VS Code: Memory Leaks, Race Conditions, and Terminal Hardening
A sweep of extension host memory leak fixes and agent host race-condition repairs dominated today's activity, alongside a continued push to lock down terminal command execution against unsafe paths and untrusted input.
Duration: PT2M25S
Episode overview
This episode is a short developer briefing from VS Code.
It explains recent repository work in plain language.
- Show: VS Code
- Published: 2026-09-13T13:04:34Z
- Audio duration: PT2M25S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. It's September 13th, and today's VS Code activity centers on two things: cleaning up state that outlives its usefulness, and making sure the terminal can't be tricked.
Start with memory leaks. Developer Simon Siefke opened six focused fixes this morning, all following the same pattern: when a request gets canceled, the extension host was still caching the late result. Signature help, workspace symbols, comment thread IDs, notebook kernel commands, call and type hierarchy, even…
Second theme: agent host races. Dmitriv MS shipped a cluster of fixes - PRs 335983, 335981, 335989, and 335979 - all addressing the same underlying issue: async operations completing out of order and corrupting state that belongs to a different turn or request. Permission checks preserving stale results, cancelled…
Third theme: terminal security hardening, largely from Anthony Kim. File write destinations now get canonicalized against workspace roots. Risk assessment strips comments before evaluating commands. Dropped file paths get shell-specific quoting instead of character stripping. Recent command history filters out…
Worth noting separately: the ESLint bracket-notation cleanup continues,…
What…
Nearby episodes from VS Code
- Agents Window Takes Shape, Editor Surfaces Get Polished
- Agents Window Stabilization Push
- Sessions Workflow Gets a Major Overhaul
- Agent Host Session Reliability Push
- Automations Hardening and Sessions Get a Polish Pass
- Automations Get a Real Architecture
- Weekly Recap - Agent Sessions Get a Foundation Rebuild
- Agent Host Stability Push and a Codebase-Wide Lint Cleanup