Skip to content
NO FEED

Understand the changes. Choose the tools. Put AI to work.

No. 038 · 24 September 2026 · 3 min← No. 037 · No. 039 →
SIGNALMODERATE|SHIPPED 2|SKIPPED 5

The one thing

01

Claude Code skips AGENTS.md whenever it cannot fetch a remote flag, and nothing on Anthropic's pages says that is fixed.

Claude Code 2.1.277 added AGENTS.md as a fallback when a project has no CLAUDE.md. The loader is a built-in plugin whose availability is decided by a remote feature flag, with false as the fallback. Set DISABLE_TELEMETRY or CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC — to any value, including 0 — and the file is never read, with no warning.1

The reporter's canary test also found that clearing the variables in a project's .claude/settings.json has no effect. A second reporter on the issue says the file is skipped in the first session after install even with telemetry on, because the flag is not cached yet — which is every fresh CI runner.2 Bedrock, Vertex and gateway users hit the same path, since the flag cannot resolve there.1

The v2.1.281 release notes, published at 19:19 UTC, list no AGENTS.md change, and issue #95690 was still open when we read it at 06:00.23

VERDICT · WAIT — Do not rely on native AGENTS.md loading yet. Put a one-line CLAUDE.md containing @AGENTS.md next to it; @ imports do not depend on the flag.1
The gate, and the one override that works
var W = !1;                                   // isOnByDefault: false
var B = () => Oa("tengu_agents_md_mod", W);   // isAvailable: remote flag, fallback false

Excerpt from the 2.1.280 bundle as printed by the reporter.1 A session-level claude --settings '{"env":{"DISABLE_TELEMETRY":"","CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC":""}}' works from the second session on, which is no help on an ephemeral runner.

One commenter on the issue notes that DO_NOT_TRACK is the variable that reads as a boolean; the two above treat any non-empty value as on. We have not tested that ourselves.

Shipped

02
Breaking

Node 20 is gone from GitHub Actions runners, and so is the opt-out

Runners now execute JavaScript actions on Node 24, and ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION no longer works.4 If you maintain a JavaScript action, set runs.using: node24 and cut a release; if you consume one, move to a version that supports Node 24. Self-hosted runners on macOS 13.4 or earlier, or on ARM32, are no longer supported.

MATTERS TO · Anyone pinning an old third-party action by SHA, or running self-hosted runners on older Macs or ARM32 boards.
nofeed.dev/issues/2026-09-24/actions-node-20-removed/
Wait

The GitHub Copilot app can sandbox local sessions per project

Per-project policy covers extra read/write, read-only and denied folders, outbound and local network, and whether Git and GitHub CLI credentials are passed in.5 If the OS cannot enforce the policy, the shell fails instead of running unsandboxed. It is off by default, public preview, and configured separately from Copilot CLI; /sandbox on applies it to a running session.

MATTERS TO · Teams letting an agent run shell commands against a working tree that also holds credentials.
nofeed.dev/issues/2026-09-24/copilot-app-local-sandbox/

The conversation

01
The claim — including ours

The Hacker News title says the AGENTS.md gate is fixed. The primary pages do not.

From the floor
  • mpoteat, Hacker Newsreader-posted, unverified; identity not confirmed, and not reflected in the release notes

    Wrote that the gate was a rollout artifact kept switchable by feature flag, and that it is "already fixed as part of v2.1.281 releasing today".

  • pszypowicz, author of the post and commenter on issue #95690first-hand, reproduced on 2.1.280 with a published method

    Canary test in an empty directory, two sessions per setup: with either variable set, AGENTS.md never loaded; a one-line @AGENTS.md CLAUDE.md loaded it with telemetry still off.

Our take

The fix may well be real and behind the same flag it is meant to remove. Until a release note or a closed issue says so, test it: the canary check takes two commands and one minute on your own runner.

Hacker News was swept in full: 40 stories seen in the window, 15 above 80 points, with comments. The X layer did not run on today's window: the newest ai-dev-x-accounts file (22 September, a roster of about a hundred accounts) holds a placeholder instead of posts, and the newest ai-dev-x keyword digest was collected 23 September 05:30 UTC, about 24.5 hours old, 40 posts kept of 420 seen — read as background only, and it covers the launch day we reported in No. 37. The Reddit digest for 23 September holds one post, and a live pulse across six subreddits returned nothing.

Skip this

05

Everything we saw

62
62 candidates scanned · 3 used in this issue — the rest, with the reason each one was left out
The receipt. Ranking is only trustworthy if the discarded pile is visible, so here it is: everything the collectors surfaced in the window, with its signal and what we did with it.
ItemSourceSignalCall
Claude Code reads AGENTS.md only when telemetry is onHacker News / blog.szypowi.cz463 points, 262 commentsLed the issue; fix claim checked against release notes and issue
Node 20 is no longer available in GitHub ActionsGitHub ChangelogFinal notice, opt-out removedPrinted as Breaking
Local sandboxing in the GitHub Copilot appGitHub ChangelogPublic preview, off by defaultPrinted as Wait
anthropics/claude-code v2.1.281GitHub ReleasesTwo prompt-cache loss fixes; no AGENTS.md entryCited in the lede and Still Developing
More ways to request and configure Copilot code reviewsGitHub ChangelogPersonal settings on every plan, enterprise default effortSettings surface; changes no decision
GitHub: incident across several servicesgithubstatus.comDegraded API requests, 18.7h, impact minor, resolvedLong but minor; logged
Cursor: Cloud Agent Dockerfile buildsstatus.cursor.comNew builds blocked, 1.5h, impact minor, resolvedWeather
Cursor: Grok 4.7 degradation; OpenAI: two ChatGPT incidentsstatus pages0.1h, 0.4h and 0.7h, all minor, resolvedWeather
ggml-org/llama.cpp v0.5.0GitHub ReleasesServer binds to several addresses; additive API changesNothing removed; no decision changes
google-gemini/gemini-cli v0.61.0GitHub Releases1.3k-character notes, no breaking sectionDropped
OpenHands v1.23.0, goose v1.52.0, pydantic-ai v2.49.0GitHub ReleasesMinor releases, no breaking or removal sectionsDropped
MCP TypeScript SDK server 2.1.0 / node 2.1.0 / 1.30.1GitHub ReleasesMinor bumps on both linesNot read in full; watching
cline CLI v3.0.65, SDK v0.0.86; vercel/ai 7.0.113, 6.0.290, 6.0.289; openai-python 3.19.1–3.19.2; litellm v1.99.3, v1.100.2, v1.101.1; langgraph-cli 0.4.32; langchain-anthropic 1.7.4, langchain-openai 1.6.5; agent-native, orca, BrowserSkill buildsGitHub ReleasesPatch cadenceNo decision changes
Vercel: Blob stores unlimited on every plan; Connect supports TanStack AIVercel ChangelogPlan limit liftedOff the AI-development beat
Australia: OpenAI agent accessed a government portal; Medicare breach reportHacker News95 and 159 pointsNot opened; no primary source in the window; watching
Once Claude can measure something, it can make it fasterHacker News / claude.dev190 pointsVendor engineering post; nothing to install
Measuring the Serving Stack Instead of the Model; CliffCompaction; A2MarXivCarried in No. 37No new paper in the 48h sweep changes practice
ai-dev-x-accounts digest, 2026-09-22X digestFile present, contents a placeholderSource unreachable
Reddit live pulse across six subredditsReddit0 posts for the windowFallback ran and came back empty
EOF

End of feed. That is everything from the window worth your time.
Explore more news, analysis and practical guides on NO FEED.

Still developingThe prompt cache keeps getting fixed piece by piece (No. 37). Claude Code v2.1.281 closes two ways it was silently lost: an MCP server disconnecting mid-conversation with tool search off, and a session resumed during a pending permission prompt.3

The useful part, in your inbox.

One complete edition every weekday, with practical takeaways.