Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-30 · source-backed
promptfoo 0.122.2 (August 28) makes Codex's security analysis drivable as an evaluation target alongside ordinary model providers, plus a configurable Cloud auth header name. The same day's code-scan-action 0.2.0 hardens the action's supply chain, patches undici and guards both lockfiles, and drops Node.js 20 as a breaking change. (GitHub) Anyone pinning that action on a Node 20 runner needs to upgrade first.
Each link below shares sources, entities, or timing with this story.
A Chinese lab shipped a runtime that manages two American coding agents as subagents, and it went from repo creation to 145,439 stars in four days. deepseek-ai/deepseek-harness published dsh-v0.1.0-rc.7 at 12:01 UTC today, its first tagged release since the repo appeared on Au...
Waishnav/devspace (4,247 stars, v1.0.8 August 25) runs a local Node server exposing read, edit, search and shell execution over MCP, reached through a reverse proxy tunnel like Cloudflare or ngrok, with password-gated owner approval per client. The pitch is turning ChatGPT int...
Three things happened this month that only make sense together. Agent Plugins 1.0 shipped co-signed by six competitors: AWS, Anysphere, Microsoft, OpenAI, Vercel and Google (GitHub Changelog). It makes skills-plus-MCP bundles portable across clients. OpenAI's August 11 Codex c...
Before v4.1.15 on August 23, it only applied to tools also opted in individually, so flipping it appeared to do nothing. Anyone who left it on assuming it was inert has just widened their unattended tool surface across every connected server. (GitHub) Same release train fixed...
b-nnett/codex-subscription-router, created August 16 and already past 200 stars, builds a locally patched copy of the official ChatGPT desktop app and fans its single app-server connection out to one official Codex child process per account through a Go multiplexer, each with...
312 stars and 24 forks within 24 hours of appearing August 11, MIT (GitHub). Notable for targeting three harnesses at once, which puts it in the emerging agent-agnostic UI layer category rather than single-vendor plugin territory. One day old, no releases, no independent verif...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.