{"collection":{"slug":"coding-agents","name":"Coding Agents"},"digest":{"id":"cwd_7zP35vWmhcKFLXXvwQbAT","weekStart":"2026-09-28","title":"Strong models land across the coding agents","intro":"OpenAI's GPT-6.1 Sol became the default engine for Codex, Claude Sonnet 5.5 arrived with a 1M context window, and Devin pushed deeper into Jira and cross-device workflows — while a heavy week of fixes hardened every agent's terminal and sandbox.","body":"### New default models\n\nThe week's biggest shift was under the hood of OpenAI's Codex. [GPT-6.1 Sol launched in Codex and ChatGPT Work](/release/rel_sbXKXc3E7MH6GpjHBODv8-openai-launches-gpt-6-1-sol-in-codex-and-chatgpt-work) as a near-Astra model aimed at complex, long-running work across code, apps, and documents at lower cost, and [it became the default in the bundled catalog](/release/rel_3UP_vWuX9Txr7ngHN4pj5-codex-0-159-1-makes-gpt-6-1-sol-the-default-model) — plus the Amazon Bedrock Mantle and Runtime catalogs. Anthropic's Claude Code countered with [Claude Sonnet 5.5 as its default Sonnet model](/release/rel_dFlUdlHA3Jp9L3NYGwFe5-claude-code-v2-1-284-adds-claude-sonnet-5-5-as-default-with-1m-context), bringing a 1M context window and $2/$10 per Mtok pricing, with the same release repairing damaged response streams and letting MCP tool calls in resumed sessions wait for a still-connecting server.\n\n### Devin moves into the tools around it\n\nDevin's week was about meeting developers where they already work. It is now [a native agent inside Jira](/release/rel_EmDE4MAvIj2nN-Bn_6vHd-devin-adds-native-jira-agent-and-preflight-automation-checks), starting sessions when a work item is assigned or mentioned, with automations able to run a preflight script after each trigger before the agent starts. That release also made messages sent right before a connection drop survive on the server, sent Devin Review findings on PRs back to the originating session for auto-fix, and introduced Devin Mono, a new monospace typeface for code blocks and terminals, alongside a read-only live shell preview. Separately, Devin made [view preferences follow you across browsers and devices](/release/rel_hn_ZsR3FFsFtugTqHQqct-devin-adds-cross-device-view-sync-keyboard-navigation-and-interactive-html) — search mode, changed-files tree layout, and sidebar filters now sync — and added Option+J/Option+K session navigation, child sessions that carry a parent summary, and pipeline log support for Bitbucket Data Center and Azure DevOps.\n\n### Tightening the sandboxes and the terminal\n\nClaude Code shipped six updates this week, and the throughline was safety. [Sandbox deny-rule bypasses got closed off](/release/rel_UKspMZUxksKClFgowMG9F-claude-code-v2-1-289-fixes-sandbox-deny-rule-bypasses-and-terminal-freezes) so a mod's approval can no longer override deny or ask rules on nested parts of compound commands, Bash deny rules hold under auto-allow even when a variable assignment precedes the command, and a terminal freeze on pathological code blocks is gone. An earlier update [caught a dangerous rm slipping through unpropmaned in a bash -c script](/release/rel_dEOcATIHEm-nbBq-BG64U-claude-code-v2-1-288-fixes-dangerous-rm-bypass-and-mcp-scope-re-auth) and prompted re-authentication when an MCP server requests more OAuth scope. Credential leaks were a theme too: [secret-redaction gaps closed across MCP errors, percent-encoded tokens, and URL passwords](/release/rel_d9oNOz4w1BR015bnEEoGi-claude-code-v2-1-286-fixes-session-resume-data-loss-and-credential-secret-leaks), while `--resume` and `--continue` no longer lose turns after a batch of parallel tool calls. Claude Code also [opened the desktop app straight from the CLI](/release/rel_0LVllLufVzHfuN8dZ6JZl-claude-code-2-1-285-adds-desktop-flag-and-provider-restrictions) with `--desktop`, added an `allowedProviders` managed setting, and [introduced Claude Mods with a \"You should know\" side agent](/release/rel_JELGDMA5AtQNi4YZ0EWTl-claude-code-v2-1-287-adds-claude-mods-and-you-should-know-side-agent-plugin) that watches for things you or Claude might miss.\n\nCodex's CLI churn was quieter but practical: [instant interrupt lets new input steer a response in progress](/release/rel_NZvD2WNoOH6pcJgIwLxT1-codex-cli-0-159-0-removes-prompt-suggestions-and-adds-instant-interrupt), with prompt suggestions removed and Windows console flashing suppressed for background processes. Terminal settings now persist correctly across sessions, and [queued messages resume after reconnection](/release/rel_jwk8gDAaKg1tNCUhjDva_-codex-cli-0-160-0-fixes-terminal-settings-persistence-and-windows-sandbox) without duplicate sends.\n\n### Smaller fixes, same direction\n\nGrok Build [let custom agents be chosen directly with spawn_subagent](/release/rel_5sODvQxMSojxP1UTt3J8J-grok-build-1-0-45-adds-custom-agent-selection-and-mcp-token-file-support) and added MCP token files that are re-read on every request so rotating credentials stay fresh. A follow-up made [permission rules with relative paths apply through symlinked working directories](/release/rel_V8DZEDWPDPQKCycOjbiWJ-grok-build-1-0-46-fixes-symlinked-permission-paths-and-video-card-playback) and fixed video cards getting stuck extracting posters without ffmpeg.","releaseIds":["rel_sbXKXc3E7MH6GpjHBODv8","rel_3UP_vWuX9Txr7ngHN4pj5","rel_dFlUdlHA3Jp9L3NYGwFe5","rel_EmDE4MAvIj2nN-Bn_6vHd","rel_hn_ZsR3FFsFtugTqHQqct","rel_UKspMZUxksKClFgowMG9F","rel_dEOcATIHEm-nbBq-BG64U","rel_d9oNOz4w1BR015bnEEoGi","rel_0LVllLufVzHfuN8dZ6JZl","rel_JELGDMA5AtQNi4YZ0EWTl","rel_NZvD2WNoOH6pcJgIwLxT1","rel_jwk8gDAaKg1tNCUhjDva_","rel_5sODvQxMSojxP1UTt3J8J","rel_V8DZEDWPDPQKCycOjbiWJ"],"releaseCount":16,"generatedAt":"2026-10-05T06:18:52.285Z","releases":[{"id":"rel_sbXKXc3E7MH6GpjHBODv8","title":"OpenAI launches GPT-6.1 Sol in Codex and ChatGPT Work","path":"/release/rel_sbXKXc3E7MH6GpjHBODv8-gpt-6-1-sol-lands-in-codex-and-chatgpt-work","url":"https://developers.openai.com/codex/changelog/#codex-2026-09-29-gpt-61-sol","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":5},{"id":"rel_3UP_vWuX9Txr7ngHN4pj5","title":"Codex 0.159.1 makes GPT-6.1 Sol the default model","path":"/release/rel_3UP_vWuX9Txr7ngHN4pj5-gpt-6-1-sol-now-the-default-model","url":"https://developers.openai.com/codex/changelog/#github-release-399499631","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":4},{"id":"rel_dFlUdlHA3Jp9L3NYGwFe5","title":"Claude Code v2.1.284 adds Claude Sonnet 5.5 as default with 1M context","path":"/release/rel_dFlUdlHA3Jp9L3NYGwFe5-sonnet-5-5-default-malformed-streams-no-longer-write-undefined","url":"https://code.claude.com/docs/en/changelog#2-1-284","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":4},{"id":"rel_EmDE4MAvIj2nN-Bn_6vHd","title":"Devin adds native Jira agent and preflight automation checks","path":"/release/rel_EmDE4MAvIj2nN-Bn_6vHd-devin-lands-in-jira-messages-survive-dropped-connections","url":"https://docs.devin.ai/release-notes/overview#september-30-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":4},{"id":"rel_hn_ZsR3FFsFtugTqHQqct","title":"Devin adds cross-device view sync, keyboard navigation, and interactive HTML reports","path":"/release/rel_hn_ZsR3FFsFtugTqHQqct-view-prefs-sync-across-devices-child-sessions-inherit-parent-context","url":"https://docs.devin.ai/release-notes/overview#september-25-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":4},{"id":"rel_UKspMZUxksKClFgowMG9F","title":"Claude Code v2.1.289 fixes sandbox deny-rule bypasses and terminal freezes","path":"/release/rel_UKspMZUxksKClFgowMG9F-sandbox-deny-rule-bypasses-closed-terminal-freezes-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-289","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_dEOcATIHEm-nbBq-BG64U","title":"Claude Code v2.1.288 fixes dangerous rm bypass and MCP scope re-auth","path":"/release/rel_dEOcATIHEm-nbBq-BG64U-dangerous-rm-no-longer-bypasses-prompts-mcp-oauth-re-auth-prompted","url":"https://code.claude.com/docs/en/changelog#2-1-288","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_d9oNOz4w1BR015bnEEoGi","title":"Claude Code v2.1.286 fixes session-resume data loss and credential secret leaks","path":"/release/rel_d9oNOz4w1BR015bnEEoGi-resume-no-longer-drops-turns-credential-leaks-in-logs-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-286","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_0LVllLufVzHfuN8dZ6JZl","title":"Claude Code 2.1.285 adds --desktop flag and provider restrictions","path":"/release/rel_0LVllLufVzHfuN8dZ6JZl-desktop-app-launching-allowedproviders-setting-added","url":"https://code.claude.com/docs/en/changelog#2-1-285","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_JELGDMA5AtQNi4YZ0EWTl","title":"Claude Code v2.1.287 adds Claude Mods and \"You should know\" side-agent plugin","path":"/release/rel_JELGDMA5AtQNi4YZ0EWTl-claude-mods-plugins-ship-mcp-url-prompts-may-break-servers","url":"https://code.claude.com/docs/en/changelog#2-1-287","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_NZvD2WNoOH6pcJgIwLxT1","title":"Codex CLI 0.159.0 removes prompt suggestions and adds instant interrupt","path":"/release/rel_NZvD2WNoOH6pcJgIwLxT1-prompt-suggestions-removed-instant-interrupt-steers-codex-mid-response","url":"https://developers.openai.com/codex/changelog/#github-release-398926954","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":4},{"id":"rel_jwk8gDAaKg1tNCUhjDva_","title":"Codex CLI 0.160.0 fixes terminal settings persistence and Windows sandbox","path":"/release/rel_jwk8gDAaKg1tNCUhjDva_-terminal-ui-keeps-provider-settings-windows-sandbox-fixed","url":"https://developers.openai.com/codex/changelog/#github-release-401312540","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":3},{"id":"rel_5sODvQxMSojxP1UTt3J8J","title":"Grok Build 1.0.45 adds custom agent selection and MCP token file support","path":"/release/rel_5sODvQxMSojxP1UTt3J8J-custom-agents-selectable-via-spawn-subagent-mcp-token-files-re-read-per-request","url":"https://x.ai/build/changelog#1-0-45","org":{"slug":"xai","name":"xAI","avatarUrl":"https://media.releases.sh/orgs/xai.png","githubHandle":"xai-org"},"product":{"slug":"grok-build","name":"Grok Build"},"importance":3},{"id":"rel_V8DZEDWPDPQKCycOjbiWJ","title":"Grok Build 1.0.46 fixes symlinked permission paths and video card playback","path":"/release/rel_V8DZEDWPDPQKCycOjbiWJ-permission-rules-apply-under-symlinks-video-cards-no-longer-stall","url":"https://x.ai/build/changelog#1-0-46","org":{"slug":"xai","name":"xAI","avatarUrl":"https://media.releases.sh/orgs/xai.png","githubHandle":"xai-org"},"product":{"slug":"grok-build","name":"Grok Build"},"importance":2}],"sections":[{"heading":"New default models","anchor":"new-default-models","lede":"The week's biggest shift was under the hood of OpenAI's Codex.","releaseIds":["rel_sbXKXc3E7MH6GpjHBODv8","rel_3UP_vWuX9Txr7ngHN4pj5","rel_dFlUdlHA3Jp9L3NYGwFe5"],"releases":[{"id":"rel_sbXKXc3E7MH6GpjHBODv8","title":"OpenAI launches GPT-6.1 Sol in Codex and ChatGPT Work","path":"/release/rel_sbXKXc3E7MH6GpjHBODv8-gpt-6-1-sol-lands-in-codex-and-chatgpt-work","url":"https://developers.openai.com/codex/changelog/#codex-2026-09-29-gpt-61-sol","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":5},{"id":"rel_3UP_vWuX9Txr7ngHN4pj5","title":"Codex 0.159.1 makes GPT-6.1 Sol the default model","path":"/release/rel_3UP_vWuX9Txr7ngHN4pj5-gpt-6-1-sol-now-the-default-model","url":"https://developers.openai.com/codex/changelog/#github-release-399499631","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":4},{"id":"rel_dFlUdlHA3Jp9L3NYGwFe5","title":"Claude Code v2.1.284 adds Claude Sonnet 5.5 as default with 1M context","path":"/release/rel_dFlUdlHA3Jp9L3NYGwFe5-sonnet-5-5-default-malformed-streams-no-longer-write-undefined","url":"https://code.claude.com/docs/en/changelog#2-1-284","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":4}]},{"heading":"Devin moves into the tools around it","anchor":"devin-moves-into-the-tools-around-it","lede":"Devin's week was about meeting developers where they already work.","releaseIds":["rel_EmDE4MAvIj2nN-Bn_6vHd","rel_hn_ZsR3FFsFtugTqHQqct"],"releases":[{"id":"rel_EmDE4MAvIj2nN-Bn_6vHd","title":"Devin adds native Jira agent and preflight automation checks","path":"/release/rel_EmDE4MAvIj2nN-Bn_6vHd-devin-lands-in-jira-messages-survive-dropped-connections","url":"https://docs.devin.ai/release-notes/overview#september-30-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":4},{"id":"rel_hn_ZsR3FFsFtugTqHQqct","title":"Devin adds cross-device view sync, keyboard navigation, and interactive HTML reports","path":"/release/rel_hn_ZsR3FFsFtugTqHQqct-view-prefs-sync-across-devices-child-sessions-inherit-parent-context","url":"https://docs.devin.ai/release-notes/overview#september-25-2026","org":{"slug":"cognition","name":"Cognition","avatarUrl":"https://media.releases.sh/orgs/cognition.png","githubHandle":"Cognition-ai"},"product":{"slug":"devin","name":"Devin"},"importance":4}]},{"heading":"Tightening the sandboxes and the terminal","anchor":"tightening-the-sandboxes-and-the-terminal","lede":"Claude Code shipped six updates this week, and the throughline was safety.","releaseIds":["rel_UKspMZUxksKClFgowMG9F","rel_dEOcATIHEm-nbBq-BG64U","rel_d9oNOz4w1BR015bnEEoGi","rel_0LVllLufVzHfuN8dZ6JZl","rel_JELGDMA5AtQNi4YZ0EWTl","rel_NZvD2WNoOH6pcJgIwLxT1","rel_jwk8gDAaKg1tNCUhjDva_"],"releases":[{"id":"rel_UKspMZUxksKClFgowMG9F","title":"Claude Code v2.1.289 fixes sandbox deny-rule bypasses and terminal freezes","path":"/release/rel_UKspMZUxksKClFgowMG9F-sandbox-deny-rule-bypasses-closed-terminal-freezes-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-289","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_dEOcATIHEm-nbBq-BG64U","title":"Claude Code v2.1.288 fixes dangerous rm bypass and MCP scope re-auth","path":"/release/rel_dEOcATIHEm-nbBq-BG64U-dangerous-rm-no-longer-bypasses-prompts-mcp-oauth-re-auth-prompted","url":"https://code.claude.com/docs/en/changelog#2-1-288","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_d9oNOz4w1BR015bnEEoGi","title":"Claude Code v2.1.286 fixes session-resume data loss and credential secret leaks","path":"/release/rel_d9oNOz4w1BR015bnEEoGi-resume-no-longer-drops-turns-credential-leaks-in-logs-fixed","url":"https://code.claude.com/docs/en/changelog#2-1-286","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_0LVllLufVzHfuN8dZ6JZl","title":"Claude Code 2.1.285 adds --desktop flag and provider restrictions","path":"/release/rel_0LVllLufVzHfuN8dZ6JZl-desktop-app-launching-allowedproviders-setting-added","url":"https://code.claude.com/docs/en/changelog#2-1-285","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_JELGDMA5AtQNi4YZ0EWTl","title":"Claude Code v2.1.287 adds Claude Mods and \"You should know\" side-agent plugin","path":"/release/rel_JELGDMA5AtQNi4YZ0EWTl-claude-mods-plugins-ship-mcp-url-prompts-may-break-servers","url":"https://code.claude.com/docs/en/changelog#2-1-287","org":{"slug":"anthropic","name":"Anthropic","avatarUrl":"https://media.releases.sh/orgs/anthropic.png","githubHandle":"anthropics"},"product":{"slug":"claude-code","name":"Claude Code"},"importance":3},{"id":"rel_NZvD2WNoOH6pcJgIwLxT1","title":"Codex CLI 0.159.0 removes prompt suggestions and adds instant interrupt","path":"/release/rel_NZvD2WNoOH6pcJgIwLxT1-prompt-suggestions-removed-instant-interrupt-steers-codex-mid-response","url":"https://developers.openai.com/codex/changelog/#github-release-398926954","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":4},{"id":"rel_jwk8gDAaKg1tNCUhjDva_","title":"Codex CLI 0.160.0 fixes terminal settings persistence and Windows sandbox","path":"/release/rel_jwk8gDAaKg1tNCUhjDva_-terminal-ui-keeps-provider-settings-windows-sandbox-fixed","url":"https://developers.openai.com/codex/changelog/#github-release-401312540","org":{"slug":"openai","name":"OpenAI","avatarUrl":"https://media.releases.sh/orgs/openai.png","githubHandle":"openai"},"product":{"slug":"codex","name":"Codex"},"importance":3}]},{"heading":"Smaller fixes, same direction","anchor":"smaller-fixes-same-direction","lede":"Grok Build let custom agents be chosen directly with spawn_subagent and added MCP token files that are re-read on every request so rotating credentials stay fresh.","releaseIds":["rel_5sODvQxMSojxP1UTt3J8J","rel_V8DZEDWPDPQKCycOjbiWJ"],"releases":[{"id":"rel_5sODvQxMSojxP1UTt3J8J","title":"Grok Build 1.0.45 adds custom agent selection and MCP token file support","path":"/release/rel_5sODvQxMSojxP1UTt3J8J-custom-agents-selectable-via-spawn-subagent-mcp-token-files-re-read-per-request","url":"https://x.ai/build/changelog#1-0-45","org":{"slug":"xai","name":"xAI","avatarUrl":"https://media.releases.sh/orgs/xai.png","githubHandle":"xai-org"},"product":{"slug":"grok-build","name":"Grok Build"},"importance":3},{"id":"rel_V8DZEDWPDPQKCycOjbiWJ","title":"Grok Build 1.0.46 fixes symlinked permission paths and video card playback","path":"/release/rel_V8DZEDWPDPQKCycOjbiWJ-permission-rules-apply-under-symlinks-video-cards-no-longer-stall","url":"https://x.ai/build/changelog#1-0-46","org":{"slug":"xai","name":"xAI","avatarUrl":"https://media.releases.sh/orgs/xai.png","githubHandle":"xai-org"},"product":{"slug":"grok-build","name":"Grok Build"},"importance":2}]}]}}