AI Coding Roundup — September 11, 2026: Claude Code v2.1.268 Hardens Gateway Security as Codex CLI's SDK Adds Max/Ultra Reasoning
September 10 turned into a security-and-plumbing day across the AI coding stack: Anthropic shipped a gateway-hardening release for Claude Code, GitHub Copilot tightened enterprise agent permissions while retiring a model, and OpenAI extended Codex's new reasoning-effort controls into its Python SDK. Here's what changed heading into September 11, 2026, and what's still quiet on OpenCode's side.
Claude Code v2.1.268: Closing the Gaps Gateway Users Were Hitting
One day after v2.1.267 introduced the maxEffortLevel cap, Anthropic shipped Claude Code v2.1.268 on September 9, 2026 — documented in the official changelog, a release focused almost entirely on gateway networking and cleaning up regressions from the past week.
- Added a startup warning for gateways when access_control.allow_cidrs is left empty, and introduced a gatewayInternalNetworks managed setting so organizations can allow /login on their own public IPv4 block without opening access more broadly.
- Fixed an Artifact tool schema regex regression, introduced back in v2.1.265, that was causing HTTP 400 errors on some third-party ANTHROPIC_BASE_URL endpoints.
- Fixed prompt caching breaking mid-session for SDK users, and fixed model-access denials that were showing up incorrectly after a restart.
- Fixed permission rules not being enforced correctly on symlinked directories, and tightened MCP server authentication handling.
- Capped WebFetch at a 300-second deadline by default, configurable via CLAUDE_CODE_WEBFETCH_DEADLINE_MS (set to 0 to disable the timeout entirely).
None of these is a headline feature on its own, but together they read as continued cleanup after v2.1.265's plugin-loading changes — gateway-networking defaults, cache correctness, and permission enforcement are exactly the categories that quietly break enterprise rollouts if left unpatched.
GitHub Copilot Tightens Agent Permissions, Retires MAI-Code-1-Flash
GitHub Copilot's changes this week sit on the policy side rather than the model side. Around September 9, GitHub rolled out enterprise-managed permissions for Copilot agent operations across its platforms, giving administrators finer control over what autonomous Copilot agents are allowed to do in a repository. A day later, on September 10, MAI-Code-1-Flash was deprecated across Copilot experiences and replaced by MAI-Code-1.1-Flash, which adds native vision support and a 73% lower list price. No action is required from existing users, but anyone pinning the old model ID in automation should switch over.
Codex CLI's Python SDK Catches Up With Max/Ultra Reasoning Effort
OpenAI's Codex CLI Python SDK reached v0.154.0 on September 10, 2026, adding max and ultra reasoning-effort values that mirror what shipped in the CLI itself a day earlier, plus ExternalMessage support for both synchronous and asynchronous calls, new history-selection behavior, and new metadata options for session management. It's a smaller release than the CLI's own v0.154.0 — which brought GPT-6-Astra support, experimental worktree sessions, and inline question-answering on September 9 — but it closes the gap for anyone building on Codex programmatically rather than through the terminal.
OpenCode: Quiet Since the Astra Rollout
The community-maintained OpenCode hasn't shipped a release since v1.18.30 on September 9, 2026, which added Astra system-prompt support for GPT-6 models and fixed Bedrock DeepSeek model IDs. That's a short pause by OpenCode's usual cadence of near-daily point releases, and likely just reflects the team letting the Astra rollout settle before the next batch of provider fixes.
Bottom Line
If you run Claude Code behind a gateway, v2.1.268 is worth updating for today — the allow_cidrs warning and gatewayInternalNetworks setting directly address configurations that were silently too permissive or too restrictive. Copilot admins should review the new enterprise agent-permission controls and swap out any hardcoded MAI-Code-1-Flash references. Codex SDK users building automation get the same max/ultra reasoning-effort options CLI users picked up a day earlier. OpenCode users have nothing new to install this week.
Resources & References
Comments
Share your thoughts and join the conversation