Who contributed to Anthropic on July 6, 2026?

2 developers shipped this update, including qing-ant and github-actions[bot].

What were the notable Anthropic updates?

Warn when can_use_tool is shadowed by allowed_tools or bypassPermissions, Shield subprocess cleanup from cancellation to stop zombie CLI children, and Fix silent whitespace loss on NDJSON lines larger than 64KiB.

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CLAUDE AGENT SDK DROPS THREE CRITICAL FIXES FOR ZOMBIE PROCESSES AND SILENT DATA LOSS

By RepoJournal · Filed 06:02 UTC on July 6, 2026 · About Anthropic

2 people shipped this

github-actions[bot] @github-actions[bot] 4 cited

qing-ant @qing-ant 3 cited

The Python SDK shipped fixes for a cancellation bug that leaves subprocess children running after parent shutdown, a whitespace-stripping bug that corrupts JSON inside NDJSON payloads over 64KiB, and a security warning for shadowed tool permission callbacks.

Three separate pull requests hit the claude-agent-sdk-python repo addressing production hazards that have already hit real callers [1] [2] [3]. The first shields subprocess cleanup from cancellation errors, which means killed CLI children no longer linger as zombies when the surrounding task scope times out or fails [2]. The second patches a silent data corruption bug where NDJSON lines larger than one 64KiB read chunk lose whitespace wherever a read boundary lands, including inside JSON string values [3]. The third adds warnings when can_use_tool callbacks are shadowed by allowed_tools or bypassPermissions in the permission ladder, preventing security-critical tool restrictions from silently becoming dead code [1]. All three close genuine failure modes in production agent deployments. Plugin validation continues across both knowledge-work-plugins and claude-plugins-official, with five SHA bumps landing in the official repo and three in the knowledge-work repo, all pre-validated through the plugin validation workflow [4] [5] [6] [7].

Action items

→ Review and merge subprocess cancellation fix [ref:6] and whitespace corruption patch [ref:7] before next agent SDK deployment anthropics/claude-agent-sdk-python [immediate]
→ Audit any can_use_tool callbacks against allowed_tools and bypassPermissions configuration to catch shadowed security logic [ref:5] anthropics/claude-agent-sdk-python [plan]
→ Merge validated plugin bumps across knowledge-work-plugins and claude-plugins-official once scan jobs pass anthropics/claude-plugins-official [monitor]

References

[1] Warn when can_use_tool is shadowed by allowed_tools or bypassPermissions ↗ anthropics/claude-agent-sdk-python
[2] Shield subprocess cleanup from cancellation to stop zombie CLI children ↗ anthropics/claude-agent-sdk-python
[3] Fix silent whitespace loss on NDJSON lines larger than 64KiB ↗ anthropics/claude-agent-sdk-python
[4] bump(wix): 61f5c5f6 → e4a3c42c ↗ anthropics/knowledge-work-plugins
[5] bump(huggingface-skills): 4948baec → 79512173 ↗ anthropics/claude-plugins-official
[6] bump(hyperframes): 114d3191 → e8d19b1b ↗ anthropics/claude-plugins-official
[7] bump(wix): 61f5c5f6 → e4a3c42c ↗ anthropics/claude-plugins-official

Quick answers

What shipped in Anthropic on July 6, 2026?: The Python SDK shipped fixes for a cancellation bug that leaves subprocess children running after parent shutdown, a whitespace-stripping bug that corrupts JSON inside NDJSON payloads over 64KiB, and a security warning for shadowed tool permission callbacks. In total, 3 commits and 15 pull requests landed.
Who contributed to Anthropic on July 6, 2026?: 2 developers shipped this update, including qing-ant and github-actions[bot].
What were the notable Anthropic updates?: Warn when can_use_tool is shadowed by allowed_tools or bypassPermissions, Shield subprocess cleanup from cancellation to stop zombie CLI children, and Fix silent whitespace loss on NDJSON lines larger than 64KiB.

PLUGIN VALIDATION SWEEP ACROSS THREE REPOS, 43 PRS MERGED

Automated SHA bumps for 14 plugins passed validation overnight across the official, community, and knowledge-work plugin repos, with every PR validated before merge.

ai 43 shipped 1-min read

@anthropics 2 days ago

PLUGIN ECOSYSTEM SHIPS 47 VALIDATED UPDATES ACROSS THREE REPOS

Automated validation swept through the plugin ecosystem overnight, pushing 12 coordinated SHA bumps across community, official, and knowledge-work registries.

ai 47 shipped 1-min read

@anthropics 3 days ago

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

ai 16 shipped 1-min read

@anthropics 4 days ago

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

ai 113 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.