← Building with agents

Building with agents

November 2026

• Nov 9, 2026 Coding agents In the briefing →

  OpenAI agreed to buy Pierre Computer Company, whose Trees and Diffs libraries already handle file navigation and change review inside the Codex app. OpenAI plans to fold Pierre's Git-backed Code Storage service into Codex. Terms weren't disclosed, and the deal still needs regulatory approval. (official)

• Nov 9, 2026 AI-assisted SDLC In the briefing →

  Releasing Linux 7.4-rc2, Linus Torvalds said the flood of AI-prompted bug fixes may be starting to turn. eBPF lead Alexei Starovoitov reports that fixes in his area now arrive faster than new reports, though Torvalds said most other subsystems aren't there yet. The rc1 before it was the largest release candidate in kernel history. (source)

• Nov 8, 2026 Coding agents In the briefing →

  Cognition's SWE-2 Flash runs in Devin Desktop and the Devin CLI at about a fifth of SWE-2's price and roughly three times its speed, free for paid Devin users through November 30. It is a 276B mixture-of-experts with 12B active, built on Thinking Machines' open-weights Inkling-Small. Benchmarks are self-reported, and the weights stay private: Cognition cites security and plans gated access for partners and labs. (source)

• Nov 8, 2026 Coding agents In the briefing →

  AWS made Kiro bots generally available in Kiro Crew. Each bot is a named, long-running agent with its own memory, chat and tool permissions; it can fan out parallel sessions, run on schedules set in plain language, and ask for a decision while other work continues. Memory can be viewed, edited or deleted, and new tools need approval. No separate bot price was announced; runs draw Kiro credits. (official, source)

• Nov 8, 2026 Coding agents In the briefing →

  @GitHub in Slack and Teams is generally available, with a canvas in Teams for reviewing plans and diffs, and issues or PRs it opens now credit the conversation's author. (official)

• Nov 8, 2026 MCP In the briefing →

  An MCP server built on the TypeScript SDK that reuses one stateless HTTP transport, or one McpServer instance, across clients can send responses and notifications to the wrong client. Messages are matched only by JSON-RPC id, and every client starts counting at zero. CVE-2026-111770 (CVSS 7.7) is fixed in @modelcontextprotocol/server 2.3.0 and the SDK 1.32.0; reused instances now fail, so create one per session. stdio servers are unaffected. (official)

• Nov 8, 2026 MCP In the briefing →

  The same SDK's bearer-token auth accepted access tokens issued for another service, because it never checked the audience. CVE-2026-111771 (CVSS 6.8) is fixed in SDK 1.32.0, server 2.3.0, express 2.0.2 and server-legacy 2.3.1, but upgrading leaves the check off: enable audience validation and pass the expected audience, or check aud in your own verifyAccessToken(). (official)

• Nov 8, 2026 AI-assisted SDLC In the briefing →

  Grab described how it kept its mobile apps stable as AI assistants raised the number of code changes per release. The defence is layered: custom lint rules, an internal early-access build, staged rollouts and feature flags that are switched off when crash rates pass a threshold, and automated triage that maps each crash to a pull request. The write-up publishes no before-and-after figures. (source)

• Nov 8, 2026 Coding agents Weekly recap Read the recap →

  Copilot reached JetBrains Air, Xcode's assistant, and Slack and Teams, while JetBrains built Air into its 2026.3 IDEs. Meta bought Conductor, whose cloud service shuts November 20, and AWS made Kiro bots GA. (Air, 2026.3, Conductor, Kiro)

• Nov 8, 2026 MCP Weekly recap Read the recap →

  Two TypeScript SDK fixes need more than an upgrade: reused transports now fail, and audience validation stays off until enabled. Glow Labs found agents still installing the archived reference servers, and Claude Team and Enterprise plugins can now connect at login. (SDK, archived servers, Claude)

• Nov 8, 2026 Agent frameworks & platforms Weekly recap Read the recap →

  Langflow 1.13.0 fixed two unauthenticated CVSS 9.8 flaws. Google donated Agent Substrate and gVisor to the CNCF, Mistral relaunched Studio for managed agents, and AMD open-sourced the PrimusClaw runtime. (Langflow, CNCF, Studio, PrimusClaw)

• Nov 8, 2026 AI-assisted SDLC Weekly recap Read the recap →

  GitHub Actions blocks pull_request_target by default in public repositories from December 2, with brownouts first. OpenAI described Pando, the Git backend it built for Codex's commit load, and Dependabot now updates Agent Package Manager dependencies. (Actions, Pando, Dependabot)

• Nov 7, 2026 Coding agents In the briefing →

  Apiiro scanned public GitHub for .claude/settings.local.json, where Claude Code saves a command as an allow rule when someone picks "Yes, and don't ask again." Of 104,185 copies, 1,122 held at least one secret typed into the approved command: 379 database passwords, 43 SSH logins and 23 AWS keys among 1,379 in total. Claude Code adds the file to the user's global git excludes, not the project's .gitignore, so a collaborator or a fresh machine without that setting can commit it. gitleaks and TruffleHog both missed 215 of the files. Apiiro says Anthropic hasn't replied; a related issue was closed as not planned. (source)

• Nov 7, 2026 Coding agents In the briefing →

  Forever Security showed that any browser extension able to run scripts on claude.ai could send tasks to Claude Desktop through Dispatch, the phone-to-desktop feature. In its test, a script asked Claude to install an npm package, clicked "Allow" on each approval prompt, and the package's install script ran. The researchers say Anthropic called the report a duplicate in May and told them in October that Dispatch would be retired. Dispatch is closed to new users but still running for some existing ones. (source)

• Nov 7, 2026 Coding agents In the briefing →

  Copilot code review settings can now be managed through GitHub's REST and GraphQL APIs, from enterprise policy down to a single repository, including review effort and whether reviews use MCP tools. Responses now say which skills, MCP servers and custom instructions a comment drew on, and review sessions show the AI credits they used. (official)

• Nov 7, 2026 Agent frameworks & platforms In the briefing →

  AMD open-sourced PrimusClaw, a managed agent runtime that runs in your own Kubernetes cluster next to Instinct GPUs. It keeps runs as database rows under leases, so another replica can pick up an in-flight run after a crash or upgrade, and agent code runs without platform-wide credentials. It exposes A2A v1.0, MCP in both directions and an API compatible with Claude Managed Agents. MIT licence, with an Apache 2.0 sandbox controller. (official)

• Nov 6, 2026 Coding agents In the briefing →

  JetBrains shipped the 2026.3 releases of its IDEs, including PyCharm, WebStorm, GoLand, RubyMine, RustRover and DataGrip, with JetBrains Air built in after a month in early access. Air is a tool window for running agents you already have, such as Claude Agent, Codex, Copilot, Junie and other ACP agents, and it needs no JetBrains AI subscription when you bring your own. Admins can restrict it to an allowlist of agents. (official, official)

• Nov 6, 2026 Agent frameworks & platforms In the briefing →

  Google donated Agent Substrate, gVisor and OpenRL to the CNCF, all accepted into the Sandbox tier. Agent Substrate parks idle agent sessions in storage and restores them onto a warm pool of sandboxes in under 500 ms, with gateways that inject secrets by agent identity. It is at 1.0 and runs on any Kubernetes cluster, not only GKE. OpenRL exposes a Tinker-compatible API for self-hosted RL post-training. (official)

• Nov 6, 2026 Agent frameworks & platforms In the briefing →

  LangChain added async subagents to Deep Agents in Python and JavaScript, switched on with a single "async": True field. The orchestrator gets tools to start, check, update, cancel and list background tasks, and a follow-up instruction can either interrupt a running subagent or queue behind it. Task notifications are in beta. (official)

• Nov 6, 2026 Agent frameworks & platforms In the briefing →

  Mistral relaunched Studio as a platform for managed agents with sandboxes, subagents and hooks, resumable workflows with human approval steps, and OpenTelemetry traces of every model and tool call. It deploys to Mistral's cloud, a customer VPC or on-premises, and ships a Mistral MCP server for building from a coding agent. (official)

• Nov 6, 2026 Agent frameworks & platforms In the briefing →

  Microsoft says Claude models in Copilot, including Copilot Cowork, will process inside the EU Data Boundary for EU and EFTA organizations by the end of 2026, under existing contract terms. The setting stays off by default there; tenants already using Claude need do nothing. The UK isn't mentioned. (official)

• Nov 6, 2026 AI-assisted SDLC In the briefing →

  GitHub's Copilot usage metrics API now reports what developers do with Copilot code review comments: total_comments_evaluated and total_comments_addressed, which together give an addressed rate, broken down by severity and comment type. A separate count tracks merged pull requests where no person requested changes after Copilot's first review. Comments are counted on the day the pull request merges. (official)

• Nov 5, 2026 Coding agents In the briefing →

  A developer reported that opening Postman's desktop app, version 12.33.4 on macOS, installed Postman plugins into both Claude Code and Codex without asking, plus a Postman CLI. In Codex the installer also wrote its own startup hook's hash into the trusted list, skipping the review Codex normally requires. The hook tells Codex to load Postman's API skill for most API tasks. Postman had not answered The New Stack's questions. (source)

• Nov 5, 2026 Coding agents In the briefing →

  Meta bought Conductor, whose app runs several Claude and OpenAI coding agents in parallel workspaces. Conductor's cloud service shuts on November 20, after which user cloud data is deleted; the core app keeps working until early next year. (source)

• Nov 5, 2026 Coding agents In the briefing →

  GitHub Copilot now runs inside Xcode's built-in coding assistant, in public preview on Xcode 27.3 beta for all Copilot plans. (official)

• Nov 5, 2026 MCP In the briefing →

  Claude Team and Enterprise organizations can now have plugins connect automatically at login, in beta. Claude itself signs the identity assertion that a participating MCP server checks before issuing a token, so a company's identity provider no longer has to support the Enterprise-Managed Authorization extension. Admins pick which services and which roles get access, and expired tokens renew without a prompt. Launch services include Atlassian, Datadog, Figma, Linear and Notion. Personal plans aren't included. (source)

• Nov 5, 2026 Agent frameworks & platforms In the briefing →

  Microsoft shipped Agent Framework "builder" skills for .NET and Python that any coding agent supporting the Agent Skills format can install with gh skill install or npx skills add. They teach the agent to pick the smallest fitting pattern, a single agent, a harness or a workflow, before writing code. Microsoft recommends pinning a tag. (official)

• Nov 5, 2026 Agent frameworks & platforms In the briefing →

  AWS showed how to plug small decision models into Bedrock AgentCore Evaluations: classifiers that pick from fixed answers and return calibrated probabilities, run through a Lambda evaluator reading the agent's OpenTelemetry spans. Every turn gets the cheap check; only low-confidence turns go to an LLM judge. It's a pattern with sample code, not a new feature. (official)

• Nov 5, 2026 AI-assisted SDLC In the briefing →

  Dependabot version updates now cover Agent Package Manager, opening pull requests for git dependencies pinned in apm.yml and regenerating apm.lock.yaml. That puts shared agent skills, prompts and instructions on the same update path as code dependencies. Security updates aren't covered. It is available on all GitHub plans. (official)

• Nov 4, 2026 Coding agents In the briefing →

  GitHub Copilot now runs as an agent inside JetBrains Air over the Agent Client Protocol, on an existing Copilot plan. Local tasks need the Air plugin; cloud tasks run in a fresh container per task through Air Teams and bill to Copilot, not JetBrains AI credits. Air's analytics don't count Copilot usage, and admins can't set Copilot spending limits there. (official, official)

• Nov 4, 2026 Coding agents In the briefing →

  DeepSeek published dsh-superagent, an MIT-licensed prototype of a coding agent that takes requests from GitHub or Feishu, works each one in its own session and replies with a pull request. A web panel lists what needs a person. DeepSeek labels it a research prototype, not a product, and says it differs from its internal version. (official)

• Nov 4, 2026 MCP In the briefing →

  Glow Labs found coding agents installing the archived @modelcontextprotocol reference servers, mostly by recalling package names from training data rather than at a user's request. It reported four high-severity flaws, including prompt-injectable code execution in the Puppeteer server; maintainers closed the report because the repository is archived, so no fix is coming. The deprecated packages have passed 17.3 million npm downloads since July 2025, and npm's deprecation warning doesn't block installs. (source)

• Nov 4, 2026 Agent frameworks & platforms In the briefing →

  LangSmith's bring-your-own-cloud deployment now runs on Azure and Google Cloud in beta, alongside generally available AWS. LangChain keeps the control plane; traces, evals, prompts, agent deployments and secrets stay in the customer's account and region. The Google Cloud control plane sits in the US, and trace migration works on AWS only for now. (official)

• Nov 4, 2026 AI-assisted SDLC In the briefing →

  GitHub Actions will block pull_request_target by default in public repositories from December 2, a month later than first planned, with two-hour brownouts on November 9 and 16 at 16:00 UTC. The trigger runs with the base repository's secrets, which is how fork code ends up stealing them. Workflows that need it must be allowed in an Actions event policy. (official)

• Nov 3, 2026 Coding agents In the briefing →

  Anthropic added two sentences to Claude Code's prompt on Opus 5.5 that steer it away from building a recreation of a specific existing game. Anthropic's Addy Osmani confirmed it, citing the usage policy's IP rule, and said original games, genre games and games from your own assets should keep working. Users report no setting to turn it off. (source, source)

• Nov 3, 2026 MCP In the briefing →

  Uber described the MCP Gateway in front of more than 800 internal MCP servers and 5,000 tools. A crawler turns Protobuf and Thrift definitions into tool schemas, with LLM-written descriptions, but every new tool stays disabled until its owning team enables it. Agents search for servers and fetch one schema at a time, and can ask for only the response fields they need. (source)

• Nov 3, 2026 Agent frameworks & platforms In the briefing →

  IBM's bulletin lists four Langflow flaws fixed in 1.13.0, two of them critical (CVSS 9.8) and reachable without logging in: an authentication bypass, CVE-2026-93680, and code execution, CVE-2026-110186. A third lets a low-privileged user have the Agentic Assistant run OS commands. Versions 1.0.0 through 1.12.8 are affected, and IBM offers no workaround short of upgrading. (source)

• Nov 3, 2026 AI-assisted SDLC In the briefing →

  OpenAI replaced the Git backend behind its monorepo with Pando, built after concurrent Codex work multiplied commits. Pushes to different refs commit in parallel and only same-ref pushes serialize, which cut median push latency by about 80%. Pando is internal; the post is a design write-up, not a product. (official, source)

• Nov 3, 2026 AI-assisted SDLC In the briefing →

  Hugging Face proposes Model Integration Contracts for Transformers: a small fixture built from a real checkpoint's config, a runnable usage example and reviewed baseline outputs, cheap enough to run on CPU for every pull request. A change that let UMT5's decoder attend to future tokens sat in main for two months; a shrunk fixture flags it. The CI job reports without blocking for now. (official)

• Nov 1, 2026 Coding agents In the briefing →

  DeepSeek's Harness team published dsh-superagent-prototype under MIT: a coding agent that watches one GitHub repository, and optionally Feishu, takes requests from allowed users, works each in its own session and directory, and replies with a pull request. DeepSeek calls it a research prototype, not a product, and says the code differs from its internal version. (official)

• Nov 1, 2026 Coding agents In the briefing →

  Microsoft's analysis of the trojanized Claude Code extension in Cursor's marketplace names the persistence to hunt: a com.apple.sysmond.plist LaunchAgent on macOS, an @reboot crontab entry for ~/.config/.smt on Linux, and a SysMon scheduled task on Windows. The names imitate monitoring tools, so check what each one runs. Uninstalling the extension removes none of them. (official)

• Nov 1, 2026 Agent frameworks & platforms In the briefing →

  Amazon Bedrock AgentCore Runtime adds session endpoints: an authenticated URL for an app running inside an agent's session, so you can watch a site change while a coding agent edits it. Ports between 8000 and 12000 are allowed per runtime. Each request needs SigV4 or a bearer token, and the URL expires with the session. MicroVM runtimes only, and no PrivateLink. (official)

• Nov 1, 2026 Coding agents Weekly recap Read the recap →

  GitHub made Copilot's assisted permissions and Fusion model routing generally available, and added server-to-server auth and enterprise plugin controls. Claude Code added an opt-in that lets rm -rf ~ run unprompted, and Android Studio made bring-your-own-agent stable. (permissions, Fusion, Claude Code, Android Studio)

• Nov 1, 2026 MCP Weekly recap Read the recap →

  Google opened its Connected Apps Platform preview, putting MCP-backed apps into Gemini and Search. (Google) Per MacRumors, ChatGPT gained iCloud Mail and Calendar plugins on all plans. (iCloud) (unconfirmed)

• Nov 1, 2026 Agent frameworks & platforms Weekly recap Read the recap →

  Microsoft put the Copilot harness into Foundry Agent Service, free until December 1. LangChain's Managed Deep Agents v0.10 added browser use and removed connectors.mcp(), and Bedrock AgentCore added live session endpoints. (Foundry, Deep Agents, AgentCore)

• Nov 1, 2026 AI-assisted SDLC Weekly recap Read the recap →

  GitHub Agentic Workflows reached GA with read-only defaults, and Meta's per-diff JiTTesting cut privacy incidents by 20%. Atlassian's survey found the share of developers saving 10+ hours a week fell from 68% to 26%. (Agentic Workflows, JiTTesting, Atlassian)