Who contributed to Anthropic on May 25, 2026?

2 developers shipped this update, including zenexer-ant and iainmcgin.

What were the notable Anthropic updates?

scan-plugins: add Workload Identity Federation auth inputs, ci: migrate scan-plugins.yml to Workload Identity Federation auth (#248), and ci: migrate scan-plugins.yml to Workload Identity Federation auth (#1991).

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

WORKLOAD IDENTITY FEDERATION ROLLS OUT ACROSS PLUGIN ECOSYSTEM

By RepoJournal · Filed 06:02 UTC on May 25, 2026 · About Anthropic

2 people shipped this

zenexer-ant @zenexer-ant 2 cited

iainmcgin @iainmcgin 1 cited

Static API keys are getting ripped out of GitHub Actions across the plugin suite as Anthropic moves the entire CI/CD auth layer to short-lived tokens.

The migration is orchestrated in three layers: anthropics/claude-plugins-community shipped the core federation inputs [1] that let the scan-plugins action mint GitHub OIDC tokens and exchange them for short-lived bearers without touching a static key. Two dependent repos followed immediately. anthropics/knowledge-work-plugins [2] and anthropics/claude-plugins-official [3] both migrated their scan-plugins workflows to use WIF instead of ANTHROPIC_API_KEY repo secrets, now pinned to the community action's pending merge. anthropics/claude-cookbooks went wider [4], converting all 6 claude-code-action workflows (link-review, model-check, pr-review, lint-format, notebook-quality, notebook-tests) to the same federation pattern in a single commit. All repos now grant id-token: write permissions to their jobs. The federation rule stays pinned to each repository, so leaked tokens are worthless without context. This is the right pattern: no more long-lived keys in GitHub settings, no more audit nightmares when someone has to rotate. On the Rust side, anthropics/buffa landed idiomatic UpperCamelCase enum aliases [5] that let developers write RuleLevel::High instead of RuleLevel::RULE_LEVEL_HIGH while keeping proto names as definitive variants. Small quality-of-life win for generated code.

Action items

→ Merge anthropics/claude-plugins-community#34 to unblock dependent repos anthropics/claude-plugins-community [immediate]
→ Repin knowledge-work-plugins and claude-plugins-official PRs to main SHA once #34 merges anthropics/knowledge-work-plugins [immediate]
→ Review federation rule bindings across all six cookbooks workflows before merge anthropics/claude-cookbooks [plan]

References

[1] scan-plugins: add Workload Identity Federation auth inputs ↗ anthropics/claude-plugins-community
[2] ci: migrate scan-plugins.yml to Workload Identity Federation auth (#248) anthropics/knowledge-work-plugins
[3] ci: migrate scan-plugins.yml to Workload Identity Federation auth (#1991) anthropics/claude-plugins-official
[4] ci: migrate claude-code-action workflows to Workload Identity Federation ↗ anthropics/claude-cookbooks
[5] codegen: idiomatic UpperCamelCase enum aliases ↗ anthropics/buffa

Quick answers

What shipped in Anthropic on May 25, 2026?: Static API keys are getting ripped out of GitHub Actions across the plugin suite as Anthropic moves the entire CI/CD auth layer to short-lived tokens. In total, 5 commits and 5 pull requests landed.
Who contributed to Anthropic on May 25, 2026?: 2 developers shipped this update, including zenexer-ant and iainmcgin.
What were the notable Anthropic updates?: scan-plugins: add Workload Identity Federation auth inputs, ci: migrate scan-plugins.yml to Workload Identity Federation auth (#248), and ci: migrate scan-plugins.yml to Workload Identity Federation auth (#1991).

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

ai 16 shipped 1-min read

@anthropics 1 day ago

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

ai 113 shipped 1-min read

@anthropics 2 days ago

CLAUDE FOUNDATION MODELS ADDS APP ATTEST, PLUGIN ECOSYSTEM STABILIZES

iOS developers can now ship Claude calls without API keys in the binary, backed by Apple's Secure Enclave.

ai 111 shipped 1-min read

@anthropics 3 days ago

BUFFA FIXES V0.9.0 REGRESSION, CLAUDE PLUGINS ECOSYSTEM GAINS 9 NEW INTEGRATIONS

Buffa's codegen was silently rejecting moderately large schemas due to a memory bound meant only for untrusted input, but a fix shipped overnight restores throughput and clears the path for googleapis-scale proto sets.

ai 156 shipped 2-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.