Crush 0.98.2 crash fixes, Phoenix 20.26 supply-chain pins
Updated 1 min read
Summary
Agent Radar 2026-10-28: Crush 0.98.2 fixes OAuth recovery and a parallel-tool crash; Phoenix 20.24 to 20.26.1 exclude the compromised LiteLLM 1.107.0.
Agent Radar tracked two launches as of 2026-10-28, covering the window 2026-10-21 to 2026-10-28. The headline item is Phoenix 20.26, which pins out the LiteLLM release that shipped a credential stealer and raises its certifi floor.
At a glance
| Launch | Tool | Released | What changed |
|---|---|---|---|
| Crush 0.98.2 fixes OAuth sign-in and a parallel-tool crash | Crush | 2026-10-23 | Parallel tool-call crash fixed, OAuth recovery, Ctrl+C at startup, OpenRouter sticky routing |
| Phoenix 20.26 blocks compromised LiteLLM and certifi roots | Phoenix | 2026-10-25 | LiteLLM 1.107.0 excluded, certifi floor, browser errors in server logs, service.version on telemetry |
What changed
- Crush: v0.98.2, published October 23, 2026, stops crashes when parallel tool calls finish together, asks for a new OAuth sign-in on a 401 instead of retrying a refused token, and lets Ctrl+C interrupt startup. More on the Crush hub.
- Phoenix: 20.24.0 to 20.26.1, published October 21 to 25, 2026, add
!=1.107.0to every LiteLLM specifier, requirecertifi>=2026.10.18, and send uncaught browser errors to the server log. See the Phoenix hub.
Questions
Which item needs action first? Phoenix, if any environment could resolve LiteLLM 1.107.0 or still carries an older certifi bundle.
Which item fixes crashes you might already have seen? Crush 0.98.2: agent sessions that died during parallel tool calls, or got stuck after an OAuth token was rejected.
New comparison today: MOSS-TTS vs Chatterbox. Related reading: MOSS-TTS vs Kokoro.
In this issue
Rank 1 Crush 0.98.2 fixes OAuth sign-in and a parallel-tool crash
CrushCrush v0.98.2 (October 23, 2026) fixes a crash when parallel tool calls finish together, repairs OAuth sign-in and refresh, and lets Ctrl+C stop startup.
Category: Coding agents
Pricing: Not stated
Rank 2 Phoenix 20.26 blocks compromised LiteLLM and certifi roots
PhoenixPhoenix 20.24.0 to 20.26.1 (October 21-25, 2026) exclude the compromised LiteLLM 1.107.0, raise the certifi floor and log browser errors on the server.
Category: Agent infra
Pricing: Not stated
