Skip to content
What are you looking for?. Open searchSR

Tags

configuration

20 items
RemoveMacAI's project card: the heading Turn Apple Intelligence off. Get 12 GB back., a line about one command for macOS 27 and one more to undo it, a toggle switch in the off position, and the install command in a terminal box.
Toolsmedium signal

An open source tool turns off Apple Intelligence on macOS 27 and deletes its models

RemoveMacAI is an open source command line tool that turns off Apple Intelligence on macOS 27, removes the downloaded models, and blocks macOS from downloading them again. Its author says macOS 27 no longer has a single switch for these features and keeps the models on disk after they are turned off. MacRumors puts the space freed at roughly 12 GB, depending on which models are installed. The first release came out on September 29, 2026, and four more followed by October 5, 2026.

RemoveMacAIverified

Anthropic's illustration for the mods announcement: a hand-drawn hand placing a white block onto a wall of outlined bricks, on an orange background.
Agentsstrong signal

Claude Code mods are not sandboxed, and version 2.1.289 fixes a deny rule they could override

Anthropic introduced mods for Claude Code on October 1, 2026. They are TypeScript functions, shipped inside plugins, that can rewrite prompts, change tool calls, and redraw parts of the interface. The documentation says mods are not sandboxed and run with your permissions, which covers your files, environment variables, and API keys. On Team and Enterprise plans a built-in mod named sec-default loads first and restricts the mods that users install. Versions 2.1.288 and 2.1.289 fix several cases where permission rules did not hold.

Anthropicverified

Left, the words Research preview and HydraFusion with the line Advanced runtime model orchestration in GitHub Copilot; right, a dark terminal model picker listing Auto, HydraFusion (Preview) highlighted in blue, GPT-5.6 Sol, GPT-5.6 Terra, Claude Opus 5, and Claude Sonnet 5.
Agentsmedium signal

GitHub Copilot's HydraFusion, which can run two models on one request, reaches VS Code and the Copilot app

HydraFusion sits in the model picker but is not a model. It chooses one of three workflows per request and can hand a task to two models in a row, one drafting and one checking. GitHub moved the research preview from Copilot CLI to Visual Studio Code and the Copilot app on September 30, 2026, for Pro, Pro+, Business, and Enterprise plans. Billing follows the tokens each model consumes, so a request can cost more or less than a single-model one.

GitHub Changelogverified

Toolsstrong signal

UpGuard found 16,326 Supabase databases whose tables anyone could read

Security firm UpGuard published a scan of about 300,000 websites that use Supabase on September 25, 2026. It found 16,326 databases that returned readable tables to an outside request, and over half showed signs of personal data. UpGuard ties the problem to apps built by AI coding agents, because tables created through the API do not get Row Level Security by default.

UpGuard Researchverified

Agentsmedium signal

Claude Code 2.1.282 stops repository settings from switching on telemetry export

Anthropic released Claude Code 2.1.282 on September 24, 2026. Project and local settings files can no longer turn on OpenTelemetry export, set where it goes, or capture content. The release also closes several ways a repository's files could weaken settings an administrator manages.

Claude Codeverified

Agentsmedium signal

OpenClaw 2026.9.6 turns on Code Mode by default, and its default executor is not a sandbox

OpenClaw 2026.9.6, released on September 23, 2026, changes three things that existing installations will feel. Code Mode now switches on by itself for recommended models, and its default Node executor runs with the Gateway's own operating system privileges. Code Mode also stops accepting TypeScript. The macOS app of this release can crash on every launch, so Mac users are told not to update yet.

OpenClawverified

Machines & local modelsmedium signal

llama.cpp stops handing the API key file to child servers in router mode

Build b11077, published on September 21, 2026, fixes an authentication bug in llama.cpp's router mode. When a server was started with both a key on the command line and a file of keys, the child instances it spawned validated against the file only, so a client using the command-line key could list models but got 401 on every chat request. The same change stops the key file path from reaching a child process at all. It is one line in one file, and it is the difference between a working deployment and one that looks healthy while refusing work.

llama.cppverified

Agentsmedium signal

OpenClaw 2026.9.4 can undo a failed update, and its ready cloud workers bill until deleted

OpenClaw published version 2026.9.4 on September 11, 2026. A failed update can now restore the previous package, but only where schema and configuration checks show the rollback is safe, and database migrations still require a verified backup taken before the upgrade. The same release adds prepared cloud workers that keep costing provider money until they are deleted, with a default reserve of one per project or profile and a ceiling of four across the Gateway. Plugins move into a single workspace, and a host can now lock configuration through an environment variable.

OpenClawverified

Agentsmedium signal

GitHub retired MAI-Code-1-Flash across Copilot the same day it announced the change

GitHub deprecated MAI-Code-1-Flash on September 10, 2026, and the changelog entry carries that same date for both the announcement and the retirement. The model is gone from Copilot Chat, inline edits, ask mode, agent mode, and code completions. GitHub names MAI-Code-1.1-Flash as the suggested alternative and asks teams to update anything that calls the old model by name. On Copilot Enterprise the alternative does not show up until an administrator enables it in the model policies.

GitHub Changelogverified

Agentsmedium signal

Claude Code 2.1.268 closes several ways a deny rule failed to apply

The release published on September 10, 2026 is mostly a permissions release. Deny and ask rules did not apply to symlinked directories when a path was spelled by its real location, and a deny rule on a file could be stepped over by putting an unparseable command on the same line. Two separate fixes stop secrets from being printed into plugin and MCP output. The same build also repairs third-party endpoints, which had been failing every turn with HTTP 400 since 2.1.265.

Claude Code Releases (GitHub)verified

Agentsmedium signal

OpenClaw 2026.9.2 turns Swarm on by default and makes sessions visible to other agents

The open personal assistant shipped 2026.9.2 on September 5, 2026, and two of its lines describe defaults rather than features. Swarm, which runs several sub-agents at once, is now on unless it is switched off, and session tools now show every session instead of only the calling agent's. The same release makes GPT-6 Astra selectable, applies most settings changes without restarting the Gateway, and moves plugin icons into the package. Plugin authors get a date: the deprecated prompt-context aliases become eligible for removal on or after September 8, 2026.

OpenClawverified

Agentsmedium signal

Claude Code 2.1.261 changes what Ctrl+W does and stops auto-approving diagram-renderer links

The release that landed on September 4, 2026 is mostly fixes, but four entries change behavior that was already there. The prompt's word-editing keys now match Bash, and the setting that used to select a keybinding style has no effect at all. Auto mode now treats a link that packs your content into a public diagram renderer's URL as an upload to that site, so it is no longer approved without you. Two new settings raise how much command output reaches the model inline, up to 128,000 characters.

Anthropicverified

Connectorsmedium signal

Amazon Bedrock adds a ServiceNow connector and scheduled syncs to its managed knowledge bases

AWS published three changes to Amazon Bedrock Managed Knowledge Base on September 4, 2026. ServiceNow becomes a native data source, so knowledge articles and service catalog items are crawled without a custom ingestion pipeline. SharePoint, OneDrive, and Confluence can now be connected by signing in with your own credentials instead of waiting for an IT-issued service account. Sync scheduling arrives for every native connector, at daily, weekly, or monthly intervals.

AWSverified

Agentsmedium signal

OpenClaw 2026.9.1 rolls back a failed update and adds a host blocklist to its SSRF policy

The September release of the open personal assistant reworks the part that breaks machines. The update command now restores the previous npm candidate when the Doctor run that follows the upgrade fails, and it keeps configuration and secret references through that failure. The same release gives the SSRF policy an explicit list of hostnames to refuse, stops systemd unit backups from carrying Gateway tokens, and draws Mermaid blocks as diagrams inside the chat. One group has to act: anyone on 2026.8.2 without a service manager should run the update once with restarts disabled.

OpenClawverified

Agentsmedium signal

Claude Code 2.1.260 fixes four ways a permission rule quietly failed to apply

The release published on September 3, 2026 is mostly about permission rules that were written correctly and then did not do what they said. A path containing parentheses could be dropped as invalid, leaving a folder marked read-only writable. One malformed pattern could break every file edit. A zsh command could hide a command substitution inside a variable assignment and be auto-approved. And a rule with stray text after the closing parenthesis matched nothing at all, silently. If you rely on deny rules, the interesting part of this release is not what Claude Code can now do but what your settings were not doing.

Anthropicverified

Agentsmedium signal

Claude Code 2.1.248 adds a restricted mode and stops leaking credential leftovers

One flag now strips the tools that run code, keeps file access inside the working directory, refuses bypassPermissions and ignores every settings file. The same release stops cloud reviews from uploading tfvars files and editor backups of private keys. Version 2.1.250 followed hours later with fixes only.

Anthropicverified

Agentsmedium signal

Copilot's global model policy starts enforcing on September 1, and the default is on

GitHub is rolling out enforcement of the default model policy for Copilot Business and Copilot Enterprise through September 1. Models an administrator never configured stop being unconfigured and start following the policy, and the policy ships enabled. Two categories are held back regardless of what you set: open-weight models, and models GitHub's data retention agreement does not cover. Anthropic's Fable 5 is in the second group.

GitHubverified

Toolsweak signal

A fresh install of llm broke because the OpenAI library stopped using httpx

Version 0.32.1 pins the OpenAI Python package below 3.0.0 so that new installations work again. Nothing in llm changed to cause the break: it imported httpx while relying on the OpenAI package to bring it along, and when that package dropped httpx the dependency simply stopped arriving. It is a small release with a lesson that outlives it.

Simon Willisonverified

Agentsweak signal

Claude Code 2.1.235 to 2.1.237: Concise style, ANTHROPIC_DEFAULT_MODEL, and spell checking

Three releases in three days change several things about daily work. Version 2.1.237 introduces a built-in Concise output style, in which Claude leads with the result and skips the preamble and the recap, and fixes prompt caching for sessions that go through a proxy gateway or a custom base URL. Version 2.1.236 adds the ANTHROPIC_DEFAULT_MODEL environment variable, which sets the model new sessions start on, and a notify_when_idle option that asks another session to report when it frees up. Version 2.1.235 introduces optional spell checking through aspell, hunspell, or ispell, and reduces memory and processor use for sessions running in the cloud.

Anthropicverified