Stack layer / Update thread
Vercel's AI SDK harness layer now authenticates nine coding agents through their own subscriptions instead of API keys
Vercel Changelog
Policy dependency / Stack layer
A Bun packaging quirk left a vulnerable undici in Cline after the CVE was supposedly remediated
GitHub
Policy dependency / Stack layer
An audit of a production agent pipeline found a reported p99 latency of 2,147,483,647 ms, the signed 32-bit maximum, from a lifecycle clamp
arXiv 2609.12017
Policy dependency / Stack layer
PraisonAI's MCP auth policy validated credentials for api-key and bearer but waved through basic and OAuth
NVD
Policy dependency / Stack layer
Amazon and Microsoft Are Siding With Ratepayers Against Utilities on Data Center Power Bills
The Information
Policy dependency / Stack layer
CROSS-CATEGORY: Salesforce, Zendesk and Workable All Shipped Named Agent Portfolios on Sept 14, Each Metered in a Different Unit
Zendesk newsroom, Salesforce press release and Workable via GlobeNewswire (three independent Sept 14 announcements)
Stack layer / Threat pattern
51.1% of Multi-Version MCP Servers Changed What They Advertise, and 4.2% Repointed Their Endpoint to a Different Host Without Telling Clients
arXiv 2609.14119
Stack layer / Threat pattern
Cline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR Reviews
Cline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)