The September 2026 update to GitHub Copilot in Visual Studio adds pull request exploration through the Git agent, moves Bring Your Own Model to a new Agent (Preview) mode, and lets Copilot fix vulnerable NuGet packages from the Error List. The BYOM change is breaking, so check your model setup before updating.
Amp now lets you run its orbs, the remote machines where coding agents do their work, on your own infrastructure. The amp orb provider command relays spawn, pause, and delete requests from Amp to a dispatch program you write. Teams that want agents on their own servers should note the setup model and the October 29 pricing change.
Anthropic shared research on using Claude to find code that a deployment can reach but does not need, then restrict or remove it. Across 25 open-source projects with over five million lines, it reported 493 issues. In OpenSSH, about 4,500 lines of experimental post-quantum signature code reachable before authentication were addressed in releases 10.5 and 10.6. It is a concrete method for teams using AI in security reviews.