RepoJournal
Anthropic

@anthropics

Claude SDKs and developer tooling

Keep up with Anthropic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Fri 19 jun
  2. Sat 27 jun
  3. Sun 28 jun
  4. Mon 29 jun
  5. Tue 30 jun
  6. Wed 1 jul
  7. Thu 2 jul
  8. Fri 3 jul
  9. Sat 4 jul
  10. Sun 5 jul
  11. Mon 6 jul
  12. Tue 7 jul
  13. Wed 8 jul
  14. Thu 9 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Sun 12 jul
  18. Mon 13 jul
  19. Tue 14 jul
  20. Wed 15 jul
  21. Thu 16 jul
  22. Fri 17 jul
  23. Sat 18 jul
  24. Sun 19 jul
  25. Mon 20 jul
  26. Tue 21 jul
  27. Wed 22 jul
  28. Thu 23 jul
  29. Fri 24 jul
  30. Today 25 jul
Topics: AI / ML Full archive →

The Wire · Showcase

C# AND JAVA SDKS SHIP AUTH OVERHAUL; ORJSON FORK REINS IN RECURSION

By RepoJournal · Filed · About Anthropic

martinamps PedramNavid iainmcgin
3 people shipped this
martinamps @martinamps 3 cited PedramNavid @PedramNavid 1 cited iainmcgin @iainmcgin 1 cited

All five Anthropic SDKs landed Workload Identity Federation and interactive OAuth in a coordinated push [ref:10][ref:11][ref:12][ref:13][ref:14][ref:15], while the orjson fork restores the upstream 1024-depth recursion limit as a configurable guard against stack overflow [ref:1][ref:2].

The C# SDKs—Aws, Vertex, Bedrock, Foundry, and the core Anthropic client [1][2][3][4][5]—all crossed the finish line yesterday with v0.3.0 through v12.18.0, shipping Workload Identity Federation, interactive OAuth, and auth profiles across the board [1]. Java sdk-java v2.28.0 [6] lands the same auth suite plus improved Managed Agents APIs [15]—the ability to filter sessions by memory_store_id, nullable handling fixes, and max_tokens:0 support. On the core side, orjson's fork had removed yyjson's recursion limit entirely to allow arbitrarily deep JSON nesting, but that left the C stack vulnerable [7]. The new max_depth kwarg defaults to 1024 (matching upstream) while letting callers opt into deeper parsing by passing max_depth=None or a higher integer [8]—nesting past the limit now raises JSONDecodeError instead of crashing. Separately, orjson's publish-internal pipeline is being hardened: the PEP-440 wheel filename normalization caused check-pypi to fail (hyphen vs. dot), so the fix replaces filename validation with a version-only check [9][10][11]. The vulnerability detection agent cookbook landed in claude-cookbooks [12], bringing threat-model-to-report workflows into the public repo using claude-agent-sdk's built-in Code tools. One final hygiene win: buffa's CLA check now retries transient 5xx errors instead of failing immediately [13][14].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Aws: v0.3.0 ↗ anthropics/anthropic-sdk-csharp
  2. [2] Vertex: v0.4.0 ↗ anthropics/anthropic-sdk-csharp
  3. [3] Bedrock: v0.7.0 ↗ anthropics/anthropic-sdk-csharp
  4. [4] Foundry: v0.6.0 ↗ anthropics/anthropic-sdk-csharp
  5. [5] Anthropic: v12.18.0 ↗ anthropics/anthropic-sdk-csharp
  6. [6] v2.28.0 ↗ anthropics/anthropic-sdk-java
  7. [7] loads: add max_depth kwarg, default 1024 (matches upstream) ↗ anthropics/orjson
  8. [8] loads: add max_depth kwarg, default 1024 (matches upstream) anthropics/orjson
  9. [9] ci: fix publish-internal check + changelog for 3.11.7-post4 ↗ anthropics/orjson
  10. [10] ci: add publish-internal job to upload wheels to Artifactory ↗ anthropics/orjson
  11. [11] Merge pull request #22 from anthropics/mamps/fix-publish-check anthropics/orjson
  12. [12] feat(claude_agent_sdk): add vulnerability detection agent cookbook ↗ anthropics/claude-cookbooks
  13. [13] ci: bump cla-github-action to 5b54183 (retry transient 5xx) (#89) anthropics/buffa
  14. [14] ci: bump cla-github-action to 5b54183 (retry transient 5xx) ↗ anthropics/buffa
  15. [15] feat(api): improve Managed Agents APIs anthropics/anthropic-sdk-java

Quick answers

What shipped in Anthropic on May 5, 2026?
All five Anthropic SDKs landed Workload Identity Federation and interactive OAuth in a coordinated push [ref:10][ref:11][ref:12][ref:13][ref:14][ref:15], while the orjson fork restores the upstream 1024-depth recursion limit as a configurable guard against stack overflow [ref:1][ref:2]. In total, 42 commits, 7 pull requests, and 6 releases landed.
Who contributed to Anthropic on May 5, 2026?
3 developers shipped this update, including martinamps, PedramNavid, and iainmcgin.
What were the notable Anthropic updates?
Aws: v0.3.0, Vertex: v0.4.0, and Bedrock: v0.7.0.

More from @anthropics

Anthropic @anthropics

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

github-actions[bot] GitHub Actions ashwin-ant
ai 16 shipped 1-min read
Anthropic @anthropics

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

iainmcgin github-actions[bot] Bryan Thompson github-actions +1
ai 113 shipped 1-min read
Anthropic @anthropics

CLAUDE FOUNDATION MODELS ADDS APP ATTEST, PLUGIN ECOSYSTEM STABILIZES

iOS developers can now ship Claude calls without API keys in the binary, backed by Apple's Secure Enclave.

Bryan Thompson markpikemarkpike github-actions mmoore +1
ai 111 shipped 1-min read
Anthropic @anthropics

BUFFA FIXES V0.9.0 REGRESSION, CLAUDE PLUGINS ECOSYSTEM GAINS 9 NEW INTEGRATIONS

Buffa's codegen was silently rejecting moderately large schemas due to a memory bound meant only for untrusted input, but a fix shipped overnight restores throughput and clears the path for googleapis-scale proto sets.

Bryan Thompson iainmcgin ogarciarevett fallintoplace +2
ai 156 shipped 2-min read

Daily updates, in your inbox

Follow Anthropic

Keep up with Anthropic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

github-actions[bot] hntrl dependabot ak684 +6
ai-agents 28 shipped 1-min read
Local LLMs Local LLMs

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.

dhiltgen ParthSareen Xuan-Son Nguyen Johannes Gäßler +11
llms 210 shipped 2-min read
CachyOS @CachyOS

HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD

Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.

cantosun99 Jinra Aarrayy Valeri +7
infra 85 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

LIVEVIEW ASYNC CLEANUP FIX SHIPS ALONGSIDE RANGE OPTIMIZATIONS

Phoenix LiveView closes a critical async task test failure while Elixir cuts unnecessary abs calls from Range operations.

Barna Kovacs Alexander Gubarev SteffenDE José Valim +1
elixir 19 shipped 1-min read
Want every project, not just this one?