Skip to content

continue

AI Coding Tools

Source‑controlled AI code checks that run as enforceable GitHub status checks in CI

TypeScript Latest v1.2.22-vscode · 2mo ago Security brief →

Features

  • Runs markdown‑defined agents as CI status checks on pull requests
  • Detects issues like hardcoded secrets, missing input validation, and nonstandard error formats
  • Provides suggested diffs to automatically fix reported problems

Security Response History

1 CVE
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2023-4863 KEV high
CVSS 8.8
2023-09-13 2026-01-10 2y 4mo / median 2y 4mo

Recent releases

View all 33 releases →
v1.2.22-vscode Mixed
Notable features
  • .continue/configs directory support
  • Session history filtering by workspace directory
Full changelog

What's Changed

  • fix: ensure config.yaml exists and is populated when accessed by @RomneyDa in https://github.com/continuedev/continue/pull/11915
  • chore: jb-67-vs-38 by @RomneyDa in https://github.com/continuedev/continue/pull/11916
  • chore(deps-dev): bump happy-dom from 20.0.2 to 20.8.9 in /extensions/cli by @dependabot[bot] in https://github.com/continuedev/continue/pull/11910
  • chore(deps): bump handlebars from 4.7.8 to 4.7.9 in /core by @dependabot[bot] in https://github.com/continuedev/continue/pull/11911
  • chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /packages/llm-info by @dependabot[bot] in https://github.com/continuedev/continue/pull/11912
  • chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /packages/config-yaml by @dependabot[bot] in https://github.com/continuedev/continue/pull/11913
  • chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.13 in /core by @dependabot[bot] in https://github.com/continuedev/continue/pull/11931
  • chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.13 in /binary by @dependabot[bot] in https://github.com/continuedev/continue/pull/11930
  • feat: filter session history by workspace directory by @mvanhorn in https://github.com/continuedev/continue/pull/11813
  • chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 in /packages/fetch by @dependabot[bot] in https://github.com/continuedev/continue/pull/11936
  • chore(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /packages/continue-sdk by @dependabot[bot] in https://github.com/continuedev/continue/pull/11937
  • feat: add .continue/configs support by @RomneyDa in https://github.com/continuedev/continue/pull/11935

Full Changelog: https://github.com/continuedev/continue/compare/v1.2.21-vscode...v1.2.22-vscode

v1.2.21-vscode Bug fix

## What's Changed * chore: jb-66-vs-37 * fix: remove Ollama template-based tool support gate

v1.2.20-vscode Security relevant
Security fixes
  • Resolved critical and high severity security vulnerabilities
v1.2.19-vscode New feature
Notable features
  • useResponsesApi option to control Responses API usage
  • Support for Moonshot Kimi models with reasoning support
v1.2.18-vscode Mixed
⚠ Upgrade required
  • Node.js LTS minimum version updated to v20.20.1
  • Default model changes: Claude updated to 4.6; Gemini 2.0 Flash removed from defaults and now supported via AI SDK
Security fixes
  • Harden system message tools and wire toolOverrides to system message path
  • dep: undici security upgrade from 7.18.2 to 7.24.0
  • dep: @openapitools/openapi-generator-cli security upgrade from 2.30.0 to 2.31.0
Notable features
  • Add Tensorix and MiniMax as new LLM providers
  • CLI: invokable skills and import any skill
  • Support Bedrock API key authentication
Full changelog

What's Changed

  • fix: harden system message tools and wire toolOverrides to system message path by @shanevcantwell in https://github.com/continuedev/continue/pull/10485
  • [Snyk] Security upgrade undici from 7.18.2 to 7.24.0 by @sestinj in https://github.com/continuedev/continue/pull/11379
  • fix: terminal links open wrong URL for addresses with ports by @shanevcantwell in https://github.com/continuedev/continue/pull/11369
  • refactor: unify AbortError detection with isAbortError utility by @amabito in https://github.com/continuedev/continue/pull/10551
  • fix: remove hardcoded Unix $ prompt prefix from terminal UI by @shanevcantwell in https://github.com/continuedev/continue/pull/11429
  • chore(deps): bump socket.io-parser from 4.2.4 to 4.2.6 in /gui by @dependabot[bot] in https://github.com/continuedev/continue/pull/11603
  • chore(deps): bump JetBrains/qodana-action from 2025.3.1 to 2025.3.2 by @dependabot[bot] in https://github.com/continuedev/continue/pull/11496
  • docs: improve SSL certificate troubleshooting guidance by @fahe1em1 in https://github.com/continuedev/continue/pull/11354
  • chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @dependabot[bot] in https://github.com/continuedev/continue/pull/11638
  • docs(cli): cover AskQuestion tool behavior and TUI interaction by @siewcapital in https://github.com/continuedev/continue/pull/11162
  • chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /extensions/cli by @dependabot[bot] in https://github.com/continuedev/continue/pull/11640
  • chore(deps): bump undici from 6.23.0 to 6.24.0 in /core by @dependabot[bot] in https://github.com/continuedev/continue/pull/11401
  • docs: document all CLI slash commands in TUI mode by @fahe1em1 in https://github.com/continuedev/continue/pull/11352
  • feat: add Tensorix as an LLM provider by @shanemort1982 in https://github.com/continuedev/continue/pull/11184
  • chore(deps): bump socket.io-parser from 4.2.4 to 4.2.6 in /core by @dependabot[bot] in https://github.com/continuedev/continue/pull/11643
  • fix(cli): load rules into system message by @uinstinct in https://github.com/continuedev/continue/pull/10408
  • fix: strengthen default Apply prompt for local models by @shanevcantwell in https://github.com/continuedev/continue/pull/10486
  • Fix stale Models docs links in config panel by @siewcapital in https://github.com/continuedev/continue/pull/11136
  • fix: skip remote URIs when resolving MCP server cwd by @shanevcantwell in https://github.com/continuedev/continue/pull/10844
  • chore(deps): bump flatted from 3.3.2 to 3.4.2 in /core by @dependabot[bot] in https://github.com/continuedev/continue/pull/11668
  • fix: include reasoning_content field for DeepSeek Reasoner models by @mvanhorn in https://github.com/continuedev/continue/pull/11290
  • [Snyk] Security upgrade @openapitools/openapi-generator-cli from 2.30.0 to 2.31.0 by @sestinj in https://github.com/continuedev/continue/pull/11764
  • fix: add default timeout for terminal command tool execution by @amabito in https://github.com/continuedev/continue/pull/10550
  • chore(deps): bump gradle/actions from 5 to 6 by @dependabot[bot] in https://github.com/continuedev/continue/pull/11760
  • feat(cli): discover .continue/checks/ in cn review by @mvanhorn in https://github.com/continuedev/continue/pull/11697
  • chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 in /gui by @dependabot[bot] in https://github.com/continuedev/continue/pull/11769
  • fix(registryClient): fix wrong location for the cli config file by @yumosx in https://github.com/continuedev/continue/pull/10812
  • Update Node.js LTS to v20.20.1 by @PeterDaveHello in https://github.com/continuedev/continue/pull/11506
  • Fix system-message tools parser when tool call is non-terminal by @MumuTW in https://github.com/continuedev/continue/pull/11092
  • Improve error handling UX and move stream retry to BaseLLM by @RomneyDa in https://github.com/continuedev/continue/pull/11773
  • fix(ollama): check model template for tool support via /api/show by @RomneyDa in https://github.com/continuedev/continue/pull/11670
  • fix: "No chat model selected" error on startup by @RomneyDa in https://github.com/continuedev/continue/pull/11672
  • feat: add MiniMax as a new LLM provider with M2.7 default by @octo-patch in https://github.com/continuedev/continue/pull/11367
  • fix: preserve indentation when applying code edits to Python files by @mvanhorn in https://github.com/continuedev/continue/pull/11289
  • fix: use config.yaml name for default Local Config profile by @MumuTW in https://github.com/continuedev/continue/pull/11110
  • feat(cli): invokable skills and import any skill by @uinstinct in https://github.com/continuedev/continue/pull/11113
  • fix: Ollama MCP tool calling for Mistral and Gemma3 models by @joaquinhuigomez in https://github.com/continuedev/continue/pull/11523
  • feat(autocomplete): Add Qwen multi-file FIM template for repository-level autocompletion by @hiepau1231 in https://github.com/continuedev/continue/pull/10612
  • feat(cli): export and import sessions by @uinstinct in https://github.com/continuedev/continue/pull/11075
  • Remove Gemini 2.0 Flash from defaults and update Claude defaults to 4.6 by @RomneyDa in https://github.com/continuedev/continue/pull/11782
  • feat: support gemini through ai sdk by @uinstinct in https://github.com/continuedev/continue/pull/10671
  • Sending x-api-key instead of api-key as header for azure hosted anthropic service by @sresam89 in https://github.com/continuedev/continue/pull/11517
  • fix(openai): fix Responses API 400 errors for reasoning, tool calls, and ID handling by @RomneyDa in https://github.com/continuedev/continue/pull/11785
  • jetbrains 63, vscode 34 by @RomneyDa in https://github.com/continuedev/continue/pull/11790
  • fix(gemini): update model catalog for retired/new Gemini models by @RomneyDa in https://github.com/continuedev/continue/pull/11793
  • fix: expand tool support to reduce 'Invalid tool name' errors by @RomneyDa in https://github.com/continuedev/continue/pull/11792
  • fix: handle thinking/assistant messages at end of chat history by @RomneyDa in https://github.com/continuedev/continue/pull/11791
  • fix: guard against non-string NO_PROXY env value by @RomneyDa in https://github.com/continuedev/continue/pull/11797
  • feat(bedrock): support Bedrock API key authentication by @RomneyDa in https://github.com/continuedev/continue/pull/11798
  • fix: restrict terminal childProcess.spawn to local-only environments by @shanevcantwell in https://github.com/continuedev/continue/pull/10538

New Contributors

  • @amabito made their first contribution in https://github.com/continuedev/continue/pull/10551
  • @fahe1em1 made their first contribution in https://github.com/continuedev/continue/pull/11354
  • @siewcapital made their first contribution in https://github.com/continuedev/continue/pull/11162
  • @shanemort1982 made their first contribution in https://github.com/continuedev/continue/pull/11184
  • @octo-patch made their first contribution in https://github.com/continuedev/continue/pull/11367
  • @joaquinhuigomez made their first contribution in https://github.com/continuedev/continue/pull/11523
  • @hiepau1231 made their first contribution in https://github.com/continuedev/continue/pull/10612
  • @sresam89 made their first contribution in https://github.com/continuedev/continue/pull/11517

Full Changelog: https://github.com/continuedev/continue/compare/v1.2.17-vscode...v1.2.18-vscode

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
33,466
Forks
4,583
Languages
TypeScript JavaScript Kotlin
Downloads/week
5,907
NPM Maintainers
3
Contributors
100
TypeScript
Types included ✓

Install & Platforms

Install via
shell-script npm
Platforms
linux macos windows

Community & Support

Beta — feedback welcome: [email protected]