Who contributed to Anthropic on May 2, 2026?

1 developer shipped this update, including tobinsouth.

What were the notable Anthropic updates?

Address deep-review findings, Add validate-plugins and bump-plugin-shas composite actions, and sync: 1921 plugins (+0).

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CLAUDE PLUGIN INFRASTRUCTURE HARDENS AGAINST PATH TRAVERSAL, MARKETPLACE ADDS FIVE NEW INTEGRATIONS

By RepoJournal · Filed 06:02 UTC on May 2, 2026 · About Anthropic

1 person shipped this

tobinsouth @tobinsouth 2 cited

The plugin validation pipeline now blocks contributor-controlled path inputs from reaching clone operations, closing a critical traversal vector that could have exposed the entire marketplace to malicious submissions.

Anthropics shipped hardened security controls across the plugin ecosystem overnight [1]. The core fix: clone destination paths are now generated as ext-<idx> instead of derived from contributor input, eliminating path-traversal attack surface. Three additional correctness improvements landed in the same commit — die() now writes failure rows to results.jsonl so step summaries can't falsely report PASS on red jobs, git diff failures now trigger ALL_CHANGED instead of being silently swallowed, and warning detection is anchored to specific patterns instead of matching 'warning' as a substring anywhere in output [1]. On the infrastructure side, two new reusable composite actions rolled out [2]: validate-plugins (read-only, uses fresh CLI install to prevent schema drift) and bump-plugin-shas, both bot-free and requiring only the default GitHub token. The official plugin marketplace meanwhile absorbed five new enterprise connectors [4] [5] [6] [7] [8] — Oracle Data Platform, Snowflake Cortex Code, ServiceNow SDK, Desktop Commander, and SAP MDK Server — bringing the community index to 1921 validated plugins [3]. These marketplace additions don't ship until the validation action gates them, which means the hardened path-traversal controls are now blocking any malformed submissions before they land in production.

Action items

→ Review plugin submissions against the new validate-plugins composite action [ref:2] — all new marketplace entries must pass the hardened I1–I9 policy invariants anthropics/claude-plugins-community [immediate]
→ Pin validate-plugins composite action in any downstream marketplace repos to prevent schema drift [ref:2] anthropics/claude-plugins-community [plan]
→ Monitor the five new enterprise plugin additions [ref:6] [ref:7] [ref:8] [ref:9] [ref:10] for adoption and stability anthropics/claude-plugins-official [monitor]

References

[1] Address deep-review findings anthropics/claude-plugins-community
[2] Add validate-plugins and bump-plugin-shas composite actions ↗ anthropics/claude-plugins-community
[3] sync: 1921 plugins (+0) ↗ anthropics/claude-plugins-community
[4] Add oracle-data-platform plugin (#1669) anthropics/claude-plugins-official
[5] Add snowflake-cortex-code plugin (#1671) anthropics/claude-plugins-official
[6] Add servicenow-sdk plugin (#1668) anthropics/claude-plugins-official
[7] Add desktop-commander plugin (#1667) anthropics/claude-plugins-official
[8] Add sap-mdk-server plugin (#1649) anthropics/claude-plugins-official

Quick answers

What shipped in Anthropic on May 2, 2026?: The plugin validation pipeline now blocks contributor-controlled path inputs from reaching clone operations, closing a critical traversal vector that could have exposed the entire marketplace to malicious submissions. In total, 14 commits and 11 pull requests landed.
Who contributed to Anthropic on May 2, 2026?: 1 developer shipped this update, including tobinsouth.
What were the notable Anthropic updates?: Address deep-review findings, Add validate-plugins and bump-plugin-shas composite actions, and sync: 1921 plugins (+0).

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

ai 16 shipped 1-min read

@anthropics 1 day ago

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

ai 113 shipped 1-min read

@anthropics 2 days ago

CLAUDE FOUNDATION MODELS ADDS APP ATTEST, PLUGIN ECOSYSTEM STABILIZES

iOS developers can now ship Claude calls without API keys in the binary, backed by Apple's Secure Enclave.

ai 111 shipped 1-min read

@anthropics 3 days ago

BUFFA FIXES V0.9.0 REGRESSION, CLAUDE PLUGINS ECOSYSTEM GAINS 9 NEW INTEGRATIONS

Buffa's codegen was silently rejecting moderately large schemas due to a memory bound meant only for untrusted input, but a fix shipped overnight restores throughput and clears the path for googleapis-scale proto sets.

ai 156 shipped 2-min read

Elsewhere on the wire

AI Agents about 10 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 10 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.