The daily firehose — everything the toolchain shipped today, already filtered.
// HOW THIS ISSUE IS MADE
We read every release from the 174 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
Autonomous coding agent as an SDK, IDE extension, or CLI assistant.
Cline v4.1.2 surfaces the active extension variant ('Legacy' or 'Next') in the settings About page.
└──▷ GET THIS VERSION
$ git clone --branch v4.1.2 https://github.com/cline/cline.git
# already have the repo? check out this version:$ git checkout v4.1.2
›Displays which extension variant is active — 'Legacy' or 'Next' — next to the version number in the settings About page for both bundles of the combined A/B rollout package.
Browse, resume, or delete past sessions without leaving the active terminal session.
$ cline history
›The per-server timeout field in cline_mcp_settings.json is now honored for initialize, tools/list, and tools/call operations, replacing the hardcoded 5-second limit for slow MCP servers.
›cline history now opens inside the existing TUI with resume and delete actions, rather than spawning a second view in the same process.
›cline --help now reports the real default values for --config and --data-dir paths.
›Connector threads (Slack, Discord, Telegram, Linear, Google Chat, WhatsApp) now self-heal when their bound session is gone — the stale binding is dropped and the turn replays against a new session, eliminating manual edits to threads.json.
›Plugins can now emit telemetry through ctx.telemetry.
+1 moreshow less
›OpenRouter now defaults to anthropic/claude-sonnet-5.
›Adds per-server timeout in cline_mcp_settings.json honored by MCP clients for initialize, tools/list, and tools/call; defaults to 60 seconds, clamped to 1–3600 seconds instead of hardcoded 1.5 s and 5 s limits.
›Adds session forking and user-run message APIs so a host can edit an earlier prompt: fork the session before a selected user run, trim checkpoint history, and restore prior messages.
›Adds ClineCore.readLiveMessages for reading a resident session's in-memory transcript, so a plan/act rebuild during an in-flight turn no longer starts from empty history.
›Plugins can now emit telemetry through ctx.telemetry, from both the subprocess sandbox and in-process execution.
›Reasoning controls (effort, budget, on/off) are now driven by the models.dev catalog and normalized before provider encoding; Anthropic's mandatory and impossible thinking modes are handled explicitly, and out-of-range budgets are clamped.
+5 moreshow less
›insert_line and read_files line bounds now accept numbers emitted as JSON strings instead of failing the whole tool call.
›OpenRouter now defaults to anthropic/claude-sonnet-5.
›Telemetry events now carry device_id.
›A malformed OTEL header entry no longer discards the valid ones.
›A legacy single-file .clinerules no longer aborts the config scan.
└──▷ BREAKING ON UPGRADE
!The 'Enable R1 messages format' option has been removed from the OpenAI Compatible provider.
Apply machine-specific skill paths using option and option reset with hostname conditionals.
bash
# ~/.crushrc
option reset skill-path
if [[ $HOSTNAME == "workstation" ]]; then
option skill-path "$HOME/work-skills"
fi
›Adds .crushrc bash-based configuration file, replacing and coexisting with the legacy JSON config, supporting provider add, model add, permissions allow, permissions deny, mcp add, option, source, and conditional shell logic for machine-specific overrides.
›Adds permissions deny command in .crushrc to explicitly hide specific tools from the agent.
›Adds option reset command in .crushrc to wipe shell config list options.
›Adds provider add and model add as verb-first shell config builtins for registering providers and models from .crushrc.
›Adds mcp add and mcp remove as verb-first shell config commands configurable from .crushrc, including --type, --url, and --header flags for HTTP MCP servers.
+7 moreshow less
›Adds hook add and hook remove as verb-first shell config commands in .crushrc.
›Adds lsp add and lsp remove as verb-first shell config commands in .crushrc.
›Exposes CRUSH_VERSION environment variable to .crushrc shell config scripts.
›Adds a local .crushrc override that takes precedence over the global crush.sh, enabling per-machine config layering.
›Adds automatic token refresh and re-authentication UX for AWS Bedrock SSO sessions when tokens expire.
›Adds provider-model builtin to .crushrc for defining provider-specific model entries.
›Adds top-level environment variable application on startup via crushrc config.
Qwen Code v0.21.2 adds Auto Recall, review run, fork_tools allowlist, GitLab polling, DingTalk cards, and a security.allowPrivateNetworkHooks setting.
└──▷ GET THIS VERSION
$ git clone --branch v0.21.2 https://github.com/QwenLM/qwen-code.git
# already have the repo? check out this version:$ git checkout v0.21.2
└──▷ TRY IT
Run a headless review and get a machine-readable verdict in CI pipelines without interactive output.
$ qwen review run
Allow HTTP hooks to call internal services on private networks in a platform-managed deployment.
yaml
security:
allowPrivateNetworkHooks: true
Restrict a fork-type subagent to only use specific tools, limiting its blast radius during automated fix cycles.
yaml
fork_tools:
- read_file
- grep
- bash
›Adds security.allowPrivateNetworkHooks setting to allow HTTP hooks to reach private network addresses in trusted platform-managed environments.
›Adds reasonFilter setting for GitHub channels to skip unwanted notification reasons and prevent unintended agent actions.
›Introduces fork_tools allowlist on fork-type subagents to restrict execution to specific canonical tool names or MCP server patterns.
›Adds review run subcommand for headless, machine-readable review verdicts.
›Adds qwen review test-efficacy command that detects unprotected safety statements using statement-level mutation probes.
+18 moreshow less
›Adds byte-cursor paging to large text file reads across HTTP, ACP, and SDK surfaces for efficient retrieval without rescanning.
›Adds an opt-in Auto Recall profile that automatically searches external context on prompt submission, with built-in security limits.
›Adds a GitLab polling channel adapter that converts GitLab todos into inbound messages for automated processing.
›Adds DingTalk interactive cards support for channels.
›Adds APIs and SDK helpers to list approved pairing senders and revoke access within a specific workspace.
›Adds UI controls in the Channel editor to view, approve, and revoke pairing approvals with explicit confirmation dialogs.
›Enhances the /verify command with seven new maintainer verification techniques, evidence screenshots in reports, and an increased agent budget from 25 to 120 minutes.
›Adds a threshold setting to automatically preload deferred tools into the context window when their total size fits within limits.
›Autofix defers lower-severity suggestions after five change rounds, restricting further modifications to critical findings and failed checks only.
›Adds automatic milestone summaries every tenth takeover round to provide visibility into long-running fix attempts.
›Web Shell gains contextual task panels, theme-aware composer highlights, interactive dot animations, and a typewriter effect for placeholders.
›GitHub channels now display an eyes reaction on issues and comments while an agent turn is actively running.
›GitHub channels now emit exactly one final comment per event.
›Goal v3 connected to the turn engine with deterministic permit handling so runtime continuations do not consume session or recursive turn budgets.
›Static image reads now return a canonical, auto-oriented JPEG overview with source dimensions to support reliable zooming.
›Triage comments now lead with a clear pass/fail verdict and display English by default with Chinese translations folded.
›Review approvals with zero findings on non-trivial diffs now explicitly disclose low-signal status in the verdict line.
›Triage system mechanically triggers the 2b-bis sandboxed-lane recommendation when a Stage 2 draft contains a not-verified sentence.
Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.
CrewAI 1.15.10 adds skill usage event collection for agent observability.
└──▷ GET THIS VERSION
$ git clone --branch 1.15.10 https://github.com/crewAIInc/crewAI.git
# already have the repo? check out this version:$ git checkout 1.15.10
›Collects skill usage events, enabling observability into which agent skills are invoked during crew runs.
An MCP that lets AI tools securely connect to your infrastructure, write IaaS code, debug issues, and assist during incidents - without risking production stability. Built for security teams to approve and infrastructure teams to experience like magic.
emisar v0.36.0 adds staged runbooks with typed inputs and parallel execution, MCP 2026-07-28 routing support, and hardened OIDC/SCIM identity controls.
└──▷ GET THIS VERSION
$ git clone --branch v0.36.0 https://github.com/AndrewDryga/emisar.git
# already have the repo? check out this version:$ git checkout v0.36.0
›Adds staged runbooks where typed inputs bind once, stages run sequentially or in parallel against selected runner groups, and steps can extract named outputs, test success conditions, and wait within explicit bounds.
›Adds a single pre-execution approval that freezes the complete runbook execution plan before work begins; Canonical JSON uses the same definition shape across the console and MCP.
›Adopts the 2026-07-28 MCP routing headers and dual-era endpoint in the bridge and portal, including OAuth Client ID Metadata Documents.
›Expands the action catalog to 91 packs and 1,386 actions, adding bounded diagnostics for GCP, Pure FlashArray, Terraform, Nomad, OIDC/JWKS, nftables, TCP, and Docker Compose.
›Adds a unified bounded address policy covering OIDC discovery, JWKS refresh, and redirects that rechecks the response actually received; changing an issuer now clears credentials tied to the old one.
+2 moreshow less
›Adds atomic wire-order application of SCIM group patches with body bounding before authentication; disabling a SCIM connection now retires the sessions and pending identity links it vouched for.
›Missing source commands and HTTP error responses now fail pack actions instead of silently reporting empty success through a downstream pipe or successful transport.
└──▷ BREAKING ON UPGRADE
!Disabling a SCIM connection retires all sessions and pending identity links it vouched for, which will terminate active sessions for affected users on upgrade.
llama.cpp b10216 adds full GGML_OP_POOL_1D support to the Vulkan backend via a new compute shader.
└──▷ GET THIS VERSION
$ git clone --branch b10216 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:$ git checkout b10216
›Adds GGML_OP_POOL_1D support to the Vulkan backend, including vk_op_pool1d_push_constants, pipeline_pool1d_f32, and the pool1d.comp compute shader, enabling 1D pooling operations on Vulkan-accelerated hardware.
SYCL backend gains oneMKL GEMM flash attention for XMX-accelerated prompt processing, delivering up to 1.97x throughput on Intel Battlemage GPUs.
└──▷ GET THIS VERSION
$ git clone --branch b10208 https://github.com/ggml-org/llama.cpp.git
# already have the repo? check out this version:$ git checkout b10208
›Adds GGML_SYCL_ENABLE_MKL_FA environment variable to enable/disable oneMKL GEMM flash attention on the SYCL backend (set to 0 to disable); activates automatically when flash-attn is on and Q tokens >= 32.
›Adds GGML_SYCL_MKL_FA_DEBUG environment variable to enable an FA watchdog with timing diagnostics for the MKL flash attention path.
›Adds GGML_SYCL_MKL_FA_DIAG environment variable to emit FA-DIAG output fingerprints for A/B testing the MKL vs. TILE attention paths.
›New oneMKL GEMM flash attention kernel accelerates multi-token prompt processing via XMX hardware on Intel Arc/Battlemage GPUs, supporting all KV cache types (F16, BF16, F32, and quantized) with head dimensions 64–512 (multiples of 64) and GQA >= 2.
›XMX-accelerated path delivers up to 1.97x prompt throughput over the TILE path: Gemma-4-26B reaches ~1473 t/s vs. ~746 t/s, Qwen3.6-27B reaches ~609 t/s vs. ~330 t/s, on Intel B70/Battlemage at 32K context with q8_0 KV cache.
$ git clone --branch v1.6.19 https://github.com/jjang-ai/vmlx.git
# already have the repo? check out this version:$ git checkout v1.6.19
›Native-MTP health and profiling now expose bounded cache-lifecycle, acceptance, and phase-timing telemetry for Qwen MTP models.
›Ollama requests now preserve an explicitly supplied top_k, including 0, instead of silently dropping it during request translation.
›Automatic prompt limits are now derived from the configuration of the model that is actually loaded, bounded by the model's declared context ceiling and current memory budget.
›Separate Apple-silicon downloads are now provided for macOS Tahoe and for Sequoia-compatible systems.
›New and restored Electron chats now hydrate temperature, Top P, Top K, repetition penalty, and output limits from the selected model bundle.
+6 moreshow less
›MiniMax M2-family automatic cache storage uses the correctness-first q8 policy, with bundle-owned calibrated TurboQuant settings and explicit user selections remaining authoritative.
›Cache namespaces for compatible looped-transformer bundles now include the effective repeated-layer layout, preventing reuse between incompatible loop counts.
›Persistent cache payload encoding is moved off the inference-completion path after tensors are safely detached from MLX, reducing synchronous CPU work at the end of a request.
›New settings and compatibility messages are localized in the shipped English, Spanish, Japanese, Korean, and Chinese interfaces.
›Compatible Nanbeige looped-transformer JANG bundles now validate their loop count, effective cache-slot count, and runtime metadata before generation, rejecting inconsistent bundles rather than running with a silently short cache.
›Bounded Electron tool workflows now better enforce requested exactly-once tool calls while leaving other explicitly requested tools available until their results have been returned.
Arize Phoenix v19.12.0 adds a Harbor proof-of-concept integration for evals.
└──▷ GET THIS VERSION
$ git clone --branch arize-phoenix-v19.12.0 https://github.com/Arize-ai/phoenix.git
# already have the repo? check out this version:$ git checkout arize-phoenix-v19.12.0
›Adds Harbor proof-of-concept integration to the evals module.
Weave v0.53.4 adds custom runtime registration APIs, Azure workload identity support, and expanded Claude Agent SDK tracing including image prompts.
└──▷ GET THIS VERSION
$ git clone --branch v0.53.4 https://github.com/wandb/weave.git
# already have the repo? check out this version:$ git checkout v0.53.4
›Adds a custom runtime registration API (Python) and a custom runtime SDK wrapper — enabling programmatic registration of custom execution environments.
›Adds a custom runtime TypeScript SDK wrapper, bringing the same custom runtime capability to the TypeScript SDK.
›Supports Azure workload identity for authentication, removing the need for explicit credential secrets in Azure-hosted deployments.
›Traces Claude Agent SDK image prompts, extending multimodal visibility into Claude Agent workflows.
›Records turn output messages in agent traces, capturing full multi-turn conversation output for replay and debugging.