Tags
No item matches the filter.
A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.
OpenClawverified
OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.
OpenClawverified
Python 3.15.0 came out on October 9, 2026. Files opened without an explicit encoding are now read and written as UTF-8 on every system, and a new lazy import statement defers loading a module until it is used. The release also adds frozendict and a sampling profiler.
Python Software Foundationverified
Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.
Claude Code Releases (GitHub)verified
OpenAI began rolling out GPT-6 with a feature called Intelligent UI to ChatGPT Plus, Pro, Business, and Enterprise on October 7, 2026, and extends it to the Free and Go tiers from October 8, 2026. Instead of a block of text, a response can now contain tappable buttons, forms, charts, and small interactive tools that the model composes while it writes. Paid tiers run on GPT-6 Sol and free tiers on GPT-6 Luna; the models behind Work and Codex do not change.
OpenAIverified
On October 7, 2026, GitHub made local sandboxing for Copilot generally available in the Copilot CLI, the GitHub Copilot app, and VS Code sessions that use Agent Host, at no extra cost. The sandbox limits what a command Copilot runs can read, write, and reach on the network, and it is off until you or your organization turn it on. The same day the CLI gained a picker for models served by a local Ollama instance, and Claude Haiku 5.5 joined the model list for paid plans.
GitHub Changelogverified
Vercel shipped Next.js 16.4 on October 6, 2026. Cache Components, the opt-in caching model built over the 16.x line, is now the recommended choice for every app and the default in new projects. The release adds a way to force a route to stay static, two APIs that keep content out of prefetches, an agent-driven upgrade command, React 19.3, and a smaller Turbopack cache.
Next.js Blogverified
Version 2.1.291, out on October 6, 2026, closes a regression that shipped in 2.1.288 on October 2, 2026 and could drop the last messages of a session when you quit. It also fixes a regression from 2.1.290, released on October 5, 2026, in cloud sessions. The day before, 2.1.290 had tightened several permission checks, including rules that were skipped after a hook rewrote a tool call. If you are on any version from 2.1.288 to 2.1.290, update.
Claude Code Releases (GitHub)verified
The llama.cpp project released version 0.6.0 on October 5, 2026. It adds support for GLM-5.3-Flash, a model for text and images with 320 billion parameters, and a new server endpoint for decision models. Two changes to speculative decoding come with measurements from their authors, one on Nvidia's DGX Spark and one on Apple GPUs. The release also changes the C API and raises the version of the saved session format, so programs built on the library need a check before you upgrade.
llama.cppverified
Anthropic released Claude Code 2.1.287 on October 1, 2026. The release adds Claude Mods, which let plugins modify deeper behavior, and a built-in mod in which a side agent flags things you might miss. Opus 4.7 and later and Fable now use a 1M context window by default on Bedrock, Vertex, Foundry, and the Claude apps gateway. Some MCP servers may stop connecting until you add one line to their configuration, and several shell writes that used to run now wait for approval.
Claude Codeverified
Anthropic released Claude Code 2.1.286 on September 30, 2026. Four fixes stop credentials from appearing in MCP error messages, logs, and transcripts that were supposed to be redacted. Plugin installs now refuse npm sources that are git repositories or folders, and Remote Control sessions disconnect when an organization's policy turns the feature off. The release also corrects a spend meter that priced some cache writes at the cheaper rate, and it changes what bare mode does.
Claude Codeverified
OpenClaw released version 2026.9.7 on September 30, 2026. It adds Sign in with ChatGPT as a login option next to Codex login and API keys, which OpenAI says lets Plus and Pro subscribers spend their plan allowance inside OpenClaw. A new plugin runs agents through the OpenAI Agents API. Updates now back up every database before migrating, admins can limit which models a role may use, and incognito sessions expire after 24 hours.
OpenClawverified
Anthropic released Claude Code 2.1.285 on September 29, 2026. A new managed setting, allowedProviders, limits which API providers a machine may use. Two fixes matter for teams: sessions that authenticate with an auth token never loaded the organization's policy, and redacted logs could show a URL password. The release also adds a switch that turns off WebFetch and a command that opens the desktop app.
Claude Codeverified
Anthropic released Claude Code 2.1.284 on September 28, 2026. The release closes a gap that let plugins from marketplaces, claude.ai, and npm pre-approve their own tools even when managed settings allowed only managed permission rules. It also validates a Foundry setting that went straight into a hostname, and adds Claude Sonnet 5.5.
Claude Codeverified
Anthropic released Claude Code 2.1.283 on September 25, 2026. Interactive sessions on third-party providers, or with telemetry off, now start in auto mode when no permission mode is configured. Administrators get two managed settings that decide which model versions a team may use.
Claude Codeverified
Anthropic released Claude Code 2.1.282 on September 24, 2026. Project and local settings files can no longer turn on OpenTelemetry export, set where it goes, or capture content. The release also closes several ways a repository's files could weaken settings an administrator manages.
Claude Codeverified
The llama.cpp project released version 0.5.0 on September 23, 2026. It adds support for HRM-Text, the architecture behind DFM Mimir 1B, and conversion for MiMo-V2.6. The server can now listen on several addresses at once, and router mode no longer passes the API key file to the model processes it starts.
llama.cppverified
OpenClaw 2026.9.6, released on September 23, 2026, changes three things that existing installations will feel. Code Mode now switches on by itself for recommended models, and its default Node executor runs with the Gateway's own operating system privileges. Code Mode also stops accepting TypeScript. The macOS app of this release can crash on every launch, so Mac users are told not to update yet.
OpenClawverified
Two Claude Code releases on September 22 and 23, 2026 close four gaps in how the tool decides what needs your approval. A write through a symlink could land outside the project, and a recursive delete aimed at a command substitution ran without a prompt in auto mode. A rule containing a NUL byte matched everything. One behavior change also reaches every user: the y and n keys no longer answer dialogs.
Claude Codeverified
Since September 23, 2026, the GitHub Copilot app can limit what a local agent session reaches on your machine: folders, network access, and Git and GitHub CLI credentials. The feature is in public preview and has to be switched on for each project. A day earlier the app gained OpenTelemetry export for administrators, and Copilot code review settings reached every plan.
GitHub Changelogverified
GitHub started rolling out Grok 4.7 in Copilot on September 21, 2026. The model is billed at provider list pricing under usage-based billing, and the documentation puts it at $2.00 per million input tokens and $6.00 per million output tokens below 200K of context, exactly what Grok 4.5 and 4.6 cost in the same table. It reaches Copilot Pro, Pro+, Max, Business and Enterprise, and the model picker in eight places, from Visual Studio Code to Eclipse. For a company on Business or Enterprise, a new model switches itself on unless an administrator has already turned the default off.
GitHubverified
Installing, reloading, updating, or removing a plugin no longer takes the whole installation offline. Session Share hands a chosen group of conversations to a teammate on another paired installation as text they can read but not continue. Updates now validate the next version against a private copy of the setup while the current Gateway keeps running. The conversation database changes in this release even with archiving switched off, so a verified backup before upgrading is the only way back.
OpenClawverified
In auto mode a classifier inspects shell commands and network requests before they run, and those checks were separate model requests charged as token usage. From this version Claude Code asks the server to perform them inside the session's own requests, and does not charge for them when the server answers. The default covers Enterprise plans, Claude API accounts, and the AWS, Bedrock, Agent Platform, and Foundry paths, subject to each platform's rollout. Where the server's checks cannot reach a session, the earlier billing returns and a one-time notice says so.
Claude Codeverified
Six models stop working across every Copilot surface on October 19, 2026, and each one has a named replacement. On Enterprise and Business the replacement enables itself unless an administrator has turned it off, so the remaining work sits in configuration that names a model in writing. Separately, Copilot code review reached general availability. Its overview comment now separates open findings from resolved ones and from issues it missed on an earlier pass, and every finding carries a title.
GitHub Changelogverified
Anthropic published the release on September 17, 2026. A plugin installed from npm is now fetched with packing that skips scripts and is integrity-verified, so the package's install scripts never execute. The same build stops printing a password or token that was stored in a git, ssh or marketplace address, and repairs a rewind that could restore a zero-filled or truncated file. A regression it introduced broke every request for anyone whose base URL points at a proxy or gateway, and 2.1.276 fixed that the next day.
Claude Code Releases (GitHub)verified
WebKit published the feature list on September 17, 2026, and it is the longest the team has written: 83 features, up from 58 at the first beta in June, and 844 quality fixes against the 525 announced at WWDC. The headline for anyone who builds with a coding agent is the Safari MCP server, which hands the agent the DOM, network requests, screenshots and console output from a real Safari window. Customizable Select turns the real select element into something you can fully restyle, and scroll anchoring stops the page from jumping when content loads in above what you are reading.
WebKit Blogverified
The preview build came out on September 11, 2026 and covers WebKit changes between 319252@main and 320112@main. Eleven features are new, and two of them extend the same job: how a stylesheet, and then a script, finds out what the engine underneath can do. The named-feature() function asks about a behavior that has no syntax of its own, and the registry behind it holds exactly two entries today. SVG also gained external resources, so the url() reference can finally point at a filter, mask or gradient stored in another document.
WebKitverified
OpenClaw published version 2026.9.4 on September 11, 2026. A failed update can now restore the previous package, but only where schema and configuration checks show the rollback is safe, and database migrations still require a verified backup taken before the upgrade. The same release adds prepared cloud workers that keep costing provider money until they are deleted, with a default reserve of one per project or profile and a ceiling of four across the Gateway. Plugins move into a single workspace, and a host can now lock configuration through an environment variable.
OpenClawverified
GitHub deprecated MAI-Code-1-Flash on September 10, 2026, and the changelog entry carries that same date for both the announcement and the retirement. The model is gone from Copilot Chat, inline edits, ask mode, agent mode, and code completions. GitHub names MAI-Code-1.1-Flash as the suggested alternative and asks teams to update anything that calls the old model by name. On Copilot Enterprise the alternative does not show up until an administrator enables it in the model policies.
GitHub Changelogverified
The release published on September 10, 2026 is mostly a permissions release. Deny and ask rules did not apply to symlinked directories when a path was spelled by its real location, and a deny rule on a file could be stepped over by putting an unparseable command on the same line. Two separate fixes stop secrets from being printed into plugin and MCP output. The same build also repairs third-party endpoints, which had been failing every turn with HTTP 400 since 2.1.265.
Claude Code Releases (GitHub)verified
The open personal assistant shipped 2026.9.2 on September 5, 2026, and two of its lines describe defaults rather than features. Swarm, which runs several sub-agents at once, is now on unless it is switched off, and session tools now show every session instead of only the calling agent's. The same release makes GPT-6 Astra selectable, applies most settings changes without restarting the Gateway, and moves plugin icons into the package. Plugin authors get a date: the deprecated prompt-context aliases become eligible for removal on or after September 8, 2026.
OpenClawverified
The release that landed on September 4, 2026 is mostly fixes, but four entries change behavior that was already there. The prompt's word-editing keys now match Bash, and the setting that used to select a keybinding style has no effect at all. Auto mode now treats a link that packs your content into a public diagram renderer's URL as an upload to that site, so it is no longer approved without you. Two new settings raise how much command output reaches the model inline, up to 128,000 characters.
Anthropicverified
The 0.4.0 release landed on September 4, 2026, and it is a numbered version rather than one of the nightly builds. It adds initial support for Qwen3.8-Flash-Next, NVIDIA Nemotron-3-Puzzle-75B-A9B, DSpark on Nemotron 3.5, and nanbeige4.2-3B. Apple RDMA becomes an RPC transport, video arrives as command-line options, and the quantizer gains a memory ceiling. Two server defaults changed, and saved session state carries a new version number.
llama.cppverified
The September release of the open personal assistant reworks the part that breaks machines. The update command now restores the previous npm candidate when the Doctor run that follows the upgrade fails, and it keeps configuration and secret references through that failure. The same release gives the SSRF policy an explicit list of hostnames to refuse, stops systemd unit backups from carrying Gateway tokens, and draws Mermaid blocks as diagrams inside the chat. One group has to act: anyone on 2026.8.2 without a service manager should run the update once with restarts disabled.
OpenClawverified
GitHub published its monthly roundup for Copilot in Visual Studio Code on August 31, 2026, covering releases 1.132 through 1.135. Most of the change is in the Agents window: chats line up side by side, one session opens from more than one window, and plugins written to the Agent Plugins 1.0 standard install outside VS Code as well. The response footer also starts reporting how many tokens each model spent in a turn.
GitHubverified
The August release of the agent runtime enables three behaviors on its own: recall of earlier private conversations, background memory consolidation, and automatic application of skills its own scanner has approved. It also removes the bundled OpenProse plugin and the /prose command, and moves model routes named codex over to openai. Plugin authors face an SDK import gate on September 1, 2026.
OpenClawverified
GitHub's August update for Copilot in Visual Studio 2026 lets organization and enterprise owners publish custom agents that every repository in the organization can use. Supported models now expose Low, Medium and High thinking effort, so reasoning depth becomes a choice rather than a default. The Git agent will review uncommitted changes before you open a pull request, on GitHub and Azure DevOps alike. All of it lands on every Copilot plan, including the free one.
GitHubverified
Twelve new CSS features and eleven JavaScript ones landed in the preview build on August 26. The one that changes how you write CSS is not the rounded-corner property everyone will notice, but at-rule() inside supports, which lets a stylesheet ask whether an at-rule exists before relying on it. Until now there was no way to do that. This is a preview build, so nothing here is shippable, and none of it moves Baseline.
WebKitverified
The stable release landed on August 25 with twenty-four entries. Thirteen of them are labeled SSR Agent — issue fixes written by automation and merged under one account, including two that touch how subagents behave.
Googleverified
