Snack Pack #2: Hand off the chores, keep the final say
Week of Oct 16–22, 2026 · 9 snacks · ~9 min
Hand off the chores, keep the final say.
Claude Duet takes chores off your plate but asks first, and standalone Claude Design is closing. Then check your setup: PHP and Pydantic AI shipped security fixes, Claude Code fixed Bedrock and Vertex requests, and Cline’s default model moved twice.
Nutrition Facts
Serving: 1 Snack Pack · ~9 min
Counts from this issue · 17 cards · Hype: 0 g.
Here’s what changed in your agent tools this week, and what to do about it. Every bite links to its source. No funding fluff. No “AI will change everything.” Just what shipped, what changed, and why it might matter to you. A fresh pack lands every Thursday.
Claude Duet works while you step away
Claude Duet checks your apps and tells you what needs you. Anthropic’s new app sends a morning brief, takes on chores on its own cloud computer while you’re away, and asks before it sends, pays, signs or deletes anything. It’s a research preview by waitlist for Pro and Max subscribers.
Who cares Claude Pro and Max subscribers juggling lots of work apps, especially small business owners.
Source: Anthropic: Claude Duet announcement · Claude Help Center: get started with Claude Duet
Standalone Claude Design closes Dec 14
Action needed: move your design systems out of standalone Claude Design before Dec 14, 2026. That’s when claude.ai/design closes and starts sending you to Claude, where Claude Design now lives and new designs are created as artifacts.
Save any chats and comments you need first, because they don’t carry over.
Who cares Anyone with design systems, chats or comments in the standalone Claude Design site.
Source: Claude Help Center: migrate from standalone Claude Design
Patch PHP now: two critical remote-code bugs
PHP users, update now: two critical bugs can let an attacker run code on your server without logging in. PHP’s maintainers shipped the fixes on Oct 21, 2026 in 8.5.12, 8.4.27, 8.3.36 and 8.2.35.
OpenAI says researchers at Calif found one of the flaws using GPT-5.6 Sol, and Wiz independently reported both.
Who cares Anyone who runs or hosts a website or web app on PHP, especially with Apache mod_php.
Source: PHP security advisory: critical RCE fixes, Oct 21, 2026 · OpenAI: Patch the Planet PHP disclosure, Oct 21, 2026
Pydantic AI patches a High web_fetch bug
Pydantic AI users, update now: a High-severity fix stops crafted web pages from tying up your app. When web_ fetched attacker-controlled HTML with many elements, converting it could delay unrelated work in the same process.
The maintainers published the fix on Oct 21, 2026: upgrade to 2.59.0, or 1.107.9 on v1.
Who cares Anyone whose Pydantic AI agent uses web_fetch_tool on pages an attacker can influence.
Source: Pydantic AI web_fetch security advisory, Oct 21, 2026
Pydantic AI keeps MCP tokens out of traces
Pydantic AI users, update now: two Medium security fixes are out, one for MCP credentials that could reach OpenTelemetry traces and one for the Vercel AI and AG-UI adapters.
Upgrade to 2.58.0, or 1.107.8 on v1, then restrict access to old traces and rotate any credentials they exposed.
Who cares Anyone using MCP tools in Pydantic AI with OpenTelemetry tracing on, or serving an agent through the Vercel AI or AG-UI adapter.
Claude Code fixes its Bedrock and Vertex snag
Bedrock and Vertex users, update now: Claude Code’s failing requests are fixed. The previous release could fail every request on Vertex, Bedrock and other providers when the endpoint or a gateway rejected tool search. Claude Code now retries without it.
Who cares Claude Code users on Vertex, Bedrock, other providers or behind a gateway, plus admins who manage MCP allowlists.
Unpinned Cline setups got a new default model
Check your model: unpinned Cline provider setups now default to Gemini 4 Argon. OpenRouter stays on Claude Sonnet 5.5, but over 20 other providers change defaults too, so pin the model you want to keep.
Also new: Cloud sessions, rolling out gradually, run a job in a hosted sandbox on a GitHub repo and branch you pick and keep going after you close the editor.
Who cares Cline users who never pinned a model, and anyone who wants a task to keep running after the editor closes.
Source: Cline v4.1.25 release notes
Cline CLI and Desktop default to Sonnet again
Check your model: the Cline provider’s default in Cline CLI and Desktop is Claude Sonnet 5.5 again. It’s back at the top of Cline’s recommended list. Also fixed: GPT-6 models now work on OpenAI and Azure OpenAI-compatible endpoints, where every request used to be rejected.
Who cares Cline CLI and Desktop users on the Cline provider who never chose a model, and anyone calling GPT-6 models through OpenAI or Azure endpoints.
Source: Cline v3.0.73 release notes · Cline Desktop v0.0.48 release notes
Six Copilot models just left the picker
Action needed: six Copilot models were deprecated on Oct 19, 2026, including GPT-5.5, GPT-5.4 and Grok 4.5. Move workflows and integrations to the suggested alternatives, such as GPT-6.1 Sol, GPT-6 Luna, Gemini 3.8 Flash and Grok 4.7.
Who cares Anyone with a Copilot workflow or integration that names one of these six models, and Copilot Enterprise admins who manage model policies.
What’s a security advisory?
A security advisory is the “patch me” note for a piece of software. When a project finds a security hole, its advisory names the affected versions and the earliest version with the fix, so you know exactly what to update to.
Each one carries a severity: Low, Medium (also called Moderate), High or Critical.
On GitHub it also gets an ID that starts with GHSA- (GitHub Docs: what’s inside a security advisory).
Try this: open our Pydantic AI web_fetch Daily and spot its severity and the version to update to. New here? Start here.
Claude Duet: an AI helper that asks first
Your overflowing to-do list just got a teammate, because Claude Duet keeps an eye on your work apps, takes on chores you hand it and asks before it acts for you.
It works from its own computer in the cloud, so jobs keep going after you put your phone down, and it stops for your OK before it sends, pays, signs or deletes anything. It’s a research preview by waitlist for Claude Pro and Max subscribers, in one region for now.
Full Main Course: 7-min read
Sources
- Anthropic: Claude Duet announcement
- Claude Duet product page and FAQ
- Claude Help Center: get started with Claude Duet
Show all 4 sourcesShow fewer
Let the next advisory find you
Try it now:
- On GitHub, open your repository’s Settings, then Advanced Security in the “Security and quality” section of the sidebar.
- Next to Dependabot alerts, click Enable. For every repo you own at once, use Enable all in your account’s security settings and tick “Enable by default for new repositories.”
- From then on, Dependabot raises an alert when it finds a vulnerable dependency, and people with write, maintain or admin access to the repo get notified.
Coding on the go with Claude Code
Plays from YouTube when you press play.
Video Summary
- A cloud session runs Claude Code on a virtual machine (a computer in the cloud), not your laptop. It copies your repo (your project’s code on GitHub) and works on its own branch (a separate copy of the code), so it keeps going while your laptop sleeps.
- Good for long jobs like a big refactor or migration, ideas that hit you away from your desk, or several tasks at once. It counts toward your plan’s limits, with no extra charge for the virtual machine.
- Connect GitHub and pick which repos Claude can see. Then check in from the phone app, review the changes and tap Create PR (a pull request: a proposed change you approve before it joins the main code).
On screen: Desktop and phone app: a sign-up form bug fixed while the laptop is closed, animated cloud-session diagrams, GitHub connect screens, a diff reviewed on the phone, and claude --teleport in a terminal.
After watching you can: Hand Claude Code a task in the cloud, close your laptop, and answer its questions from your phone.
Short on time? Watch just:
Grafana MCP server
Ask your agent about a metric and get a chart back, not a wall of numbers. Grafana’s official server now draws Prometheus query results as an interactive chart in hosts that support MCP Apps, and it can create Mimir, Cortex and Loki alert rules.
Source: mcp-grafana v2.1.0 release notes
Cloudflare Agents
Agents you build on Cloudflare can keep their skills in a real workspace. Agent Skills in the agents SDK now read and write a Computer workspace, and a chat turn that keeps running out of memory now stops after five interrupted attempts instead of retrying again and again.
MCP reference servers
New spec, old client, same servers. The official everything, filesystem, memory, sequential-thinking, fetch, git and time servers now support the modern MCP spec while still answering older clients, and the TypeScript ones now need Node 24 or newer.
Patch, pin, then let the helper in
Security fixes, a deadline and two rounds of model musical chairs filled the tray, while Claude Duet showed what an agent that asks first looks like.
- Update now: Gemini CLI no longer empties a project’s settings file when you add or remove an MCP server in a folder you haven’t trusted (our Daily).
- Update now: MCP Inspector 2.12.0 fixes three security holes in earlier v2 releases (MCP Inspector 2.12.0 release notes).
- Claude Code warns you before resuming an old chat would eat into your usage limit (our Daily), and idle compaction now has an off switch (our Daily).
- Claude Security on Claude Enterprise now keeps scanning as your code changes (our Daily).
- Copilot admins can now set model policies with a script (our Daily).
- Closed Codex, but it’s still running? Our Main Course on its background helper explains why.
That’s the pack. Pass a snack to a friend.