Who contributed to Anthropic on May 23, 2026?

1 developer shipped this update, including ashwin-ant.

What were the notable Anthropic updates?

Use workload identity federation for Claude auth in CI workflows (#984), Use workload identity federation for Claude auth in CI workflows, and Use workload identity federation for Claude auth in CI workflows.

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

ANTHROPIC KILLS STATIC API KEYS ACROSS THE STACK

By RepoJournal · Filed 06:02 UTC on May 23, 2026 · About Anthropic

1 person shipped this

ashwin-ant @ashwin-ant 3 cited

Every major Anthropic repository has switched from long-lived API key secrets to Workload Identity Federation, eliminating the attack surface that's haunted CI/CD pipelines for years.

The shift is coordinated across five repositories: claude-agent-sdk-python [1], claude-code-action [2], claude-code [3], claude-agent-sdk-typescript [4], and their supporting codebases. Each now exchanges GitHub's OIDC token for short-lived Claude API credentials at runtime, meaning no static secret lives in repository settings anymore. This is infrastructure-grade security work, the kind that makes senior engineers sleep better. The claude-code v2.1.149 release [5] adds the `/usage` command with per-category breakdowns (skills, subagents, plugins, MCP-server costs) and keyboard navigation for diff views. Agent SDK versions 0.3.150 [7] and 0.3.149 [8] shipped in sync, with the latter fixing an environment variable regression that was dropping `CLAUDE_AGENT_SDK_VERSION` from subprocess contexts. Claude Code v2.1.150 [6] landed with infrastructure improvements. The federation rollout is complete across all automation workflows; there's no half-measure here.

Action items

→ Review your own CI/CD workflows for static API keys and plan migration to workload identity federation anthropics/claude-code-action [plan]
→ Update claude-agent-sdk-python to 0.2.87 and claude-agent-sdk-typescript to 0.3.150 anthropics/claude-agent-sdk-python [monitor]
→ Verify your enterprise claude-code instance supports the new allowAllClaudeAiMcps managed setting if you're using cloud MCP connectors anthropics/claude-code [plan]

References

[1] Use workload identity federation for Claude auth in CI workflows (#984) anthropics/claude-agent-sdk-python
[2] Use workload identity federation for Claude auth in CI workflows ↗ anthropics/claude-code-action
[3] Use workload identity federation for Claude auth in CI workflows ↗ anthropics/claude-code
[4] Use workload identity federation for Claude auth in issue triage ↗ anthropics/claude-agent-sdk-typescript
[5] v2.1.149 ↗ anthropics/claude-code
[6] v2.1.150 ↗ anthropics/claude-code
[7] v0.3.150 ↗ anthropics/claude-agent-sdk-typescript
[8] v0.3.149 ↗ anthropics/claude-agent-sdk-typescript

Quick answers

What shipped in Anthropic on May 23, 2026?: Every major Anthropic repository has switched from long-lived API key secrets to Workload Identity Federation, eliminating the attack surface that's haunted CI/CD pipelines for years. In total, 16 commits, 4 pull requests, and 8 releases landed.
Who contributed to Anthropic on May 23, 2026?: 1 developer shipped this update, including ashwin-ant.
What were the notable Anthropic updates?: Use workload identity federation for Claude auth in CI workflows (#984), Use workload identity federation for Claude auth in CI workflows, and Use workload identity federation for Claude auth in CI workflows.

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

ai 16 shipped 1-min read

@anthropics 1 day ago

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

ai 113 shipped 1-min read

@anthropics 2 days ago

CLAUDE FOUNDATION MODELS ADDS APP ATTEST, PLUGIN ECOSYSTEM STABILIZES

iOS developers can now ship Claude calls without API keys in the binary, backed by Apple's Secure Enclave.

ai 111 shipped 1-min read

@anthropics 3 days ago

BUFFA FIXES V0.9.0 REGRESSION, CLAUDE PLUGINS ECOSYSTEM GAINS 9 NEW INTEGRATIONS

Buffa's codegen was silently rejecting moderately large schemas due to a memory bound meant only for untrusted input, but a fix shipped overnight restores throughput and clears the path for googleapis-scale proto sets.

ai 156 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.