RepoJournal
Anthropic @anthropics
123 wires and counting

$ follow Anthropic

Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-29
stories 57
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

BUFFA PATCHES SILENT JSON PRECISION LOSS, CONNECT-RUST HARDENS gRPC VALIDATION

By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology

fallintoplace iainmcgin
2 people shipped this
fallintoplace @fallintoplace 3 cited iainmcgin @iainmcgin 1 cited

Buffa fixed a critical JSON decoder bug where large integer strings like "1e5" were silently rounded past the 2^53 precision boundary, while connect-rust tightened response validation across all five call shapes.

The buffa team shipped three correctness fixes that prevent silent data corruption. First, the JSON parser now handles quoted integers exactly instead of falling back to f64 for decimal and scientific notation [1], eliminating precision loss above 2^53. Second, reflective field mutations now validate that descriptors belong to the message before applying changes, blocking cross-message corruption in release builds [3]. Third, descriptor pool loading is now transactional: if any registration or link pass fails, the entire operation rolls back instead of leaving the pool partially loaded [4]. Benchmarks for v0.8.0 are live [2], showing decode_view gains of 17-21% on string-heavy shapes from the fast-utf8 default. Over in connect-rust, the client now preserves transport errors instead of remapping them to Unavailable [6], rejects malformed END_STREAM JSON as protocol errors [7], and validates gRPC response content-type strictly by protocol and codec rather than prefix matching [5]. Server-streaming responses now preserve headers even when END_STREAM is malformed [9]. The protoc plugin can now gate generated clients behind custom feature names [8].

Action items

References

  1. [1] json: parse quoted integers exactly ↗ anthropics/buffa
  2. [2] benchmarks/history: add v0.8.0 data point ↗ anthropics/buffa
  3. [3] descriptor: validate reflective field membership ↗ anthropics/buffa
  4. [4] descriptor: make add_file_descriptor_set transactional ↗ anthropics/buffa
  5. [5] Tighten gRPC response content-type validation ↗ anthropics/connect-rust
  6. [6] Preserve transport ConnectErrors in client calls ↗ anthropics/connect-rust
  7. [7] Reject malformed Connect END_STREAM JSON ↗ anthropics/connect-rust
  8. [8] Make generated client feature gate configurable ↗ anthropics/connect-rust
  9. [9] client: preserve headers on malformed end streams (#201) ↗ anthropics/connect-rust

$ ls anthropics/reviews/ # the step-back reads

the week in review Claude Code 2.1.277 adds AGENTS.md support the month in review Claude Code sync stabilizes, Anthropic SDKs hit 1.0, plugins roll at scale
Topics: AI / ML Full archive → Weekly reviews →

Quick answers

What shipped in Anthropic on June 29, 2026?
Buffa fixed a critical JSON decoder bug where large integer strings like "1e5" were silently rounded past the 2^53 precision boundary, while connect-rust tightened response validation across all five call shapes. In total, 12 commits and 45 pull requests landed.
Who contributed to Anthropic on June 29, 2026?
2 developers shipped this update, including fallintoplace and iainmcgin.
What were the notable Anthropic updates?
json: parse quoted integers exactly, benchmarks/history: add v0.8.0 data point, and descriptor: validate reflective field membership.
♥

$ log @anthropics --recent

Verbatim prompt mode closes an @-path file read in the Python SDK 2 shipped Claude Code 2.1.277 reads AGENTS.md, agent-sdk ships the AGENTS.md mod 23 shipped Sandbox-runtime closes a silent deny-glob hole and two Linux startup failures 80 shipped Sales plugin declares Salesforce and Microsoft 365 connectors, plugin directory adds six integrations 67 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.