Coder vs Expo

Coder is running four concurrent release trains (2.29, 2.32, 2.33, 2.34), all of which received a coordinated security hardening drop in June following Anthropic's Project Glasswing disclosure. The patches covered OIDC account-linking abuse, workspace cross-tenant rebinding, command injection in the shell execer, and session token exfiltration — a broad surface area that points to Coder's expanding enterprise footprint. Alongside the security work, the aibridge layer (Coder's AI model integration point) is being kept current: v2.33.10 added Bedrock Opus 4.8 adaptive thinking support.

The multi-branch maintenance cadence signals a large installed base of enterprise customers pinned to specific LTS lines — Coder is managing the complexity of shipping features while backporting security across four branches. The aibridge thread is the more interesting forward signal: Bedrock support and the new ephemeral CLI parameters both point toward Coder deepening its agentic coding workflow story rather than just being a remote dev box. Expect the security surface to keep growing as AI-driven workspace access becomes a bigger attack vector.

The next likely move is a v2.35 mainline with expanded AI workflow features — possibly deeper model-selection UI, workspace-agent-to-model routing, or agentic task scheduling — building on the aibridge plumbing already in place.