Snack Packs

Snack Pack #5: Mark the dates before the switches flip

Two dates are closing in on your GitHub setup. The legacy GitHub app in Microsoft Teams retires on Nov 16, Cursor cloud agents can now publish shareable live apps and OpenAI opens GPT-6 Cyber to a select group of Daybreak Red defenders.

Dependabot alerts pause on idle repositories on Dec 8, while Claude Code’s “Don’t ask again” can save secrets, Claude adds IP allowlists and Copilot offers Claude Fable 5.2.

1. 01

   Other

   Legacy GitHub Teams app retires Nov 16
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
2. 02

   Cursor

   Cursor cloud agents ship shareable live apps
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
3. 03

   Other

   GPT-6 Cyber joins Daybreak Red for defenders
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
4. 04

   Other

   Dependabot alerts turn off on idle repos Dec 8, 2026
   🌶️🌶️Worth a lookMedium: worth a look

Snack Pack #4: Check what your editor let in

One bad extension can leave a key behind. Cursor pulled a fake Claude Code build from its marketplace after it tried to plant an SSH backdoor, while Claude Code, the Gemini API and OpenAI put dates on fast mode, older models and a shared ChatGPT and Codex allowance.

Claude Code also fences in file edits, and Copilot moves into JetBrains Air.

1. 01

   Claude Code

   Cursor Claude Code malware: check SSH keys
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
2. 02

   Claude Code

   Opus 4.8 fast mode in Claude Code ends Nov 30
   🌶️🌶️Worth a lookMedium: worth a look
3. 03

   Gemini

   Gemini 2.5 Pro and Flash reroute on Dec 1
   🌶️🌶️Worth a lookMedium: worth a look
4. 04

   ChatGPT

   ChatGPT and Codex will share one usage limit in December
   🌶️🌶️Worth a lookMedium: worth a look

Snack Pack #3: Let your agents do the clicking

Your agents just took on more of the clicking. OpenAI’s GPT-6.1 Terra takes over screen chores, while OpenCode, Cline and Claude changed things your setup may rely on. Copilot now picks models and runs workflows, Replit’s Monitoring Agent covers on-call, and Grok Bot logs in without ever seeing your password.

1. 01

   Other

   GPT-6.1 Terra: OpenAI’s computer-use model at half the price
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
2. 02

   OpenCode

   OpenCode GitHub Action removed: what to do
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
3. 03

   Cline

   Cline shuffles its default models again
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
4. 04

   Claude

   Claude apps are switching to auto mode
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)

Snack Pack #2: Hand off the chores, keep the final say

Hand off the chores, keep the final say. Claude Duet takes chores off your plate but asks first, and standalone Claude Design is closing. Then check your setup: PHP and Pydantic AI shipped security fixes, Claude Code fixed Bedrock and Vertex requests, and Cline’s default model moved twice.

1. 01

   Claude

   Claude Duet works while you step away
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
2. 02

   Claude

   Standalone Claude Design closes Dec 14
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
3. 03

   Other

   Patch PHP now: two critical remote-code bugs
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
4. 04

   Pydantic AI

   Pydantic AI patches a High web_fetch bug
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)

Snack Pack #1: Your agents got a babysitter

Your agents got a babysitter. Copilot CLI’s Autopilot no longer stalls on a hook’s “ask” when nobody is watching, and Cline changed its default models for unpinned setups on Cline, OpenRouter and about 20 other providers. Plus OpenCode stops auto-updating and Copilot learns to fix your security alerts.

1. 01

   GitHub Copilot

   Copilot CLI: hooks that don’t hang the babysitter
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
2. 02

   Cline

   Cline swapped your default model
   🌶️🌶️🌶️Act nowSpicy: act now (security, deadline, breaking, big launch)
3. 03

   OpenCode

   OpenCode 1.19: the on-ramp to OpenCode 2
   🌶️🌶️Worth a lookMedium: worth a look
4. 04

   GitHub Copilot

   Copilot will now fix your security warnings for you
   🌶️🌶️Worth a lookMedium: worth a look