AI Coding Tools Changelog Hub

Claude Codev2.1.227New

Claude Code 2.1.227

August 10, 2026

• •Fixed feature flags being evaluated without the user's subscription tier when a session started with an expired login token, which could wrongly prompt Max plan users to enable usage credits for Fable
• •Fixed every Bash command failing under claude-code-action with allowed_non_write_users on GitHub-hosted runners
• •Fixed /tui bringing back a conversation that had been rewound to before its first message
• •Improved slash-command menu: blue now marks only the selected row, matched characters are bolded instead of recolored, and emoji or accented names keep their glyphs
• •Improved performance: fewer event-loop stalls on file-not-found suggestions and at-mention size checks

OpenCodev1.18.16New

v1.18.16

August 10, 2026

• •Ignore unknown top-level config fields instead of failing config parsing
• •Register projects opened from Home so they are available to the rest of the app
• •Open the project menu with a right-click in Home
• •Fall back to listing and matching local directories when the project picker server does not support search
• •Use 词元 instead of 令牌 for token-related labels in Simplified Chinese (@Speechlessmanbilibili)
• •Keep the macOS app running after the last window closes and reopen a window when the app is activated
• •@Speechlessmanbilibili:
• •fix(i18n): use 词元 instead of 令牌 for token in zh locale (#40977)

OpenClaw2026.6.34New

openclaw 2026.6.34

August 8, 2026

• •Safer browser and network boundaries: sandboxed browser routes, trusted DNS targets, custom browser origins, and loopback provider endpoints now reject unsafe access paths. (#97958, #38290, #103075, #110693) Thanks @eleqtrizit, @brunowowk, @mosidevv, @pgondhi987, and @lsr911.
• •More resilient agent and provider runs: retained session writes, provider fallbacks, stream progress handling, and stdio failures now recover without silently ending active work. (#96100, #97128, #90908, #99803, #100521) Thanks @xialonglee, @sallyom, @richwilson-bloom, @LiuwqGit, @vincentkoc, @yetval, @shengting, and @cxbAsDev.
• •Stronger channel recovery: pending channel work resumes after recovery, acknowledgements are idempotent, and sustained Discord gateway bursts stay bounded. (#79811, #97041, #104919, #109108, #110954, #103793, #94016) Thanks @indulgeback, @cuiyuxin-gif, @Pick-cat, @Glucksberg, @evan-YM, @zhangguiping-xydt, @yetval, @sheyanmin, and @thomasthelen-kibeauftragter.
• •Safer operator diagnostics: command and status surfaces keep owner-only actions protected and prevent credentials from appearing in account URLs or summaries. (#98260, #107754, #105017) Thanks @eleqtrizit, @joshavant, @ooiuuii, @aniruddhaadak80, and @tzy-17.
• •More robust local runtime state: SQLite checkpoints, workspace reads, gateway process signalling, plugin HTTP responses, and dependency handling no longer turn transient host conditions into failed runs. (#99067, #100910, #102125, #109590, #112406) Thanks @ooiuuii, @masatohoshino, @vincentkoc, @mushuiyu886, and @krissding.
• •Extended-stable hardening: this maintenance release carries targeted security and reliability repairs without adding new release-line features.
• •OpenCode Go: use the documented hy3 model identifier instead of the failing hy3-preview alias.
• •Codex native subagents: retain the parent app-server subscription and recognize multi-agent V2 child activity until a yielded child completion reaches its requester.

OpenClaw2026.6.33New

openclaw 2026.6.33

August 8, 2026

• •Safer network and secret boundaries: provider streams, Discord REST responses, browser fetches, OAuth paths, and logs now cap hostile response sizes and keep Telegram credentials out of diagnostics. (#96989, #95412, #99428) Thanks @wangmiao0668000666, @Alix-007, @xialonglee, @liuhaiyang14, @Pick-cat, @mushuiyu886, @vincentkoc, @ZOOWH, @Pandah97, @solodmd, @zhangguiping-xydt, and @obviyus.
• •More reliable long-running agents: run release, liveness checks, and watchdog semantics now distinguish genuine stalls from active long model calls and wedged backends. (#102160) Thanks @obviyus, @kiagentkronos-cell, @alvelda, @alkor2000, and @vincentkoc.
• •Stronger channel delivery: Discord reconnects no longer silently drop queued messages or repeat ambiguous non-idempotent sends, while Telegram bot-to-bot and reply-fence handling preserve the intended thread and authorization result. (#100896, #103867, #106755) Thanks @tiffanychum, @Godecule, @yetval, @xialonglee, and @RomneyDa.
• •Safer credential recovery: service restarts preserve SecretRef-backed Telegram credentials, and OAuth repair no longer overwrites an already-valid destination profile. (#99124, #97541) Thanks @mushuiyu886, @1Wanker, @liuhao1024, @yetval, @Darren2030, @obviyus, and @RomneyDa.
• •Extended-stable updates: package installations can select, update from, and receive availability notices for the extended-stable channel without silently falling back to another release line. (#99811, #100438) Thanks @kevinslin.
• •Approval and tool authority: Codex app-server commands now require an actual human/plugin approval, exec auto-review stays bound to the exact resolved command, and narrow tool allowlists remain owned by the factory that constructs them. (#103430, #103457, #104213) Thanks @obviyus, @brokemac79, @Pandah97, @wangmiao0668000666, and @pgondhi987.
• •Scoped external tooling: external MCP loopback clients use short-lived session-bound attach grants instead of inheriting mutable child-process authority, and Gateway message actions retain trusted requester provenance and reject untrusted callers. (#102031) Thanks @pgondhi987, @Glucksberg, @wings1029, @Alix-007, @machine3at, and @anagnorisis2peripeteia.
• •Authorization and disclosure: Gateway HTTP rejects disallowed browser origins before unauthenticated handling, permission repair stays confined to its intended include, MCP status output redacts secrets, and Gateway action bridges reject untrusted requesters. (#102881, #103267, #103396, #102031) Thanks @wangyan2026, @yetval, @NianJiuZst, @obviyus, @pgondhi987, and @brokemac79.

Claude Codev2.1.226New

Claude Code 2.1.226

August 8, 2026

• •Bug fixes and reliability improvements

Claude Codev2.1.225New

Claude Code 2.1.225

August 7, 2026

• •Added gateway spend-limit support to Claude Code's usage warning; the limit-reached message now names the cap, its reset time, and the operator's message (requires the gateway on 2.1.225)
• •Added a workspace trust prompt to claude agents for untrusted directories, matching the behavior of claude
• •Fixed a transient 401 replacing a long-lived CLAUDE_CODE_OAUTH_TOKEN with a stored login's short-lived token, breaking headless sessions until restart
• •Fixed MCP OAuth servers on macOS intermittently failing with a burst of 401 errors, as if never authenticated, after a keychain read timed out
• •Fixed auto mode counting a safety-filter refusal of its own permission check toward the consecutive-block limit; the action is still denied, but the model is now told to move on rather than retry
• •Fixed cross-session messages staying parked without a notice or expiry in headless sessions and during startup
• •Fixed conversation history breaking on Remote Control session resume after very large conversations were compacted
• •Fixed hovering over a session in another project in the agents list changing the directory the next agent starts in
• •Fixed claude self-hosted-runner registering and then failing every session when --base-dir cannot be created or written; it now exits at startup with a clear error
• •Fixed Claude Code on the web sessions being misreported as stuck, re-sending a growing event backlog on every reconnect
• •Improved Remote Control: photos attached from the Claude app are now shown to Claude directly instead of being read from disk with a separate tool call
• •[VSCode] Fixed Focus view folding away the latest to-do list, a pending question's context, and settled answers; thinking-only folds show "Thought for Ns" and re-collapse when their turn completes
• •SendMessage can now start a conversation with your Remote Control sessions on other machines by name (ListAgents shows them as name [ref]), instead of only replying after they message you first
• •SendMessage: a Remote Control recipient you already confirmed is never swapped for a same-named session on this machine when its own list couldn't be checked

OpenCodev1.18.15New

v1.18.15

August 7, 2026

• •Chronological message ordering now stays correct even when imported or legacy message IDs are out of order.
• •Revert and fork actions now use real message chronology instead of message ID ordering.
• •Truncation cleanup now removes stale files by file timestamp more reliably.
• •Repeated compaction now keeps earlier tool-call history in summaries instead of dropping orphaned results.
• •Blob-based attachments now load correctly in the web UI. (@rexdotsh)
• •Added much broader locale coverage across the desktop app.
• •Export full session transcripts as JSON from the UI.
• •Session timelines now respect chronological message boundaries more reliably.

Codex CLIv0.147.0New

0.147.0

August 7, 2026

• •Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796)
• •Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950)
• •Enable automatically reviewed approvals with the new --approve-for-me CLI flag. (#36373)
• •Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623)
• •Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742)
• •Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981)
• •Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908)
• •Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834)

Claude Codev2.1.224New

Claude Code 2.1.224

August 7, 2026

• •Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans
• •Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning
• •Added a cancel-and-confirm step when removing an unavailable paste changes a command's text
• •Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one
• •Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
• •Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings
• •Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)
• •Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects
• •Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors
• •Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS
• •Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why
• •Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model
• •Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects
• •Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided
• •Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race
• •Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message
• •Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token
• •Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands
• •Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session
• •Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval
• •Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients
• •Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast
• •Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)
• •Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged
• •Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large
• •Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user
• •Changed recalled paste placeholder numbers to renumber when accepted into the input
• •Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume
• •[VSCode] Fixed the extension showing Remote Control as connected after the connection failed
• •Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)
• •[VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled

Antigravityv2.6.0New

Faster long conversations, more reliable hooks and subagents

August 7, 2026

• •Improved the ask questions panel: clearer option selection, and continue now only activates once you've answered the current question.
• •Hover details on the small icon chips in chat now appear almost immediately instead of after a noticeable pause.
• •Images and videos in chat now open in a preview window when clicked, with the option to open them in a tab instead.
• •Hook configurations that could never run are now rejected at load time with a clear error instead of being silently ignored.
• •Projects in the command palette now use the same folder icon as the sidebar, instead of a mismatched briefcase.
• •Opening long conversations is now dramatically faster.
• •You can now copy an image to your clipboard from an artifact or the file viewer, using the menu or right-click.
• •The conversation list now loads far faster for users with a large conversation history.

Antigravityv1.1.11New

Antigravity CLI: Vim modal editing mode, Vim-aware submission, print-mode slash-command enhancements, and various CLI and permission fixes

August 7, 2026

• •Added a Vim editing mode, off by default and switched on from /settings under Editor Mode, bringing modal editing to the prompt with Normal, Insert, Visual and Visual Line modes, a mode badge in the status line and a Vim tab in /help, and covering the h/j/k/l, w/b/e and W/B/E motions, the 0/^/$/gg/G boundaries, the f/F/t/T character searches with their ; and , repeats, the i/a/I/A insert entries, the d/c/y operators alongside x, D and C filling the unnamed register for p, and the iw/aw/iW/aW/ip/ap text objects.
• •Added Vim-aware submission so a prompt can be sent without leaving modal editing, through an Editor Mode > Insert First toggle that opens the prompt in Insert mode where a bare Enter submits and a modified key such as shift+enter or ctrl+j inserts a newline, ctrl+s and ctrl+enter keys that submit from Normal mode, an Enter binding available as vim.insert.submit, and the full set of vim.* scopes in keybindings.json for remapping any of it.
• •Added Vim editing to the comment editors in the diff and artifact-detail views, whose footer hints follow the active mode rather than showing one fixed set of bindings, and made a collapsed block behave as a single unit under Vim motions.
• •Added non-interactive answers for the read-only slash commands in print mode, so -p "/usage", /quota, /credits, /model, /effort and /skills emit one tab-separated record per line — or a structured payload under --output-format json and stream-json — without starting an agent turn, spending quota, or leaving a conversation behind.
• •Added an explicit refusal for the remaining interactive-only slash commands in print mode, which previously fell through as literal prompt text and let the model answer as though the command had run, so -p "/clear" reported the context cleared while nothing was cleared; each now fails with the flag or subcommand that replaces it.
• •Improved plugin enable and disable so config.json is the only place enablement lives, seeded once from each plugin's manifest, which stops a plugin that later ships "disabled": true from switching itself off under someone who was already running it and stops a shipped-default change from moving every user on the next release.
• •Improved the artifact detail view by wrapping long lines in code files instead of clipping them at the right edge.
• •Improved model retries by honoring the server-supplied retry delay instead of the client's own backoff, so a retry after a rate limit or an overload waits exactly as long as the server asks.

Droid (Factory AI)v0.190.0New

Claude Opus 5 in Auto model, HTTPS proxy support, and GitLab CI setup for automated QA, plus fixes for GitLab authentication, empty responses, and disconnected sessions

August 7, 2026

• •New features: QA setup for GitLab CI - The install-qa skill can now set up automated QA on GitLab CI and include video evidence in its reports
• •Improvements: Opus 5 in Auto model - Auto model now upgrades to Claude Opus 5 when a task needs a stronger model
• •Improvements: HTTPS proxy support - Droid now uses your HTTPS_PROXY setting when it connects, so sessions work behind a corporate proxy
• •Improvements: Clearer connection errors - A session that cannot connect at startup now explains what went wrong instead of showing a generic failure
• •Bug fixes: Empty response recovery - A turn now recovers when the model returns an empty response instead of ending with an error
• •Bug fixes: GitLab authentication per host - GitLab commands now authenticate against the host you are working with instead of a single default
• •Bug fixes: Usage dashboard filters - The usage dashboard filter bar now wraps so every filter stays visible (app)
• •Bug fixes: Disconnected session state - A session that loses its connection now keeps its state instead of resetting (app)

Droid (Factory AI)v0.189.0New

Session filtering in the command palette, faster session default changes, and fixes for status line failures, custom model key helpers, and empty responses

August 6, 2026

• •New features: Command palette session filter - The command palette now filters your sessions as you type instead of showing a fixed list (app)
• •Improvements: Faster session default changes - Changing a session default in settings now takes effect immediately instead of pausing while it saves
• •Bug fixes: Status line failures - A custom status line that fails now names the problem and points you to /statusline instead of leaving a blank row
• •Bug fixes: Custom model key helpers - Custom models that get their key from a helper command now start up instead of failing without a static API key
• •Bug fixes: Empty final responses - A turn that ends with an empty response now finishes successfully instead of failing with a no-output error
• •Bug fixes: Openable file path links - File paths in a response are only shown as links when they can actually be opened, and the tooltip says where they will open (app)
• •Bug fixes: Recent session ordering - Sending a message moves that session back to the top of your recent sessions right away (app)

Claude Codev2.1.223New

Claude Code 2.1.223

August 5, 2026

• •Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org
• •Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead
• •Added a /teleport hint in cloud sessions showing how to continue locally with claude --teleport <session id>
• •Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks
• •Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog
• •Fixed workflow scripts being able to use dynamic import() to run code outside the workflow sandbox
• •Fixed a permission gap where an agent definition's bypassPermissions mode ignored the org bypass-permissions disable policy
• •Fixed resuming a session after a mid-session /cd coming back empty
• •Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as vertex_ai/claude-* or bedrock/anthropic.claude-*
• •Fixed modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented
• •Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local managed-settings.json or MDM profile; admin env now merges per key
• •Fixed sandboxed commands failing to start on Linux when sandbox.filesystem.denyWrite covers the working directory
• •Fixed forked background agents getting stuck "already resuming" for the rest of the session when rebuilding the fork's parent prompt failed during resume
• •Fixed a resumed session failing every turn, or leaving the interactive app on an unresponsive error screen, when its history held a malformed diagnostics attachment
• •Fixed a rare hang when parsing unusual git push output
• •Changed CLAUDE_CODE_DISABLE_1M_CONTEXT to hold every Claude model with a native 1M window to 200K via auto-compaction, not just a fixed list; a startup warning now appears when auto-compaction isn't holding the session to 200K
• •Changed auto-compact to keep sessions on unrecognized model IDs within the assumed context window instead of letting them grow past it; set CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1 to restore the previous behavior
• •Changed /review to be an alias of /code-review, which reviews the current diff or a PR (/code-review <level> <pr#>); use /code-review ultra for a deep cloud review
• •Changed /code-review with no effort level to reuse the level you typed last; type a level like /code-review high to change it

OpenCodev1.18.14New

v1.18.14

August 5, 2026

• •Simplified xAI login to a single device-code flow that works better in headless and remote environments.
• •Preserved structured mid-stream provider errors so compatible providers can retry failed responses.
• •Retried more transient provider and network errors instead of failing immediately.
• •Counted cache writes in ACP usage totals.
• •Logged remote workspace 5xx response bodies in the host logs to make proxy failures easier to debug. (@jamesmurdza)
• •Stopped sending the host directory path to remote workspaces so prompts resolve from the remote project root. (@jamesmurdza)
• •Waited for queued ACP session updates before ending a turn.
• •@jamesmurdza:

Codex CLIv0.146.1New

0.146.1

August 5, 2026

• •Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057)

Claude Codev2.1.222New

Claude Code 2.1.222

August 4, 2026

• •Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type
• •Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames)
• •Fixed /usage-credits on Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one
• •Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message
• •Fixed "Connection closed mid-response" errors being reported on responses that had actually completed
• •Fixed /usage overattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it
• •Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API
• •Fixed org-restricted model: opus-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family
• •Fixed stream idle timeout firing on custom ANTHROPIC_BASE_URL gateways despite server keep-alive pings arriving on the wire
• •Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a /login hint instead
• •Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed
• •Fixed SendMessage rejecting a long summary — it now truncates instead, so sends no longer fail on a character limit
• •Fixed the spinner's effort label in a subagent's transcript view showing the session's effort level instead of the subagent's own effort: setting
• •Fixed rare crashes when a file watcher hit a filesystem error or during file-watcher teardown
• •Fixed screen readers re-reading the whole input line on every backspace in --ax-screen-reader mode — end-of-line deletions now echo just the deleted characters
• •Fixed host model-selection keys not taking precedence over a stale on-disk managed-settings.json when CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST is set
• •Improved auto mode safety: messages sent to other agent sessions via SendMessage are now evaluated by the permission classifier before dispatch
• •Improved the refusal when Claude tries to invoke a skill with disable-model-invocation: Claude is now told to ask you to run the skill instead of replicating its workflow
• •Improved the /diff view, the Remote Control workspace diff, and file-edit diffs in Claude Code on the web sessions to use raw git blob content, ignoring workspace-configured diff drivers and textconv
• •Changed Remote Control auto-start so repo-local settings (.claude/settings.json or .claude/settings.local.json) can no longer turn it on (they can still turn it off); enable it at user scope via /config
• •Removed ultraplan feature

OpenCodev1.18.13New

v1.18.13

August 4, 2026

• •GitHub pull request reviews now include the pull request number and URL in context.
• •Fixed several right-to-left layout issues across tabs, drawers, resizing, and titlebar interactions.
• •Fixed shared right-to-left UI behavior such as directional icons and drawer placement.
• •Sessions without titles now fall back to generated names instead of appearing blank.
• •Moved markdown parsing off the main thread to keep the app more responsive while rendering messages.
• •Localized more desktop UI copy, including native menus, update dialogs, and help content.
• •Added early right-to-left layout support across the app and session views.
• •Added locale-aware plural rules so translated counts and summaries read correctly.

OpenCodev1.18.12

v1.18.12

August 4, 2026

• •Fixed Azure GPT-5.5+ completion requests failing when reasoning is enabled. (@frederiknsgo)
• •Reduced composer lag when drafts include large pasted images or attachments.
• •Let project search match any known recent project instead of only the first five. (@NumerousJLs)
• •Cleared stale assistant errors from the timeline once the same turn resumes streaming.
• •Skipped legacy config reads against v2 servers to avoid spurious config loading issues. (@resetsix)
• •fix(app): skip legacy config reads for v2 (#40211)
• •@NumerousJLs:
• •fix(app): search every known project in the open project dialog (#40202)

OpenClaw2026.7.1-2

openclaw 2026.7.1-2

August 4, 2026

• •npm plugin updates: accept singleton-array metadata from newer npm clients so tracked official plugins can install and update to correction releases. (#108336)

OpenClaw2026.7.1-1

openclaw 2026.7.1-1

August 4, 2026

• •Codex progress replies: keep app-server turns running after delivered progress messages so GPT/Codex reaches its authoritative terminal response instead of stopping mid-turn. (#106961, #108487) Thanks @joshavant.
• •Memory Core startup repair: recover derived legacy-index and cache-sidecar conflicts without trapping the Gateway in a fatal restart loop, while keeping structural vector-store corruption retryable. (#107220, #108652) Thanks @goutam-adwant.
• •WSL state permissions: tolerate EROFS from guarded chmod operations only when the existing state path is already private, preserving fail-closed handling for broad permissions. (#108250, #108258)
• •Legacy migration recovery: keep reviewed migration residue nonfatal during startup instead of blocking otherwise healthy upgrades. (#106101)
• •Managed plugin updates: recover stale npm lock metadata so official managed plugins can update cleanly. (#107294, #107866)

Antigravityv0.1.10

Antigravity IDE: Prioritized inference tiers, real-time token usage streaming, and context-aware hook decorators

August 4, 2026

• •Gemini Prioritized Inference Service Tier: Configure agents to utilize Gemini Prioritized Inference service tiers for high-priority model execution with automated graceful fallback.
• •Tool Call ID Correlation in Lifecycle Hooks: Inspect call_id attributes on tool executions, errors, and hooks to correlate multi-step tool invocations across lifecycle callbacks.
• •Context-Aware Hook Decorators: Decorate hook handlers (@hooks.pre_turn, @hooks.post_tool_call, etc.) that optionally accept HookContext as a parameter to maintain state and share data across lifecycle callbacks.
• •ActionCompaction Event Emission & Hook: Track context window compaction notifications over WebSockets and intercept them using @hooks.on_compaction.
• •Standardized System Instructions Strategy: Plain string instructions default to appending to built-in instructions. To override and completely replace built-in instructions, pass CustomSystemInstructions.
• •Live Token Usage Reporting: Introduced real-time UsageUpdate event streaming so token usage accumulates live during agent execution rather than delaying updates until state transitions.
• •Interactive CLI Spinner: Updated CLI interactive loop spinner to list all active tool names when running concurrent tool calls (e.g., Running tools 'tool_a', 'tool_b').
• •Module Re-exports: Re-exported ReadUrlContentResult and SearchWebResult in connections.local for uniform tool result access.

Droid (Factory AI)v0.188.0

Fixes for plugin marketplace status, authentication for manually added MCP servers, diff colors, the thinking timer, member pickers, and opening markdown files

August 4, 2026

• •Bug fixes: Marketplace status reporting - A plugin marketplace that is working is no longer reported as missing
• •Bug fixes: Manually added MCP servers - MCP servers you add by hand can now finish authenticating instead of failing to connect (app)
• •Bug fixes: Thinking timer stability - The thinking timer keeps counting correctly when you move between views instead of restarting (app)
• •Bug fixes: Diff colors by theme - Added and removed lines in a diff now use the colors that match your light or dark theme (app)
• •Bug fixes: Paginated member pickers - Member pickers now page through everyone in your organization instead of showing only the first results (app)
• •Bug fixes: Markdown in default app - Markdown files now open in your default app instead of being blocked (app)

Droid (Factory AI)v0.187.0

Usage limits filtered by limit type, plus fixes for PDF attachments, plugin marketplace updates, and file diff counts

August 4, 2026

• •Improvements: Usage limits by type - Usage limits can now be filtered by limit type so you can narrow the list to the one you are looking for (app)
• •Improvements: Voucher redemption confirmation - Redeeming a voucher that changes your plan now shows what will change and asks you to confirm first (app)
• •Bug fixes: PDF attachment fallback - Attaching a PDF now falls back to its extracted text when the selected model cannot read PDFs, instead of failing
• •Bug fixes: Skills with broken symlinks - A skill with an unresolved symlink is now skipped instead of stopping your other skills from loading
• •Bug fixes: Marketplace updates with local changes - Updating a plugin marketplace now succeeds when its checkout has local changes instead of failing
• •Bug fixes: Inline file diff counts - File diffs show their added and removed line counts again (app)
• •Bug fixes: Updates after canceled quit - The app keeps checking for updates after you cancel quitting instead of waiting until the next launch (app)

Claude Codev2.1.221

Claude Code 2.1.221

August 3, 2026

• •[VSCode] Added Focus view: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with Ctrl+Alt+F or the "Claude Code: Toggle Focus view" command
• •Added mode: "mask" for sandbox credential files on Linux and WSL — sandboxed commands read a sentinel copy (the whole file, or just the spans captured by an extract regex) while the sandbox proxy substitutes the real value on egress; on macOS file masking falls back to deny
• •Added warnings to claude plugin validate when a marketplace or plugin name would be rejected by Claude Desktop's managed marketplace sync
• •Added a prompt-audit subcommand to the claude-api skill for auditing prompts and tool descriptions for patterns written for older models
• •Fixed a Bash tool permission-check bypass where zsh could execute hidden commands in [[ ]] regex conditionals; affected commands now prompt for permission
• •Fixed PowerShell permission checks mishandling paths containing quote characters on Windows; such paths now prompt for approval
• •Fixed the thinking toggle having no effect for the rest of a session that started with thinking off; disabling an MCP server mid-connect no longer silently reverts
• •Fixed MCP servers from --mcp-config not being connected before the first turn in print mode (-p), which made the model emit tool calls as literal text
• •Fixed @-mentioned files being silently dropped when pressing Esc to retract a prompt and resubmitting it
• •Fixed a crash when preparing API requests for SDK MCP tools named after built-in object properties such as constructor
• •Fixed WebSearch failing with a 400 error at effort xhigh/max when thinking is disabled
• •Fixed sandboxed large uploads failing with TLS errors through the sandbox proxy
• •Fixed Team and Enterprise spend-limit message incorrectly blaming the org's monthly limit instead of your individual spend limit
• •Fixed Bedrock authentication with AWS SSO named profiles failing in desktop-managed sessions on Windows machines that set a stray HOME environment variable
• •Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN=0 not disabling interrupted-turn auto-resume; falsy values are now honored
• •Fixed a rare wake-from-sleep race where two Claude Code processes could both refresh the same MCP connector or WIF OAuth token at once, forcing re-authentication
• •Fixed renaming a session from Claude Code Desktop or claude.ai not updating the CLI's session name; session names from every rename surface are now sanitized
• •Fixed plugin- and org-delivered skills named after terminal-only built-ins (e.g. /help, /feedback) being un-invocable in non-interactive sessions
• •Fixed the "Plugins changed" notification lingering after plugins were reloaded instead of clearing
• •Fixed Vim mode: the yank register now survives dialogs, history search, and the transcript view instead of being silently emptied
• •Fixed Vim mode: undoing back to an empty prompt now arms the "press ← again" confirm before returning to the agent view
• •Improved tool search on Google Vertex AI: re-enabled for Claude 4.5-generation and newer models
• •Improved auto mode: permission checks for parallel tool calls are now cache-efficient, and switching modes while a check is pending reliably prompts instead of applying the stale result
• •Reduced prompt-cache costs for auto-mode permission checks by reusing the cached conversation prefix across decisions
• •Improved Stats panel to count cache tokens in its token totals, with a breakdown by input, output, cache read, and cache write
• •Improved /ultrareview error messages when a repo shares no history with its base: a checkout with no branches is now refused up front with advice to create one, and refusal hints no longer suggest git fetch --unshallow on clones that are already complete
• •Improved Windows startup: process creation times are now read via a native kernel32 call instead of spawning PowerShell, so endpoint security tools that gate powershell.exe no longer prompt
• •Changed background sessions to commit and push to preserve work, open a draft PR only when the task calls for one, follow your CLAUDE.md git instructions, and always end by reporting where the work lives
• •Changed /plugin install to refresh a stale marketplace catalog and retry before reporting a plugin not found
• •Changed plugins installed from /plugin to activate immediately when safe, instead of always requiring /reload-plugins
• •Changed plugins to accept "." as a skills path, and the root-level SKILL.md validation error now suggests using the plugin root
• •Changed /status to show the session kind: interactive, or a background job that is attached or unattended
• •Changed emoji autocomplete to accept common alternate shortcodes like :thumbsup:, :thumbsdown:, and :love:
• •Changed sessions forked with /fork to create a new worktree of their own instead of working in the original session's checkout
• •Changed Claude in Chrome to close the browser tabs it opens once it no longer needs them
• •Changed fast mode to report on the stream when usage credits run out mid-session, instead of failing silently
• •Changed Monitor: a watch that exits without producing any output now says so instead of reporting "stream ended"
• •Changed the Gateway model field validation: non-string values are rejected with a 400 instead of being forwarded
• •Removed the repeated "Permission mode changed while the auto-mode classifier call was queued" notice from approval prompts

Hermes Agent v0.20.0 (2026.8.3)

August 3, 2026

• •Talk to Hermes — streaming, conversational voice with barge-in — Voice mode used to mean: speak, wait for the whole reply to generate, then listen to one long audio file. Now Hermes speaks clause-by-clause as the response streams, you can interrupt it mid-sentence by just talking (it stops, listens, and the model is told you cut in), and busy-aware silence detection means it doesn't talk over you. This works in CLI voice mode, on the desktop, and through gateway adapters. Talking to Hermes finally feels like a conversation, not a voicemail exchange. (#69511, #73862, #74223, #74000, #69602 — @teknium1, @OutThisLife)
• •Wake words and hands-free control — Say your own open-vocabulary wake phrase ("hey Hermes", or anything you pick) and Hermes starts listening — detection runs on-device, so no audio leaves your machine while it waits. Multi-profile voice routing means different wake words can reach different profiles, and saying "stop" ends the voice chat on every surface without touching the keyboard. Your terminal is now something you can talk to from across the room. (#70509, #73106, #73933 — @teknium1)
• •Voice on every platform — Send a voice note to Hermes on WhatsApp, Feishu, DingTalk, LINE, QQ, Photon, or Weixin and it's transcribed and answered; auto-TTS replies are delivered platform-aware (opus where platforms want opus, captions attached correctly). STT is now fully configurable — its own hermes tools category, GUI toggles, dashboard dropdowns, unified language resolution so transcripts stop coming back in the wrong language, and OpenAI's gpt-transcribe support. One unified spoken-text preprocessor cleans markdown, code, and URLs out of speech across all TTS providers. (#73515, #73508, #73910, #73513, #73067 — @teknium1)
• •Research you can trust — grounded citations with fact-checking — The new grounded-citations skill makes Hermes produce research where every claim is backed by a verifiable source: quotes are matched against the actual page text (not hallucinated), citations link to the exact evidence, and a fact-checking mode turns the same machinery on any document or claim you hand it — it tells you what checks out, what doesn't, and what couldn't be verified. If you use Hermes for research, this is the difference between "sounds right" and "provably sourced." (#71698, #77104 — @teknium1)
• •Outbound webhooks — Hermes pushes events to your systems — Until now, integrating with Hermes meant polling or listening on a platform. Now Hermes pushes signed lifecycle events (session activity, turn completions, tool events) to any HTTP endpoint you register — with HMAC signatures so your receiver can verify authenticity. Wire Hermes into your CI, your home automation, your dashboards, or any service that speaks HTTP, with no polling loop. (#69406 — @teknium1)
• •The desktop app becomes a platform — artifacts, plugin SDK, quick entry — Hermes desktop now renders artifacts: versioned cards with sandboxed live preview in a right-rail viewer, so generated HTML/apps run safely next to the chat. A real plugin SDK landed with Kanban as its founding plugin, ctx.download for handing users files, floating pane placement, and multiple GUI windows. A global-hotkey quick-entry window captures a thought into any session from anywhere in your OS. The desktop stopped being a chat client and started being a workbench. (#72345, #61173, #74413, #72315, #68259, #73143 — @OutThisLife, @teknium1)
• •Hermes speaks Agent-to-Agent — A2A v1.0 — A new bundled plugin implements the Agent-to-Agent protocol, so Hermes can discover, talk to, and be driven by other A2A-compatible agents. This closes issue #514 — one of the oldest open feature requests in the repo. If you're building multi-agent systems with heterogeneous stacks, Hermes now has a standard wire protocol for joining them. (#77109 — @teknium1)
• •CLI power-user wave — !command runs a shell command instantly without spending a model turn. /init scans your project and generates (or updates) an AGENTS.md. /diff shows staged/all/session changes from any surface, /context breaks down exactly what's filling your context window, /focus gives you a reduced-output view with hidden-line recovery, and Ctrl+S stashes a half-written prompt into a browsable panel. Plus hermes import-agent migrates your Claude Code or Codex CLI setup into Hermes in one command. (#72257, #72178, #72240, #72242, #72302, #72262, #72190 — @teknium1, several salvaging long-standing community PRs)

Antigravityv1.1.10

Antigravity CLI: Gemini Enterprise & WIF authentication, read-only .git sandbox rules, hook ordering improvements, and subagent and CLI fixes

August 3, 2026

• •Added Business sign-in for Gemini Enterprise accounts, so you can authenticate with a Google Cloud project under Google Cloud terms, use a license seat allocated or auto-assigned from your organization's GE-Standard or GE-Plus subscription, run inference in a chosen region, and have your organization's administrator controls applied to various features.
• •Added Workforce Identity Federation sign-in for enterprise users, available as the Use advanced SSO config option on the Google Cloud sign-in screen, so organizations that federate identity through an external provider can authenticate with their own identity provider.
• •Added sign-in with Application Default Credentials so you can use Agent Platform.
• •Added a non-blocking advisory banner when the same conversation is already open in another CLI instance on the same machine, pointing at /fork so two sessions no longer interleave writes into one trajectory.
• •Improved the terminal sandbox by granting read-only rather than writable access to a Git repository's .git directory, so the agent can inspect repository metadata without being able to rewrite it from inside the sandbox.
• •Improved hook ordering so hooks defined in hooks.json run before the built-in termination checks, which lets PostInvocation hooks observe the final invocation of a turn and lets Stop hooks run at all instead of sitting unreachable behind the built-ins.
• •Improved the schedule tool to accept DurationSeconds and MaxIterations when a model emits them as bare JSON numbers rather than strings, accepting integral values and rejecting non-integral ones with a clear error instead of failing the call.
• •Fixed --model and --effort being ignored in interactive sessions and in headless -p runs, where the flags were applied after model configuration had already been initialized so the run silently fell back to the persisted or default model.

Cursor2026-08-03

Google Workspace Plugins

August 3, 2026

• •Google Drive: search files and folders, open and download content, create and organize files
• •Gmail: search and read mail, draft and send messages, apply labels and manage threads
• •Google Calendar: read schedules, create and update events, find free time

OpenClaw2026.7.2-beta.7

openclaw 2026.7.2-beta.7

August 2, 2026

• •State safety and recovery: protect persisted data with a quarantine store that survives primary-database damage, crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, and rollback-writer snapshot recovery. (#110453, #113367, #113453, #113473, #113580) Thanks @vincentkoc.
• •Durable channel delivery: keep accepted messages recoverable across gateway restarts and local crashes through the shared ingress drain and dead-letter recovery, covering Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, and Zalo User. #108656, #107246, #109911 (#108924, #107288, #109907, #109910, #110844, #110852, #110899, #110910, #110914, #110916, #111029) Thanks @obviyus and @edenfunf.
• •Session rewind and branching: rewind or fork conversations from individual messages, switch transcript branches across web and native apps, fork upstream Codex sessions, preserve branch-safe queued sends, reject stale-pane writes, and restore prompt images after a fork. (#110660, #110857, #110886, #111149, #112056, #112284, #113073, #113945) Thanks @vincentkoc.
• •Interactive MCP Apps and dashboards: host ticketed MCP Apps with bound tools, resources, and bounded context updates; open them from channel replies, pin them to durable dashboards, harden their shared sandbox, and let native plugins declare them directly. #109851, #110451, #113218 (#109861, #109807, #110515, #111211, #111212, #111524, #111687, #111748, #113224) Thanks @fuller-stack-dev.
• •Questions and approvals everywhere: let agents ask structured questions with option cards across web, channels, macOS, and native apps, while approvals gain push notifications, history, fair queuing, headless resolution, Claude tool-request relay, reviewer detail, and clearer formatted prompts. #85954 (#108505, #108709, #108776, #109922, #110242, #110372, #110584, #110681, #110989, #111060, #112918, #113027, #113193) Thanks @omarshahine.
• •Meetings and realtime Talk: join Teams, Zoom, and Google Meet calls with default-enabled meeting plugins and durable transcript collection, while realtime Talk adds OpenAI and Gemini video and requires a supported OpenAI Platform API key instead of the rejected Codex OAuth fallback. #86425, #113353, #115021 (#109579, #109719, #109964, #111048, #113022, #113053, #113122, #113354, #115211) Thanks @shushushv, @Solvely-Colin, and @vincentkoc.
• •Wear OS companion: add the phone-proxied Wear companion with home-screen agent/session/model selection, realtime Talk controls, audio-reactive playback, and an instant-talk tile. #108781 (#108835, #109341, #109433, #109483, #110661, #111516, #112721) Thanks @sibbl, @IWhatsskill, and @Solvely-Colin.
• •Guided setup and local inference: guide setup across browser, Linux, and macOS with local-provider detection, strongest-model selection, downloadable models, lean mode, memory imports, and an in-process RAM-gated llama.cpp/Gemma path. #108604 (#108605, #108868, #108977, #109250, #109444, #109585, #110054, #110141, #110596, #113476)

OpenCodev1.18.11

v1.18.11

August 1, 2026

• •Stopped MCP SSE connections from getting stuck in reconnect loops after server error responses.
• •Fixed provider model configs that use interleaved reasoning fields like reasoning_text or custom field names.
• •Open external links in the system browser instead of inside the app.
• •Fixed stale session tab state in the desktop title bar. (@OpeOginni)
• •Open the legacy directory picker at your home folder when no home path is loaded yet.
• •Prevent the file tree tab from clipping when resized smaller. (@OpeOginni)
• •Fixed debug gutter labels and values misaligning.
• •@devennavani:

OpenClaw2026.7.2-beta.6

openclaw 2026.7.2-beta.6

August 1, 2026

• •State safety and recovery: protect persisted data with a quarantine store that survives primary-database damage, crash-recoverable SQLite snapshots, crash-durable filesystem publication, schema-upgrade data-loss rejection, and rollback-writer snapshot recovery. (#110453, #113367, #113453, #113473, #113580) Thanks @vincentkoc.
• •Durable channel delivery: keep accepted messages recoverable across gateway restarts and local crashes through the shared ingress drain and dead-letter recovery, covering Telegram, Signal, Slack, QQBot, Twitch, Synology Chat, Tlon, IRC, and Zalo User. #108656, #107246, #109911 (#108924, #107288, #109907, #109910, #110844, #110852, #110899, #110910, #110914, #110916, #111029) Thanks @obviyus and @edenfunf.
• •Session rewind and branching: rewind or fork conversations from individual messages, switch transcript branches across web and native apps, fork upstream Codex sessions, preserve branch-safe queued sends, reject stale-pane writes, and restore prompt images after a fork. (#110660, #110857, #110886, #111149, #112056, #112284, #113073, #113945) Thanks @vincentkoc.
• •Interactive MCP Apps and dashboards: host ticketed MCP Apps with bound tools, resources, and bounded context updates; open them from channel replies, pin them to durable dashboards, harden their shared sandbox, and let native plugins declare them directly. #109851, #110451, #113218 (#109861, #109807, #110515, #111211, #111212, #111524, #111687, #111748, #113224) Thanks @fuller-stack-dev.
• •Questions and approvals everywhere: let agents ask structured questions with option cards across web, channels, macOS, and native apps, while approvals gain push notifications, history, fair queuing, headless resolution, Claude tool-request relay, reviewer detail, and clearer formatted prompts. #85954 (#108505, #108709, #108776, #109922, #110242, #110372, #110584, #110681, #110989, #111060, #112918, #113027, #113193) Thanks @omarshahine.
• •Meetings and realtime Talk: join Teams, Zoom, and Google Meet calls with default-enabled meeting plugins and durable transcript collection, while realtime Talk adds OpenAI and Gemini video and requires a supported OpenAI Platform API key instead of the rejected Codex OAuth fallback. #86425, #113353, #115021 (#109579, #109719, #109964, #111048, #113022, #113053, #113122, #113354, #115211) Thanks @shushushv, @Solvely-Colin, and @vincentkoc.
• •Wear OS companion: add the phone-proxied Wear companion with home-screen agent/session/model selection, realtime Talk controls, audio-reactive playback, and an instant-talk tile. #108781 (#108835, #109341, #109433, #109483, #110661, #111516, #112721) Thanks @sibbl, @IWhatsskill, and @Solvely-Colin.
• •Guided setup and local inference: guide setup across browser, Linux, and macOS with local-provider detection, strongest-model selection, downloadable models, lean mode, memory imports, and an in-process RAM-gated llama.cpp/Gemma path. #108604 (#108605, #108868, #108977, #109250, #109444, #109585, #110054, #110141, #110596, #113476)

Antigravityv2.5.0

Enterprise sign-in: Gemini Enterprise accounts and Workforce Identity Federation

July 31, 2026

• •Added support for signing in with your Gemini Enterprise user account, including support for organization admin controls.
• •Allocated and auto-assigned license seats against GE-Standard & GE-Plus organization subscription tiers.
• •Regionalized (US, EU, Global) model inferencing.
• •Operating under Google Cloud terms of service.
• •Added Workforce Identity Federation sign-in for enterprise users: select the Advanced SSO login option.
• •Added per-model reasoning effort levels (Low, Medium, High).
• •Added enterprise admin policies for browser features, MCP allowlists, and permission thresholds.
• •Approved permissions are now remembered for the rest of the conversation.

Antigravityv1.1.9

Antigravity CLI: Slash-command expansion in print mode, non-blocking MCP startup, session-wide permission memory, system temp directory write grants, and hook and UI stability fixes

July 31, 2026

• •Added slash-command and skill expansion to print mode, so a headless run such as -p "/my-skill review this diff" now resolves and applies the skill instead of sending it as literal text, with --disable-slash-commands to opt out.
• •Improved interactive startup so a slow or hanging MCP server no longer stalls the first agent turn, loading MCP servers in the background for the interactive session while headless and one-shot runs keep blocking so their single scripted turn still sees the full toolset.
• •Improved permission grants so a pattern approved at a prompt is recorded for the rest of the conversation, letting later commands that match it run without prompting again.
• •Improved the default system temporary-directory grant to cover writes as well as reads, so agents no longer trigger a permission prompt when creating or updating files there.
• •Fixed stop hooks that always block hanging the agent forever; after a configurable number of consecutive continuations, the hook can no longer block and the turn ends normally.
• •Fixed PostToolUse hooks firing on non-tool steps such as user input and model responses, which also caused them to ignore their configured matchers.
• •Fixed slash commands not being recognized when separated from their arguments by a newline or tab, so a prompt starting with a command followed by a newline is now parsed as a command instead of being sent verbatim.
• •Fixed deleting into a collapsed paste placeholder removing one character at a time, which left a visible fragment in the prompt while the full pasted content was still submitted; the block is now deleted atomically.

Droid (Factory AI)v0.186.0

Support for GitHub Enterprise and self-hosted GitLab remotes, clickable links in tmux, and fixes for transcript performance, command denylists, and table scrollbars

July 31, 2026

• •New features: Self-hosted Git remotes - Repositories hosted on GitHub Enterprise or a self-hosted GitLab are now recognized as Git remotes
• •Improvements: Streaming transcript performance - Long streaming responses no longer slow the transcript down while they render (app)
• •Improvements: Cmd-click hint on file paths - File path links now show a tooltip explaining that Cmd-click opens the file (app)
• •Bug fixes: Clickable links in tmux - Links in the terminal are now clickable when you run the CLI inside tmux
• •Bug fixes: Command denylist matching - A denylisted command no longer blocks unrelated commands that happen to share a subcommand name
• •Bug fixes: Table scrollbar overlap - Scrollbars in tables no longer sit on top of row content (app)

Hermes Agent v0.19.1 (v2026.7.30)

July 30, 2026

# Hermes Agent v0.19.1 (v2026.7.30) Release Date: July 30, 2026 > Patch release. This tag rolls up the ~1,000+ PRs merged since v0.19.0 into a stable tagged release for downstream consumers (Docker images, hosted deployments, fresh installs). --- ## About this release Since v2026.7.20 (v0.19.0, July 20): ~2,789 commits · ~4,748 files changed · ~442,000 insertions · ~392,300 deletions on main. This window is dominated by bug-fix and salvage waves across the gateway, voice subsystem, desktop app, and installer, plus continued platform work (Buzz/Nostr channel, FLUX3 video generation and delivery, Telegram media reliability, voice-mode regressions). Full curated release notes for this window will ship with v0.20.0, which will document everything from v0.19.0 onward — highlights, feature areas, and complete contributor credits. Nothing in this window is skipped. ## Updating ``bash hermes update # or fresh install: curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash `` Full Changelog: v2026.7.20...v2026.7.30

OpenCodev1.18.10

v1.18.10

July 30, 2026

• •Discover available Modal models automatically. (@devennavani)
• •Prevent adding the same attachment more than once.
• •Always show the new session button.
• •Improve toast notifications with better stacking, dismissal, and mobile layout.
• •Refine tab hover, active, and overflow states.
• •Repair malformed saved tabs so broken tab state no longer persists across launches. (@OpeOginni)
• •Hide the model variant selector until model data finishes loading.
• •Preserve the custom agent picker for existing users.

Codex Appv26.727

Browser upgrades, multi-repository review, and image editing

July 30, 2026

• •Browse and find context faster: Type in the built-in browser’s address bar to revisit pages from your browsing history or search Google when there’s no match.
• •Browse and find context faster: Manage your browsing history in Settings, and let ChatGPT search that history when a task needs to find a page you visited before.
• •Browse and find context faster: Use the Chrome extension to mention open tabs or bring highlighted page text into your side chat.
• •Browse and find context faster: Ask questions about any YouTube video in the Chrome extension and get answers in seconds.
• •Browse and find context faster: Right-click a webpage and select Ask ChatGPT.
• •Browse and find context faster: Learn more about the built-in browser and the Chrome extension.
• •Review changes across repositories: See all repositories in a multi-folder project and the lines changed in each one. Select Review to inspect diffs across those repositories without switching between separate review views.
• •Refine generated images: Open generated images in an expanded viewer, and switch between Focused view and Canvas view. Add comments across images, choose the ones you want, and send targeted edits without leaving your conversation. Learn more about image generation.

Droid (Factory AI)v0.185.0

A per-server MCP connect timeout, plus fixes for stuck approval prompts, spec mode colors, and sign-in across multiple windows

July 30, 2026

• •New features: Per-server MCP connect timeout - MCP server configs accept a connectTimeout so a slow-starting server gets more time to connect instead of failing at startup
• •Bug fixes: Stuck approval prompts - An approval prompt no longer stays wedged when the request behind it is already gone, so Enter and Esc respond again
• •Bug fixes: Spec mode message color - Messages you send in spec mode keep the spec color when the view repaints or you resume the session, instead of looking like a normal turn
• •Bug fixes: Sign-in with multiple windows - Sign-in and MCP authorization now finish in the window that started them instead of hanging when more than one window is open (app)
• •Bug fixes: File diff animations - Opening and closing a file diff animates again instead of snapping into place (app)

Codex CLIv0.146.0

0.146.0

July 29, 2026

• •Name new sessions with /new or /clear, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011)
• •Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
• •Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
• •Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
• •Enable standalone web search for compatible custom model providers. (#34846)
• •Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)
• •Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
• •Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)

Cursor2026-07-29

Cursor, now on iPad

July 29, 2026

• •Bitbucket and Azure DevOps SCM support
• •Multi-PR sessions: when one chat creates multiple PRs, you can now open every one of them, not just the last.
• •Switch between teams that you belong to directly in the app