AI Coding Roundup — September 1, 2026: Claude Code, Copilot & Codex Ship Big Updates
The last week of August 2026 was an unusually busy stretch for AI coding tools. Anthropic pushed more than a dozen Claude Code releases, OpenAI's Codex CLI crossed into its 0.152 line, GitHub Copilot rolled out its biggest VS Code update of the month alongside a September 1st billing and model shake-up, and OpenCode plus Cursor kept shipping provider fixes and cloud-agent features. Here's what actually changed, with links back to the primary sources.
Claude Code closes a symlink security hole and starts streaming subagents live
The headline release was v2.1.251 on August 28, which shipped alongside two real security fixes: file tools could previously follow a symlink swap to read or write outside an approved directory, and plugin commands could point outside their own plugin folder. Both are patched. The same release added PreModelSwitch and PostModelSwitch hook events, live streaming of a foreground subagent's tool calls to Remote Control clients, a spend-limit bar in /usage, and a per-session prompt-cache line in /cost.
Earlier in the week, the same line of releases added:
- v2.1.248 (Aug 27) — a --restricted flag that strips out built-in tools capable of running commands or code, plus cross-session messaging on Bedrock, Vertex, and Foundry.
- v2.1.247 (Aug 26) — a SendFeedback tool that drafts a bug report from inside a session for review in /feedback, and a /claude-api cost-optimize command.
- v2.1.246 (Aug 25) — an Auto mode tab in /permissions and a startup warning for Bash allow-rules with a wildcard before the subcommand.
- v2.1.243 (Aug 25) — a Loops breakdown in /usage, a modelPicker setting, and keyless sign-in under /login.
- v2.1.252 (Aug 31) — the week's final patch, fixing Remote Control sessions that stalled for minutes when the connection to claude.ai degraded.
Full version-by-version detail is in the official Claude Code changelog.
OpenAI's Codex CLI reaches v0.152 with Vim search and safer MCP tools
Codex CLI moved fast too. v0.151.0 (Aug 29) added a configurable grace period for discovering tools from optional MCP servers and let extensions inspect or replace an MCP tool's result before it reaches the model — a meaningful safety hook for anyone wiring Codex into custom tool servers. The follow-up v0.152.0 shipped Vim-style / and ? search, rate-limit banners with actionable next steps, package-style MCP server naming, and per-tool output limits.
Earlier in August, Codex also picked up:
- v0.149.0 (Aug 20) — an interactive agents dashboard for searching, starting, and stopping tasks, plus /cd, /pwd, and /cwd commands for managing the working directory in TUI sessions.
- A codex queue command for sending messages into existing local or remote sessions.
- Vim mode improvements: text-object editing and a configurable interrupt-turn binding.
- Dependency upgrades: the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0, plus secure macOS notarization via Azure Key Vault.
See the full history on the Codex CLI GitHub releases page.
GitHub Copilot's September 1st shake-up: model deprecations and reopened billing
Copilot's August closed with its biggest VS Code update in months. The August 2026 releases spanning VS Code 1.132–1.135 added the ability to arrange agent chats side by side, a /btw command for opening a side chat that shares the primary chat's context and prompt cache, full-transcript search, sticky scroll for long conversations, and a multilingual on-device dictation model. Visual Studio separately shipped organization-level custom agents that org and enterprise admins can publish for use across every repository.
Two changes land today, September 1, 2026: several older models are being deprecated across all Copilot experiences as Grok 4.6 continues rolling out as a selectable model, and GitHub is reopening Copilot Business and Copilot Enterprise sign-ups for customers paying by credit card or PayPal, with an updated billing flow.
OpenCode and Cursor keep pace
OpenCode's 1.18.x line was mostly provider plumbing: v1.18.25 (Aug 28) fixed Azure authentication to work without requiring Bun, v1.18.24 (Aug 28) added Microsoft Entra ID login for Azure and stopped Bedrock reasoning responses from being cached as empty messages, and v1.18.23 (Aug 25) fixed Cloudflare AI Gateway routing for third-party providers.
Cursor spent August on its cloud agents. As of August 27, cloud agents no longer require a connected GitHub or other SCM — you can prompt an agent directly and Cursor creates a repo in the background, with port-forwarding for live preview and one-click Vercel publishing. That builds on the August 19 update that let cloud agents run as always-on background workers subscribing to events like a PR or a Slack thread.
What it means for developers
None of this week's changes are breaking on their own, but a few are worth acting on rather than just reading about. Anyone running Claude Code plugins or MCP servers should update past 2.1.251 for the symlink and plugin-path fixes. Teams on GitHub Copilot Business or Enterprise should check today's model-deprecation list before a scheduled agent run quietly fails over to an unavailable model. And if you're scripting against Codex CLI's MCP integration, the new tool-result inspection hook in 0.151 is worth building into any custom server you maintain.
Resources & references
Comments
Share your thoughts and join the conversation
