AI Coding Live News — Real-Time 𝕏/Twitter Updates & Breakthroughs

Chainguard@chainguard_dev·Collected 20d ago

👀82

🔥86

Chainguard ships four MCP servers so coding agents verify images, APKs, EOL status and policy live—server-side governance instead of prompt guardrails

On 2026-10-14 Chainguard announced four MCP servers for agent supply-chain checks, generally available to enterprise customers: cg-oci (image manifests/SBOMs/provenance), cg-apk (Wolfi package equivalents), cg-versions (upstream releases and EOL), and cg-api (org policy and attestations). Any MCP client (Claude Code, Cursor, and others) connects via OAuth; pagination and response caps are enforced server-side so agents stop hallucinating tags or recommending EOL packages. Complements the same-day Harness/Checks/Workspaces launch by wiring dependency choices to live product data.

Key Takeaways

Four endpoints: https://cgr.dev/mcp, apk.cgr.dev/mcp, versions.cgr.dev/mcp, console-api.enforce.dev/mcp over Streamable HTTP + OAuth 2.0
Live data: image SBOM/provenance, Debian→Wolfi package mapping, upstream EOL history, org policy/advisories—not model memory
Governance: server-side pagination (~25–50 default, 200 max) and response caps; cg-api hides tools your token cannot use
Headless: chainctl auth login --audience=<mcp-url> plus a headersHelper Bearer injector avoids Claude Code's ~1h OAuth re-login loop
Extras: docs MCP at mcp.edu.chainguard.dev (no sign-in); Skills MCP at skills.cgr.dev/mcp for on-demand hardening skills

Read full story

Linked Models & Agents:

🤖 Claude Code 🤖 Cursor 🤖 Kiro 🌐 Chainguard 🌐 Anthropic 🌐 Cursor

#Chainguard#MCP#SBOM#Wolfi#supply chain#agent security#Claude Code#Cursor

Anthropic@anthropics·Collected 34d ago

👀49

🔥92

Claude Code 2.1.286: stacked permission counts; resume keeps parallel-tool turns; secret redaction & model-fallback hardening

Anthropic shipped Claude Code 2.1.286 on 2026-09-30 (npm @anthropic-ai/[email protected]): permission prompts show stacked counts like "2 of 5"; --resume/--continue no longer drop turns after parallel tool-call crashes; broader secret/Bearer/URL-password redaction; one same-tier prior-model retry when the API refuses the default/alias; Remote Control disconnects when org policy disables it; Agent SDK TS 0.3.286 / Python 0.2.163 parity.

Key Takeaways

Release v2.1.286; npm ~2026-09-30T17:14:38Z
Stacked permission prompts show counts like "2 of 5"; fullscreen "N more" rows are mouse-clickable
--resume/--continue keep turns after parallel tool-call crashes; non-text tool/hook returns no longer 400
Secret redaction hardened for Bearer/Basic, URL passwords, ZWSP key names; /feedback zip JSON fixed
Agent SDK TS 0.3.286 / Python 0.2.163 parity; docs https://docs.claude.com/en/docs/claude-code/overview

Read full story

Linked Models & Agents:

⚡ Claude Sonnet 5.5 🤖 Claude Code (Anthropic)🌐 Anthropic

#Claude code#Anthropic#Permissions#Resume#Redaction#MCP#Agent SDK#Tooling#Release

cb_doge@cb_doge·Collected 46d ago

👀53

🔥90

View on 𝕏 ↗

Grok Build v1.0.36: hide dashboard session preview, org policy blocks unmanaged hooks, live background shell task rows

xAI shipped Grok Build v1.0.36 (2026-09-17). Features: dashboard setting to hide the selected-session preview, org policy to disable unmanaged hooks, and background shells as live streaming task rows. Fixes include sandbox trust exit, pinned-agent jump, Swift triple-quote highlighting, mixed-case reasoning_effort in config.toml, MCP plugin client-ID auth, and background subagent shell approvals no longer silently rejected.

Key Takeaways

Dashboard can hide the selected-session preview; orgs can disable unmanaged hooks via policy.
Background shell commands appear as live task rows with streaming output.
Fixes sandbox trust, pinned-agent jump, Swift triple-quote highlight, mixed-case reasoning_effort, MCP plugin auth, and silent rejection of background subagent shell approvals.

Read full story

Linked Models & Agents:

🤖 grok-build 🌐 xAI

#Grok Build#xAI#v1.0.36#Dashboard#Hooks#MCP#Sandbox#Subagent