What changed, who is affected, what it costs, what could break, and what to do next—plus durable technical guides and field reports.
Claude Code v2.1.269 (2026-09-11 19:17 UTC) ships 30+ items in one release. Six new capabilities: claude plugin eval (scored JSON+HTML report), /output-style [name] over Remote Control and headless, bashEditDiffEnabled for Bash tool file edits, OTEL_METRICS_INCLUDE_REPOSITORY VCS tagging, CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS, and CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS (1-256). Plus prompt-cache resume fix, mid-thought resume cache-reuse fix, headless session reply-loss fix on model switch, !-prefix permission rule scoping fix, attribution reminder override of CLAUDE.md fix, MCP reconnect on query-param reorder fix, permission_denials stream-json fix, and a sweep of ~25 operational fixes including v2.1.247-era terminal-key regressions.
The OpenAI changelog for September 10, 2026 published three substantial entries in one day. The Agents API moved to public beta — a managed Codex harness that handles session orchestration, context compaction, and recovery; OpenAI-hosted sandboxes or your-own-infrastructure sandboxes. GPT-Live 1 went generally available on the API at $0.05 per minute of voice, billed per second, with full-duplex voice that runs alongside a backend model or agent. Project API keys now support an expiration date at creation, with an organization- or project-level maximum-key-lifetime policy admins can enforce in Platform settings.
Claude Code v2.1.268 (2026-09-10 20:30 UTC) ships 30+ items in one release. Three secrets leaks — plugin/marketplace git-URL credentials, MCP `${VAR}`-resolved tokens, and a workload identity federation `jti reused` 401 — are closed. Two permission deny-rule bypasses — symlinked `/etc`/`/tmp`/`/var`/`/bin` and `env -C`/`eval`-wrapped commands — are closed. WebFetch now fails after 300s with a `CLAUDE_CODE_WEBFETCH_DEADLINE_MS` override. The v2.1.265 HTTP 400 regression on third-party Anthropic-compatible endpoints is fixed. The Claude apps gateway gains managed pricing integration, a `gatewayInternalNetworks` managed setting, and startup warnings for empty `access_control.allow_cidrs`.
OpenClaw tagged v2026.9.4 at 2026-09-11 07:22 UTC. It closes the loop on v2026.9.3's safer-updates foundation with automatic rollback for compatible failed updates, ships a unified Plugins workspace, prepared cloud sessions, GPT Image 2.5 in the picker, voice that returns delegated subagent results to Talk, and a read-only deployments mode. v2026.9.3, three days earlier, dropped Node 22 / Node 25 / earlier 24.x / earlier 26.x from the supported matrix with an explicit SQLite text-truncation warning, plus five SDK breaking changes the September 8 pillar did not surface. Plan a Node upgrade before you bump.
OpenClaw 2026.6.35 was tagged 2026-09-10 06:43 UTC and is explicitly labeled the "final June 2026 Extended Stable (LTS) release." The release hardens bundled providers and channel adapters: untrusted response bodies are bound, oversized inputs are rejected before expensive work, and safe recovery is preserved when transports fail. Organizations still on the 2026.6.x line should plan migration to the 2026.9 series before support concludes.
OpenAI Codex v0.154.0 stable was tagged 2026-09-09 22:37 UTC. The release adds GPT-6-Astra to the model picker and Amazon Bedrock catalogs, ships experimental `--worktree` / `/worktree` for isolated per-session checkouts, introduces inline questions that pause Codex without losing the user's draft, lets Windows sessions share a background Codex server with daemon lifecycle commands, completes Vim with `R` replace mode plus undo and dot-repeat, and preserves rich-text formatting in copied responses.
Claude Code v2.1.267 was tagged 2026-09-09 19:58 UTC. The release adds a top-level `maxEffortLevel` setting that caps effort on every provider (Bedrock, Vertex, Foundry) plus a `--system-prompt-snapshot off` flag for prompt iteration. The fix list is dominated by ~10 prompt-cache stability items that close cache-reuse breaks on resumed sessions, mid-session MCP reconnects, and `/model` switches, alongside a marketplace-entry backslash bypass fix and an expired-AWS/Google-credentials retry fix.
Anthropic shipped **Claude Code v2.1.265** on September 8, 2026 at 20:37 UTC, followed **3 hours 18 minutes later** by **v2.1.266** at 23:55 UTC as a targeted regression fix. v2.1.265 is the larger of the two: the release notes list roughly **fifty items** spanning new capabilities, security fixes, operational reliability fixes, and one privacy-relevant telemetry change. v2.1.266 is a single-item hotfix. For a builder who pins Claude Code in CI, in unattended agents, or in shared dev environments, v2.1.265 is the release to read end-to-end before bumping; v2.1.266 is the release to confirm you're on if v2.1.265 broke your setup.
OpenAI published GPT Image 2.5 Sunburst and Flare on the Sep 8 changelog with snapshot 2026-09-08, xhigh and max quality tiers, inpainting as a first-class feature, and a real Responses API tool path for multi-turn image editing. The integration is the story — the model names are the wrapper. Pricing published on the model pages but not yet in the public pricing table; the GPT Image 2 calculator does not estimate 2.5 consumption.
OpenClaw shipped v2026.9.3 stable on 2026-09-08 09:26 UTC. Twenty-two plus user-facing reliability, security, and channel fixes documented in the audited release body: worker transcript safety against stale workers publishing after turn close; cron-job persistence when an automation removes itself; OAuth-authenticated MCP tools staying available through token refresh; memory recall + database/WAL/embedding-cache usage visibility with safe offline recovery; Slack duplicate-reply avoidance, WhatsApp terminal-outcome delivery, Telegram Doctor-migration name retention, plugin recovery, session search across the older-window boundary, macOS Gateway switching isolation, chat startup with deferred transcript warming, realtime voice interruption handling across Discord/OpenAI/xAI paths. Upcoming deprecation: Plugin SDK context aliases (untrusted-named prompt-context aliases) become eligible for removal on or after September 8, 2026 — today.
OpenClaw shipped v2026.9.2 stable on 2026-09-06 02:15 UTC. Highlights: chat offloaded outside the Gateway event loop; automatic updates preserve active settings, enabled skills, and default-agent ownership; full GPT-6 Astra support via OpenAI API-key or ChatGPT/Codex account with async tools, WebSocket steering, and /think ultra; active, queued, and delegated replies now survive Gateway restarts; backups reject corrupt archive headers and preserve text with embedded NUL characters; Swarm enabled by default; cross-agent session access opens to all-session visibility by default.
Anthropic added `ant apply` to the ant CLI on September 3, 2026 (CLI v1.30.0). It creates and updates agents, environments, skills, memory stores, and deployments from files in your repository, with a `claude-lock.json` lockfile for CI reproducibility. Path-based references between resources replace ID lookups; GitHub URLs can pin skills to a resolved commit; CI must authenticate with Workload Identity Federation. `ant apply` cannot adopt Console-managed resources without an export, skill deletion is destructive, and concurrent applies are unsafe. Documentation comparison, not firsthand test.
Cursor published Self-Hosted Machines, the most consequential enterprise change to its agent platform since Cloud Agents launched. Code, build outputs, and secrets now stay on machines running inside the customer's own infrastructure, while the agent drives tool calls locally. Eight platform partners (AWS Lambda, Cloudflare, Daytona, Modal, Namespace, Vercel, E2B, Coder) have reference templates; the legacy Kubernetes operator and WorkerDeployment Helm chart are deprecated for new deployments. Computer use on Linux and Mac is now available on self-hosted workers. Gated to Enterprise tier. Documentation comparison, not firsthand test.
Anthropic shipped two Claude Code releases in the last 24 hours. v2.1.260 (Sep 3 23:48 UTC) adds a `/diff` fullscreen panel; v2.1.261 (Sep 4 19:58 UTC) is the larger of the two — about 60 changelog items with three new user-facing capabilities (`bashOutputMaxChars`/`taskOutputMaxChars` up to 128K, `/skill-doctor` showing unused skills + context cost, `--append-subagent-system-prompt-file` for prompts too large for the command line), an "Organization policy" diagnostic in `/status` and `claude doctor`, two security-relevant behavior changes (dangerous-`rm` safety prompt now catches positional parameters and `sh -c "..."` scripts; auto mode no longer auto-approves URLs that pack content into a public diagram renderer's URL), and the API timeout default raised from 3 to 10 minutes. Documentation comparison, not firsthand test.
OpenClaw released v2026.9.1 stable on September 3, 2026 at 19:47 UTC. Eight highlight sections beyond the Aug 28 v2026.9.1-beta.1 article (gateway recovery + Codex 0.150.1 bundling + Linux installer fix): Mermaid blocks render in Control UI + macOS + iOS + Android, fresh installs go from `npx openclaw@latest` to web dashboard in one prompt (detects Claude Code / Codex logins), per-identity skill libraries on shared Gateways with ZIP import + per-identity share/publish, `openclaw update` rolls back when post-update Doctor fails and preserves config + secret references, the Gateway recovers at startup under load and with large agent rosters, Codex approvals stick (Allow Always durable for MCP tools), approval cards reach the originating Telegram topic with requester title, and Android matches the web Control UI (chat screen, sidebar, appearance, six-line composer, recording fallback). Documentation comparison, not firsthand test.
OpenAI changelog September 3, 2026 launches GPT-6 Astra ('our most capable model, built for the hardest end-to-end work') plus three new Responses API controls: async tool calling, mid-turn steering over WebSockets, and change-reasoning-effort-mid-conversation with prompt-cache preservation. Hard migration constraints: Responses API required for tool calling, no custom temperature/top_p/logprobs, no `none` reasoning effort, and misalignment monitoring that can stop a conversation for review. Documentation comparison, not firsthand test.
OpenAI shipped Codex v0.153.0 stable on September 3, 2026 at 01:39 UTC. Five new user-facing capabilities: Vim mode `u`/`Ctrl+R` undo/redo with full draft preservation (including pasted content and attachments), plugin CLI can list/install/remove plugins from remote marketplaces, earlier usage-warning threshold for Plus/Team users, `tui.auto_recap = false` opt-out for TUI auto-recaps, and TUI history shows complete patches plus background-terminal input plus individual completed commands. One subscription-only capability: `features.context_management.experimental_mode` (disabled by default; activates token-budget context, history notes, and `new_context` tool for ChatGPT Plus / Pro / Pro Lite sessions — API-key sessions excluded). Plus operational durability: TUI sessions reconnect after app-server drops preserving drafts and pausing uncertain submissions for review, Full Access skips Guardian reviews for confirmation-only actions, Guardian review history survives compaction/restarts/forks, remembered MCP tool approvals are app-account-scoped, rollout compression includes shared histories.
Anthropic pushed Claude Code v2.1.259 on September 2, 2026 at 22:33 UTC. Two user-facing capability additions: `managedMcpServers` managed setting lets organizations push HTTP/SSE MCP servers to every user (stdio transports excluded by design), and `--permission-prompts none` gives unattended headless hosts a deterministic deny-on-prompt mode while the active permission mode keeps deciding. Plus a Bash `Read()` deny-rule bypass fix that closed option-value bypasses (`--ignore-revs-file=.env`, `-f.env`, `@file`), git diff/grep file operands, `cd DIR && cat FILE` compounds, and `grep -r`/`cp -r` over directories holding denied files. Plus a concurrent-session state corruption fix that ended MCP-server-disappearing and workspace-trust-resetting regressions when multiple sessions ran against the same `~/.claude.json`.
OpenAI changelog September 2, 2026 separates traffic-increase rate limiting (429 slow_down) from temporary model overload (503 server_is_overloaded — new). Affects every OpenAI API client, lets autonomous-agent retry layers distinguish causes. Documentation comparison, not firsthand test.
Cursor shipped an event-driven subscriptions model for Cloud Agents in the August 19, 2026 changelog that nobody has unpacked: cloud agents now subscribe to event sources (PRs they create, Slack threads, scheduled tasks), wake when something happens, and hold a goal until it is met. Plus five harness improvements (custom modes, subagents on isolated VMs, /goal command, steering without interruption). The agent-to-production story is no longer a single prompt-to-live-URL flow — it is a long-running autonomous loop that closes itself.
Claude Fable 5.1 + Claude Mythos 5.1 launched September 1, 2026. 1M-token context, 128k max output, always-on adaptive thinking at the same $10/$50 per million input/output tokens as Claude Fable 5 — but cache reads priced at $0.25/MTok instead of $1/MTok. Three breaking changes (no forced tool use, thinking blocks tied to producing model, edited-history rejection) and five additive features (per-message effort, turn-scoped system messages, between-tool progress, 4x cache cut, C2PA provenance) ship today across the Claude API, Bedrock, Claude Platform on AWS, Google Cloud / Vertex AI, and Microsoft Foundry.
OpenAI shipped Codex v0.152.0 stable on September 1, 2026 at 02:13 UTC. Six new user-facing capabilities: Vim `/` and `?` search with `n` and `N` repeat, rate-limit banners with action buttons, credential-refresh progress in the TUI (including Bedrock reauth), MCP server names that accept `: @ / .` (unblocking scoped/package/FQDN registries), per-MCP-tool `output_token_limit` with consistent truncation across session resumes, and app-server thread/shellCommand timeouts longer than one hour. One breaking default change: planning tool is disabled by default (re-enable with `tools.update_plan.enabled = true`). One credential-theft fix: cloud task requests now reject untrusted backend URLs and disable redirects to protect saved credentials.
Anthropic pushed Claude Code v2.1.257 on September 1, 2026 at 17:53 UTC. The release has two stories stapled together: Claude Fable 5.1 is now the default Fable model (1M context, $10/$50 per Mtok, $0.25/Mtok cache reads), and the bottom half is a long security sweep — a Containment-Escape auto-mode rule, a one-time prompt before outside-reads, plugin symlink escape blocked, MCP allow/deny list after-startup bypass closed, OAuth credential cleanup gap fixed, worktree isolation over-refusal relaxed, Bash deny-rule redirect bypass closed, and multi-cloud auth-header hardening on Bedrock / Mantle / Vertex / WIF / Foundry. Six distinct sandbox/auth/escape fixes in one release.
OpenAI shipped an Aug 29 changelog entry putting mTLS and X.509 workload identity federation into general availability on the OpenAI API. Both ride on the same per-project trust-anchor machinery; both are gated by RBAC (`api.mtls.read` / `api.mtls.write`). mTLS does not replace API keys — it gates them. X.509 WIF does not (yet) work in Codex. The path forward for regulated agent deployments is now production-real, not preview.