The Wire · Showcase
THREE SDKS SHIP AWS SUPPORT; PLUGIN SAFETY GATES FINALLY ENFORCED
By RepoJournal · Filed · About Anthropic
Go, PHP, and Java SDKs all landed AWS client support overnight, while the plugin marketplace closed a critical enforcement gap that left 20 unsigned plugins/week shipping with zero policy review.
The SDK trio [1] [3] [6] moved in lockstep to add Claude Platform on AWS clients, giving teams a unified path to run Claude workloads on Amazon infrastructure. Go 1.42.0 also fixed a panic when callers wrap http.DefaultTransport [2] — a real production blocker for anyone using otelhttp or similar instrumentation. PHP 0.21.0 patched a pagination bug where PageCursor never advanced past the first page [4], plus fixed a header override issue that silently broke beta parameter passing [5]. Java 2.31.0 tightened SigV4 signing to not require Content-Type for body-less requests [7], making the AwsBackend usable for read/list/delete operations out of the box.
On the plugins side, the critical story: Scan Plugins — the marketplace safety gate — wasn't actually enforceable [8]. Weekly bump PRs opened with GITHUB_TOKEN bypassed pull_request triggers entirely, so 20 plugins/week got pulled to upstream HEAD with zero policy scan. PR #1815 fixes both the workflow triggering and the required-check blockage, finally making Scan Plugins a hard gate. Separately, SAP's two CDS plugins are now unified under a single author block [9], and Airtable's official MCP server landed in the marketplace [10].
Action items
- → Update Go SDK to 1.42.0 if you wrap http.DefaultTransport (otelhttp, etc) — panic fix is production-critical anthropics/anthropic-sdk-go [immediate]
- → Upgrade PHP SDK to 0.21.0 if you paginate any lists — fixes pagination completely broken at page 1 anthropics/anthropic-sdk-php [immediate]
- → Roll out Java 2.31.0 and Go 1.42.0 for AWS deployments — full SigV4 support now production-ready anthropics/anthropic-sdk-java [plan]
- → Merge #1815 to enforce Scan Plugins on all marketplace changes, including weekly bumps anthropics/claude-plugins-official [plan]
References
- [1] v1.42.0 ↗ anthropics/anthropic-sdk-go
- [2] fix(go): avoid panic when http.DefaultTransport is wrapped anthropics/anthropic-sdk-go
- [3] v0.21.0 ↗ anthropics/anthropic-sdk-php
- [4] fix(client): address bug with PageCursor not advancing past first page (#613) anthropics/anthropic-sdk-php
- [5] fix(client): prevent betas request param being silently overridden by per-endpoint extraHeaders default (#615) anthropics/anthropic-sdk-php
- [6] v2.31.0 ↗ anthropics/anthropic-sdk-java
- [7] fix(aws,bedrock): don't require Content-Type for body-less SigV4 requests (#1229) anthropics/anthropic-sdk-java
- [8] Make Scan Plugins a viable required check; auto-dispatch on bump PRs (#1815) anthropics/claude-plugins-official
- [9] Add sap-cds-mcp plugin + SAP SE author block on cds-mcp (#1778) anthropics/claude-plugins-official
- [10] Add airtable plugin (#1817) anthropics/claude-plugins-official
FAQ
- What changed in Anthropic on May 12, 2026?
- Go, PHP, and Java SDKs all landed AWS client support overnight, while the plugin marketplace closed a critical enforcement gap that left 20 unsigned plugins/week shipping with zero policy review.
- What should Anthropic teams do about it?
- Update Go SDK to 1.42.0 if you wrap http.DefaultTransport (otelhttp, etc) — panic fix is production-critical • Upgrade PHP SDK to 0.21.0 if you paginate any lists — fixes pagination completely broken at page 1 • Roll out Java 2.31.0 and Go 1.42.0 for AWS deployments — full SigV4 support now production-ready
- Which Anthropic repositories shipped on May 12, 2026?
- anthropics/anthropic-sdk-go, anthropics/anthropic-sdk-php, anthropics/anthropic-sdk-java, anthropics/claude-plugins-official