Agents

Postman quietly added its plugins to Claude Code and Codex, Copilot lands in JetBrains Air, OpenAI rebuilds Git for agents: the November 4 roundup

A Postman update wrote plugins and a self-approved hook into Claude Code and Codex, Copilot joins JetBrains Air, OpenAI details Pando, and Drax plans a data center that could top £20bn.

By Audryk · November 4, 2026

• Coding agents
• Cloud & infrastructure
• #Postman
• #Claude Code
• #Codex
• #security
• #GitHub Copilot
• #JetBrains
• #OpenAI
• #Git
• #data centers

Four things for people who work with coding agents: a supply-chain warning about who is allowed to edit your agent's config, a new place to run Copilot, a Git backend built for agent-scale pushes, and a big UK data center plan.

Postman's desktop app installed agent plugins on its own

A GitHub issue opened on October 25 and widely shared on November 2 and 3 says the Postman desktop app (version 12.33.4 on macOS) installed Postman plugins into Claude Code and Codex without being asked (issue #14370). The reporter quotes Postman's own log from October 24: an auto-existing-upgrade step with the results claude-code:installed and codex:installed.

According to the issue, the update changed several files:

• ~/.codex/config.toml gained a Postman marketplace, an enabled postman@postman plugin and a hooks.state record with a trusted_hash for Postman's session-start hook.
• ~/.claude/settings.json enabled postman@claude-plugins-official.
• A Postman CLI appeared in ~/.local/bin, and the Codex plugin points to the remote MCP server https://mcp.postman.com/mcp.

The point that worries developers is the hook trust. Postman's plugin README says so openly: for Codex, "installation also approves Postman's session-start hook", with "no separate hook prompt" (postman-plugin README). The same installer configures Antigravity, Claude Code, Codex, GitHub Copilot CLI, Cursor, Factory Droid, Kimi Code, OpenCode and Pi. In the thread, one user reports the same install after an update from 12.31.3 to 12.35.1 on November 3, another found a Postman entry in ~/.copilot/settings.json.

On November 3, a reply written in Postman's name says the CLI and plugins are bundled "because many users had trouble installing and wiring them up separately", that this is mentioned on the download page and in the update flow, and that Postman will "make the opt-in clearer, especially for existing users" and is reviewing the hook approval. GitHub does not show that account as a public member of the Postman organization, so treat it as unconfirmed until Postman posts an official update.

What to check: the files above, then npx @postman/postman-plugin status to see what is installed and npx @postman/postman-plugin remove to remove it from every detected agent, as documented in the README.

GitHub Copilot is now an agent inside JetBrains Air

GitHub announced on November 3 that GitHub Copilot is available in JetBrains Air, JetBrains' agent workspace, through the Agent Client Protocol (ACP) (GitHub changelog). You pick GitHub Copilot in Air's agent picker and use your existing Copilot subscription, track several agent sessions in parallel and review the changes next to your code.

Cloud tasks go through Air Teams and are billed to your Copilot plan, not to JetBrains AI credits. They need a JetBrains account in an Air Teams business organization, a Copilot subscription and an administrator who turns Copilot on. GitHub says each cloud task runs in a Docker container on a fresh virtual machine, with all traffic going through a proxy and no state kept between tasks.

Pando: OpenAI rebuilt its Git backend because of Codex

In a post dated November 2, OpenAI describes Pando, a new Git-compatible backend that now runs all development in its monorepo (OpenAI). The reason is Codex: more parallel work means more branches, pushes and fetches, and OpenAI says reliability at times fell below 90% before the change.

The figures OpenAI gives:

• median push latency cut by nearly 80% (nearly 5x);
• nearly a petabyte of Git data served per day, and more than 57 terabytes in a single hour, over 99% of it from local disk cache;
• 10 weeks from kick-off to production with Codex: the core was designed by one engineer and written by teams of agents, in Rust, in production since April.

Pando drops repository-wide consistency: each branch is updated on its own, and stored packfiles are reused across fetches. Engineers and agents keep using git push and git fetch. Pando is not open source; OpenAI says it contributes Git improvements upstream (notably around packfile-uri) and is "exploring ways to share the technology" with users.

Drax and Brookfield plan a UK data center that could exceed £20 billion

Drax, Brookfield, its UK platform Radiant and Qatar's Qai announced on November 3 a partnership to build GW-scale data center capacity at Drax Power Station in North Yorkshire (Drax). Brookfield estimates the total investment "could potentially exceed £20bn", including £2.5bn for the first phase. Phase 1 targets up to 100 MW from the first quarter of 2028, with an ambition of 500 MW between 2028 and 2031. The site has 4 GW of grid access. Nothing is signed yet with a customer: the first phase depends on planning, regulatory and network approvals, and on finding a tenant.

What to keep in mind

• The Postman case is reported by users; Postman's official position is not yet published. The lesson holds anyway: any app on your machine can edit your agent's config files.
• Copilot in Air keeps billing on the GitHub side, which matters for teams that pay for both.
• Pando's figures come from OpenAI alone, and the system is not available outside OpenAI.
• The £20 billion is a ceiling estimated by Brookfield, not a committed budget.

Sources

• GitHub, postmanlabs/postman-app-support issue #14370, opened October 25, 2026, checked November 4, 2026
• GitHub, postmanlabs/postman-plugin README, checked November 4, 2026
• GitHub Changelog, "GitHub Copilot is now available in JetBrains Air", November 3, 2026
• OpenAI, "Scaling Git at OpenAI", November 2, 2026, checked November 4, 2026
• Drax, "Drax, Brookfield, Radiant and Qai announce £20bn partnership", November 3, 2026

Spotted an error in this article? Report it · Our corrections policy