
GitHub has released Copilot for JetBrains version 1.18.0, introducing significant controls for AI agent behavior in IDEs. Key features include assisted approvals for tool calls, which automatically accept low-risk actions while prompting for high-risk ones, and a new plan mode for the Codex agent that allows users to review strategies before execution. The update also enables organization-managed skills and custom instructions for both local and agent sessions, alongside persistent controls for MCP tools. Additional improvements include re-editing previous messages in agent conversations and enhanced inline chat reliability.
Read original
© GitHub ChangelogGitHub has permanently removed Node 20 from its hosted runners, forcing all JavaScript actions to run on Node 24. The safety net of the unsecure node opt-out is gone, meaning workflows relying on older action versions will break immediately. This shift eliminates legacy runtime support and introduces compatibility constraints for macOS 13.4 and ARM32 architectures. Maintainers must update their action metadata now, while workflow users need to upgrade dependencies to avoid CI failures.
© GitHub ChangelogThis release stabilizes Claude Code's core reliability by fixing persistent bugs in session resumption and prompt caching that previously caused data loss or infinite loops. It also tightens enterprise security with new Bedrock upstream support for IAM role assumption and mandatory guardrail application. The update addresses critical edge cases like proxy stream drops and oversized tool calls, ensuring smoother operation in complex development environments.
This release targets a specific bottleneck in long-context inference by optimizing the sparse flash attention prefill step for NVIDIA GPUs. By templating kernels to unroll loops at compile time, batched sparse operations drop from 586 microseconds to 244 microseconds on 49k context windows. This isn't just a generic speed bump; it makes handling very long documents significantly more efficient for users relying on sparse attention mechanisms. The change is already baked into the standard CUDA builds, requiring no special flags.
GitHub Copilot is finally addressing the security risks of AI agents running on your machine with a new local sandboxing feature. By default off, this preview allows developers to strictly limit what the AI can read, write, or access over the network for specific projects. It enforces these policies at the OS level, failing safely if restrictions cannot be applied rather than silently ignoring them. This shifts Copilot from a trust-based assistant to a tool with explicit, configurable boundaries, reducing the blast radius of accidental commands.