Devolutions released UniGetUI 2026.3.2 on October 15, and its headline feature is a new experimental Software Catalog that lets administrators build a curated list of approved software users can install with one click. The update also adds drag-and-drop sidebar reordering, a macOS Liquid Glass look, and small usability wins like scroll-position retention and better screen-reader announcements. Most practically, it fixes a bug that let pip updates corrupt Python environments by serializing those operations, alongside fixes for PowerShell module uninstalls, Chocolatey admin elevation, and several crashes. Built in about a week by six contributors, the release is the first major product milestone under Devolutions' 2026 acquisition and sits comfortably past the CVE-2026-10696 package-correlation fix from 2026.2.1.
Visual Studio Code 1.142 quietly makes the Copilot agent harness the default for new sessions and auto-migrates enterprise workspaces that use sandboxing or permissions. The update introduces preview Canvases for co-editing artifacts with agents and lets you move a chat between folders and Git worktrees without rebuilding its context. Smaller upgrades include a substantially expanded Markdown editor, harness names in chat titles, background shell controls, and a redesigned model picker. Taken together, the release cements Microsoft's strategy of steering developers toward its own SDK runtime while leaving third-party harnesses like Claude and Codex as opt-in alternatives.
Microsoft shipped another Visual Studio Code update today as one-PR patch by engineer Alex Ross that closed 14 user-filed issues in a single week. The culprit was a security change from the earlier 1.141.1 release, which made extension webviews go blank for anyone whose remote connection used an authority with uppercase letters. The fix restores case-insensitive authority matching while keeping resource containment and OS checks intact. Small by the numbers, but those 14 linked issues reveal just how many WSL and SSH users got caught out.
Visual Studio Code 1.141 shipped on October 7, 2026, transforming the editor into an AI agent control center with a unified Copilot harness, a session grid, cross-app handoffs, and cross-platform sandboxing. Microsoft followed up just six days later with Update 1.141.1, a security patch that closes two path-traversal vulnerabilities, including a Critical 9.6 remote code execution flaw (CVE-2026-102238). That RCE requires user interaction to exploit and shows no signs of wild use, but it affects every version from 1.0.0 through 1.141.0. Microsoft recommends upgrading to 1.141.1 immediately and reviewing your sandbox settings before handing agents broad access to files and the network.
Devolutions released UniGetUI v2026.3.1 today, a patch shipped just three weeks after its last major feature drop. The headline additions are a terminal UI (uniget tui) that shares your desktop profile, a cross-platform uniget command-line launcher, and a Devolutions Agent policy editor that enforces rules before package requests go out. Beyond the features, the release cleans up a broad swath of regressions, including WinGet post-upgrade fixes and crashes from Windows-only commands running on macOS and Linux. It's a small, responsive update that leans toward reach and reliability rather than another wave of big new capabilities.
Visual Studio Code 1.141 makes cross-platform sandboxing generally available in the Copilot agent host across Windows, macOS, and Linux to limit what autonomous agents can reach on your machine. The update also lets you continue agent sessions live between VS Code, the Copilot app, and the Codex CLI without reloading, while a new grid layout helps you juggle multiple conversations at once. Microsoft is tightening enterprise control with enforceable sandboxing, session attribution telemetry, and a smoother migration to unified managed settings, and finally retired the single-value github-enterprise.uri setting in favor of a list-based alternative. It's a consolidating release that doubles down on VS Code's pivot from a code editor to a control center for code-writing agents.
Microsoft released Visual Studio Code 1.140.0 today, folding the Copilot agent harness into a first-class role that runs on the persistent Agent Host for portable, window-independent sessions. The release's most ambitious feature is HydraFusion, a research preview that orchestrates multiple AI models to draft, critique, and revise code while cutting estimated costs compared to a Claude Opus 5 baseline.
PeaZip 11.3.0 shipped today as a security-focused release from developer Giorgio Tani that the project explicitly recommends you upgrade to. The biggest change makes a master password mandatory for the built-in Password Manager, closing a hole where stored credentials went unprotected. It also brings improved ZPAQ handling for encrypted archives, a new "Open With" picker behind Shift+F12, two new Blue-themed looks, and updated 7z/p7zip and PEA backends. You can grab it now from GitHub and SourceForge, or via Flathub on Linux — just download from the official repos and verify the SHA-256 hashes.
VS Code 1.139.1 shipped on September 25, 2026 as a patch release, so the remote agent sessions and faster session lists you may have seen advertised had already arrived in 1.139. Only one of its four commits changes product behavior, fixing how managed settings behave when a server refresh fails. Before the patch, a failed refresh silently dropped enterprise policy controls for as long as the gap lasted, leaving restrictions quietly lifted every hour. The remaining three commits are release housekeeping: a version bump, a merge, and a skip for a flaky Linux test whose real fix sits on main.
Visual Studio Code 1.139 bringing large agent session lists that load up to 12x faster by using a central catalog instead of scanning every database. The release extends Dev Container support to remote SSH, Tunnel, and WSL hosts so agents can build and test projects with the correct toolchain without duplication. Alongside those agent upgrades, VS Code adds a compact session view, in-place renaming, word wrap indicators, and smarter bracket auto-closing to smooth out everyday editing. The update is available now for Windows, macOS, and Linux, with an Insiders build already at v1.140 for early testers.
Visual Studio Code 1.138 launched today, pushing Microsoft's Agent Host architecture into everyday use. The update lets agent sessions run inside local Dev Containers, jump between the ChatGPT app and VS Code, and switch between Copilot and ChatGPT subscriptions mid-conversation. Microsoft also added session hygiene features like auto-archiving merged sessions, a completion confetti animation, and badges that flag sessions needing attention. Not everything lands immediately, since much of it sits behind Preview toggles and settings, so it's worth knowing before you expect the full stack on launch.
Devolutions shipped UniGetUI v2026.3.0 on September 15, 2026, its biggest feature release under the company's ownership in a while. The headline updates let you schedule four heavy background tasks—update checks, auto-updates, and local and cloud backups, on independent schedules, plus mark individual packages for automatic updates instead of applying it globally. It also brings real zero-footprint portable mode, expanded Start Menu shortcut controls, and security hardening against PowerShell injection and path-traversal attacks. You can download it from the Microsoft Store, WinGet, Scoop, Chocolatey, or the GitHub Releases page, with Windows, Linux, and macOS builds compiled with NativeAOT.
Visual Studio Code 1.137 launched today, introducing the Agent Host architecture and an open protocol to decouple AI sessions from workspaces so they can survive folder closures and run remotely over SSH. The update rolls out scheduled Automations for recurring tasks, an experimental Voice Mode for hands-free agent interaction, and tighter GitHub Issues and Pull Request integration directly inside the Agents window. While the heavy agent features target power users already running AI workflows daily, the new architecture provides the portable, protocol-defined lifecycle necessary to make autonomous coding agents practical.
Microsoft released Visual Studio Code 1.136.2, delivering quick patches for two distinct issues introduced just days ago in the 1.136 feature drop. The update resolves a session state bug where Copilot Agent Host sessions would remain stuck in an "In Progress" state after subagent completion, alongside a regression fix for the tab close button that could accidentally trigger "Close Others." These refinements build on the 1.136 release's major architectural shift toward agent orchestration, which introduced the open Agent Host Protocol and experimental features like Agent Merge for automating pull request reviews. Developers can install the patch immediately via the auto-update mechanism or manually from the official downloads page to ensure their multi-root agent sessions behave correctly.
Microsoft has shipped Visual Studio Code 1.136.1 as a hotfix release. The update addresses updated default prompts identified during the release candidate phase.
Visual Studio Code 1.136 ships today, introducing the Agent Host, a dedicated process that isolates AI agents from the extension host so sessions persist across window closures and multiple windows can sync to a single session. Microsoft is also releasing the open Agent Host Protocol (AHP), enabling third-party harnesses like the Copilot SDK and Claude Agent SDK to integrate with a unified interface while unlocking preview features such as Agent Merge for automated PR resolution. The update adds remote agent execution over SSH and dev tunnels, multi-root workspace support for agents, and a redesigned Agents window with chat hierarchies and a unified input field.
Visual Studio Code 1.135 launches the Agent Host Protocol, an open standard that transforms the editor into a universal runtime for AI agents and allows coding sessions to move seamlessly between applications. The release introduces "Rubber Duck," an experimental feature where complementary models review each other's work, closing 74.7% of the performance gap to flagship models on SWE-Bench Pro. External Agent Sessions now let developers resume work started in other tools, though continuing these sessions typically requires a Copilot subscription. Microsoft has also rolled back the sandboxing rollout for local agents to zero percent as it shifts engineering focus to the new host infrastructure and a new single-pane default layout.
Visual Studio Code 1.133 introduces a dedicated Agent Host process that decouples AI agents from the editor, enabling shared multi-window sessions and remote execution. Microsoft pairs this architectural shift with an open Agent Host Protocol (AHP) spec, positioning the communication layer alongside LSP and DAP to support extensible third-party tooling. The update also delivers developer-friendly features like mixed Anthropic and Copilot model switching in Claude sessions, an experimental toggle to skip GitHub sign-in, and auto-reloading HTML in the integrated browser. The update is now rolling out to Windows, macOS, and Linux, with early testing available through the Insiders build.
Microsoft released Visual Studio Code 1.132.1 on Tuesday to address seven security vulnerabilities across the Chat, Terminal, Electron, and network subsystems. The patch arrives just six days after the feature-rich 1.132 release, which introduced a major architectural shift via the new Agent Host Protocol. Critical remote code execution flaws were patched in the integrated browser and web URL payloads, while four additional fixes target the expanding AI agent attack surface. Users should force a check for updates immediately to secure their development environment.
Microsoft has released Visual Studio Code 1.132, doubling down on its transformation from a code editor into an AI agent orchestration platform with four headline features. The update brings the long-awaited Agent Host architecture to a smoother stable rollout, allowing Copilot, Claude, and Codex to run in isolated processes while /btw side chats and element-level browser annotations redefine how developers interact with AI workflows. On-device multilingual dictation now leverages Microsoft's open-source Nemotron 3.5 model, keeping audio data local and adapting to shell syntax in real time. Meanwhile, seven community pull requests address persistent memory leaks, and the Python Environments extension finally reaches 100% default rollout.
