GitHub's agent plugin standard shipped with its rivals' names on it
The lead
The day's most consequential release is a specification, and what matters is whose names are on it. GitHub shipped Agent Plugins 1.0 not as a GitHub format but as a shared standard carrying AWS, Anysphere, Microsoft, OpenAI and Vercel — a plugin built once that runs in competitors' clients. GitHub Copilot conceded the same from inside: Ollama support and persistent memory landed in the JetBrains client, making the IDE a host for models GitHub does not own. Atlassian took the trade from the other end, indexing multi-repo source into the Teamwork Graph via Code Context and exposing it over MCP — selling the Graph as substrate other vendors' coding agents call into rather than fighting them.
The sharpest version of this is small. Dosu shipped Decant, a local tool that reads Claude Code and Codex session logs and reports what those agents did and what they cost — a vendor measuring agents it neither built nor hosts, kept local because the logs are sensitive. testthat 3.3.2 added LlmReporter(), which switches on automatically inside Claude Code, Cursor and Gemini CLI, with AGENT=1 for anything else. An R testing package now detects which agent is running it.
What moved
- The standard names the rivals. Workato shipped a governed MCP registry, per-user tokens and tool annotations describing each tool's blast radius — governance over agents it did not build. Merge folded hundreds of generic MCP connectors into its Agent Handler catalog with PII guardrails on top, while the unified API it owns ran on maintenance. Buildkite duplicated every surface it has: Test Engine metrics in REST first, a
list_testsMCP tool a week later over the same data. - The neutral shelf. AWS added OpenAI's Daybreak security models to Bedrock — distribution for models it does not train. ComfyUI now treats day-0 support for LTX-2.5, Wan Animate 2 and Seedance 2.5 as baseline, selling the runtime underneath instead. Sanity removed the account entirely: project creation now works without one, aimed explicitly at agents.
- The capability went free; the meter moved underneath it. Neo4j put its complete 65-algorithm graph data science catalog on AuraDB Free in unbilled sessions, selling attribute-based access control to the paid tiers instead. Unbounce included its MCP server on every plan — table stakes, not an upsell. respond.io made Copilot free and credit-free in every workspace precisely because the agents people then build burn metered credits, with overage now billing automatically rather than stopping. Against the grain: AgencyAnalytics priced AI Tracker at $25 per 250 credits; Appwrite starts billing build storage September 1.
- Elsewhere, libraries replaced their foundations and published the bill. rlang finished moving tidyeval onto R's official C API, then rewrote
hash()and invalidated every existing hash value. ggplot2 is three hotfix releases into the fallout from swapping S3 for S7, and Awkward Array accepted different floating-point results in a minor release to buy a 5x speedup. Uproot made RNTuple its default write format and filed it under "chore."
Sectors today
Development (39): Appwrite's Go CLI rewrite and Rollbar's PR-opening Resolve agent lead. Analytics (22): Neo4j's giveaway plus a wall of R and Python migrations — dplyr, geopandas, silx. Devtools (20): ElevenLabs gave voice agents branches and merges; SigNoz rebuilt dashboards for token-light agent edits. AI assistants (13): the plugin spec, Dosu's accounting, Mem0 splitting agent from user memory. Project management (12): Rize moved from asking to delegating; Resource Guru fits bookings around existing commitments. Marketing (10): Clay reached ad activation; Rank Math measures the AI platforms back. HR (10): Envoy extended duty of care to employee home addresses. Collaboration (9): Komga shipped a rewritten UI beside the old one. Communication (8): Opus put neural networks inside the codec. Marketing automation (8): Formidable Forms opened form data through WordPress's Abilities API. Customer support (6): Deskpro resolves AI datasource access from the trusted service, not the request. Design (5): Kittl removed the prompt as the interface. Video conferencing (3): Element Call routes each participant through their own homeserver's SFU. CRM (7), finance (7), ecommerce (5) and lms-edtech (2) produced nothing worth the name.
Watch tomorrow
The plugin standard is a claim until someone else ships against it — watch for a plugin authored outside GitHub running in a non-GitHub client. Watch too whether Decant's cost figures get cited by anyone but Dosu — agent spend measured by a third party is a different artifact than a vendor's dashboard. Three stalled migrations deserve a check: Fiber v3 has sat at rc.3 since late 2025 while v2 takes one-line patches, dbt Core holds three maintenance branches against a Fusion beta, and Komga's NextUI still has no date to take the default. Crawl noise stayed heavy: 34 of today's 182 feeds carried no release at all, Metricool and SocialPilot among them, and both Rank Math and Resource Guru are duplicated across two product rows.