and /daybreak hidden and automatic Cyber routing omitted by default. Also added /mcp login <name> for signing in to MCP servers, per-turn Cyber access program selection via codex exec --cyber-access-program, and voice input/output device selection with locally saved preferences.

Details

Page previews now render inline in responses, and Codex task links can be opened directly on iOS. The approval picker is redesigned with clearer permission choices, plugins are reachable from a single Plugins entry in the composer's plus menu, and worktree support now matches the checkout used on desktop.

Details
Claude Code

Sandbox escapes patched; plugin install gets --marketplace

v2.1.292

Claude Code v2.1.292 adds a --marketplace <source> option to claude plugin install and an effort parameter for the Agent tool, plus an overloaded-request retry delay env var. It also closes several sandbox and permission bypasses, including sandboxed commands reading staged /ultrareview upload file copies, managed read-deny paths not dropping project grants, network-path reads skipping the permission prompt, and a tampered settings cache disabling the policy plugin.

Details
MonOct 5, 20265 releases
AnthropicCognitionxAICursor
Daily summary

Cognition ships Devin terminal and transcript fixes

Cognition's Devin gained an in-session Terminal tab with keyboard shortcuts and fixed long-session transcript flicker and Teams access enforcement, while Claude Code widened its mod hook API and patched proxy, image, and compaction failures.

  • Devin's session workspace now has a Terminal tab for running commands on Devin's machine, with opening Files or Terminal waking a sleeping session and the Settings keyboard shortcuts page available to all users.
  • Devin fixed transcript flicker and blanking when returning to a background tab, self-scrolling while reading older history, and skill content failing to load from an "Activated skill" entry.
  • Devin now enforces Microsoft Teams access settings for allowed channels, group chats, and direct messages, and gives Perforce snapshot builds up to 3 hours to sync instead of failing after 10 minutes.
  • Claude Code widened its mod and plugin hook API with richer turn-step results, subagent identification on tool checks, and organization approval ceilings, while also adding ThemeKey and Color typings for drawing.
  • Claude Code fixed requests failing behind proxies that reject beta headers, sessions with hundreds of images stuck on unprocessable-request errors, WebFetch dropping text past 100,000 characters, and compaction failures plus scheduled tasks vanishing on resume.

Claude Code

2 updates

Fixed a 2.1.290 regression where cloud sessions could drop answers to permission prompts, and a 2.1.288 regression where a session's final messages could be lost when quitting.

Details

Mod and plugin hooks gain richer context: serverToolUses in turn.step results, agentId on tool.check events, a ceiling on required approvals, and theme typing for drawing. The release also fixes requests failing behind proxies that reject beta headers, sessions with hundreds of images getting stuck on unprocessable-request errors, WebFetch silently dropping text past 100,000 characters, and compaction failures plus scheduled tasks vanishing on resume. Added claude attach and claude logs accepting partial session names, and a Deny button on the Claude apps gateway sign-in approval page.

Details
Devin

Terminal tab in session workspace; shortcuts out of beta

The session workspace gains a Terminal tab for running commands on Devin's machine, with Files and Terminal now waking a sleeping session, and the Settings keyboard shortcuts page is available to everyone. Also adds single code scan fetch via API and MCP, Bitbucket Data Center PR reviewer assignment, and Azure DevOps review summary threads posted as closed.

Details
Grok Build

Worktree rm blocks unsafe deletes; long sessions stay connected

v1.0.50

grok worktree rm without -f now refuses to delete worktrees that are in use or have unsaved changes and exits with an error, and long sessions stay connected when the conversation exceeds 4 MiB. The release also retries stalled model calls and Chat Completions streams that end without a finish reason, prevents concurrent settings edits from dropping config.toml entries, and adds a timestamps setting plus TSV/CSV/Markdown table export.

Details

Local agents now controllable from Cursor iOS app

Cursor's iOS app can now display and message local agents running on your computer, with computers pairing to the account automatically and agents continuing to run locally. Remote Control is on by default except for Enterprise organizations, where admins enable it under Org settings > Security and identity > Remote control.

Details
Remote Control for local agents in the Cursor iOS app