AI Coding Roundup — September 17, 2026: Claude Code 2.1.274 Ships a Massive Fix List, Cline Patches a Windows Path Bug

Yesterday's roundup covered Claude Code 2.1.273's mega-update, Gemini CLI's security-hardened v0.60.0, and OpenAI's GPT-5.5 retirement notice. Anthropic followed up within 48 hours: Claude Code 2.1.274 shipped on September 17 with a critical-memory warning, new MCP timing controls, and one of the longest fix lists of the month, spanning a stuck-session retry loop, several MCP transport bugs, tightened Bash permission checks, and dozens of VS Code, Claude Code on the web, Claude Tag, and Code Review fixes. GitHub Copilot's budget increase requests reached general availability on September 16, letting Business and Enterprise members ask for more AI credits the moment they run out instead of being blocked outright. Cline shipped two Desktop releases back to back: v0.0.29 added Enter-key message steering, and v0.0.30 on September 17 fixed a Windows bug that could run a program out of the workspace instead of the system, alongside a failed-updater fix and a full rebrand. OpenAI Codex, Gemini CLI, OpenCode, and Cursor show nothing new past what was already reported. Here's what actually changed as of September 17, 2026.

Executive Summary

• Claude Code 2.1.274 (Sep 17) adds a critical-memory warning, CLAUDE_CODE_MCP_STARTUP_WAIT_MS, new OpenTelemetry attributes, and fixes a stuck retry loop, several MCP transport and permission bugs, and dozens of VS Code, web, Slack, and Code Review issues.
• GitHub Copilot (Sep 16) budget increase requests reach general availability for Business and Enterprise, letting members request more AI credits when they hit their limit instead of being blocked outright.
• Cline Desktop v0.0.29 (Sep 16) and v0.0.30 (Sep 17) add Enter-key message steering, fix a Windows bug that could execute a workspace program instead of the intended system one, fix a failing Windows updater, and refresh the app's branding.
• No change: OpenAI Codex/ChatGPT, Gemini CLI, OpenCode, and Cursor have nothing new since their last reported releases.

Claude Code 2.1.274: A Memory Warning and One of the Month's Longest Fix Lists

The additions in 2.1.274 are mostly operational. Claude Code now shows a visible warning when memory usage is critical, with steps to free memory or restart safely, and a new CLAUDE_CODE_MCP_STARTUP_WAIT_MS variable bounds how long the first non-interactive turn waits for connecting MCP servers (set to 0 to not wait at all). On the telemetry side, the claude_code.llm_request trace span gains an effort attribute, and a new claude_code.managed_settings_resolved OTel event reports managed-settings sources and policy helper state. Teams running the Claude apps gateway get a configurable Postgres connect timeout, a startup warning when a replica exceeds its 256-request upstream limit, and IdP subject telemetry for Desktop and Cowork traffic.

The fix list is where this release earns its size. Sessions that got stuck endlessly retrying an "unexpected tool_use_id" 400 error now self-heal a corrupted transcript where possible, or end cleanly with a /rewind hint instead of looping forever. Several MCP transport bugs are fixed at once: legacy HTTP+SSE servers that answer the first request with a 4xx no longer fail to connect, Streamable HTTP calls no longer time out after roughly five minutes even when a longer per-server timeout was configured, and a 403 insufficient_scope error is no longer misreported as an expired sign-in. Security-relevant tightening includes Bash permission checks that now correctly prompt for commands looping over or assigning certain special shell variables, and worktree-isolated sessions refusing Bash commands with certain nested shell expansions that previously slipped through. Self-hosted runner sessions that used to fail every turn with a 401 after a few failed token refreshes now keep retrying and fetch a fresh token immediately. Full details, including the VS Code, Claude Code on the web, Claude Tag, and Code Review fixes, are on Anthropic's own changelog.

GitHub Copilot: Budget Increase Requests Reach General Availability

Previously, a member who exhausted their Copilot AI credit budget was simply blocked from credit-consuming features. As of September 16, that flow has a release valve: members can request more budget the moment they hit the limit, and the request routes automatically to whichever account pays for it, organization or enterprise. Owners and billing managers review pending requests under "Requests from members," then approve, adjust, or deny each one without leaving their settings; an approval immediately updates the member's budget and restores their access. The feature is generally available for Copilot Business and Enterprise plans on usage-based billing. Details are on GitHub's changelog and in the spending controls docs.

Cline Locks Down a Windows Path Bug and Adds Message Steering

Desktop v0.0.29 (Sep 16) lets you steer a queued message into the turn Cline is already running: pressing Enter with an empty composer while the agent works sends the first queued message into the current turn instead of waiting for it to finish. It also fixes the macOS Dock icon's edge-to-edge margins and relabels the session sidebar's sort toggle to show the mode a click switches to, rather than the one already active.

Desktop v0.0.30 (Sep 17) is the more consequential release. On Windows, a bare program name is resolved through the child process's working directory before Windows searches PATH — which meant Cline could end up running a program placed inside your workspace instead of the system binary it intended to call. That resolution order is now fixed, closing a real path-shadowing risk for anyone working in an untrusted or shared project directory. The same release fixes Windows updates failing with "Error opening file for writing" (an installer hook that never terminated the running backend), corrects a session-compaction trigger that compared a character estimate instead of the actual transcript size, stops a streaming tool from spinning forever after it had already finished, and ships a full logo and icon refresh across the app, Dock, taskbar, and installer. Full notes are on Cline's GitHub releases page.

No Change: OpenAI Codex, Gemini CLI, OpenCode, and Cursor

Re-checking each project's own source shows no movement since OpenAI's September 14 GPT-5.5 retirement notice, Gemini CLI's September 15 v0.60.0 security release, OpenCode's September 14 v1.18.31 ACP fix, and Cursor's September 10 Projects launch. None of the four has anything new as of September 17, 2026.

What to Prioritize

• Update Claude Code for the stuck-session and MCP transport fixes. Anyone hitting endless "unexpected tool_use_id" retries or Streamable HTTP timeouts gets immediate relief from 2.1.274.
• Expect new Bash permission prompts in edge-case scripts. Commands that loop over special shell variables or use nested shell expansions in a worktree will now ask for approval where they previously didn't.
• If you manage Copilot spend, turn on budget increase requests before the next usage spike. It replaces a hard block with an approval queue your billing admins control.
• Cline users on Windows should update to Desktop v0.0.30 now. The workspace-vs-system program resolution bug is a real risk if an untrusted or shared project directory can shadow a system command.
• Verify claims against each vendor's own changelog. Every version, date, and fix above was cross-checked against Anthropic's, GitHub's, and Cline's own changelog and release pages linked throughout.