RepoJournal
Anthropic

@anthropics

Claude SDKs and developer tooling

Keep up with Anthropic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Sun 28 jun
  2. Mon 29 jun
  3. Tue 30 jun
  4. Wed 1 jul
  5. Thu 2 jul
  6. Fri 3 jul
  7. Sat 4 jul
  8. Sun 5 jul
  9. Mon 6 jul
  10. Tue 7 jul
  11. Wed 8 jul
  12. Thu 9 jul
  13. Fri 10 jul
  14. Sat 11 jul
  15. Sun 12 jul
  16. Mon 13 jul
  17. Tue 14 jul
  18. Wed 15 jul
  19. Thu 16 jul
  20. Fri 17 jul
  21. Sat 18 jul
  22. Sun 19 jul
  23. Mon 20 jul
  24. Tue 21 jul
  25. Wed 22 jul
  26. Thu 23 jul
  27. Fri 24 jul
  28. Sat 25 jul
  29. Sun 26 jul
  30. Mon 27 jul
Topics: AI / ML Full archive →

The Wire · Showcase

BUFFA FIXES UTF-8 VALIDATOR BLIND SPOT ACROSS SLACK-AWARE STRING DECODE

By RepoJournal · Filed · About Anthropic

github-actions[bot] iainmcgin
2 people shipped this
github-actions[bot] @github-actions[bot] 14 cited iainmcgin @iainmcgin 2 cited

Buffa's WirePayload type was bypassing the slack-aware UTF-8 validator on one critical string decode path, letting invalid data slip through undetected until now.

The issue [1] [2] traces back to how `read_field_payload` pre-sliced wire chunks before constructing `Borrowed` payloads, which meant `to_str()` only ever saw field bytes and hit the plain `validate_str` path instead of the slack-aware integration added in 0.8.0. Making `WirePayload` opaque forces the full buffer through the validator and closes that gap. Separately, the team cleaned up trailing whitespace that slipped into SECURITY.md [3] [4] after it was created directly on main via the web UI, bypassing CI. On the plugin front, Qodo's rebranding is propagating through the ecosystem [5], and multiple plugin SHA bumps across all three plugin repos [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] are rolling out validated updates that should be reviewed before merge.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] types: make WirePayload opaque so to_str reaches the slack-aware validator ↗ anthropics/buffa
  2. [2] types: make WirePayload opaque so to_str reaches the slack-aware validator (#247) anthropics/buffa
  3. [3] Fix trailing whitespace in SECURITY.md (#273) anthropics/buffa
  4. [4] Fix trailing whitespace in SECURITY.md ↗ anthropics/buffa
  5. [5] Rename qodo-skills plugin to qodo (Qodo rebrand) (#838) anthropics/claude-plugins-community
  6. [6] bump(foxcode): 740ce163 → 6c5d0e74 ↗ anthropics/claude-plugins-community
  7. [7] bump(followrabbit): 85f16e0d → bdbd9769 ↗ anthropics/claude-plugins-community
  8. [8] bump(expo): 1f995119 → e7e81d29 ↗ anthropics/claude-plugins-community
  9. [9] bump(enzyme): 9731a81e → 0912693c ↗ anthropics/claude-plugins-community
  10. [10] bump(carta-investors): 218e403f → 9438ec90 ↗ anthropics/knowledge-work-plugins
  11. [11] bump(carta-cap-table): 74dcec2b → 218e403f ↗ anthropics/knowledge-work-plugins
  12. [12] bump(carta-investors): e32d1707 → 218e403f ↗ anthropics/knowledge-work-plugins
  13. [13] bump(figma): bea8bea5 → a72c41ef ↗ anthropics/knowledge-work-plugins
  14. [14] bump(base44): 1463369a → 035970c8 ↗ anthropics/knowledge-work-plugins
  15. [15] bump(astronomer-data-agents): 8827e934 → 03c2377a ↗ anthropics/claude-plugins-official
  16. [16] bump(carta-investors): 218e403f → 9438ec90 ↗ anthropics/claude-plugins-official
  17. [17] bump(data-engineering): 8827e934 → 03c2377a ↗ anthropics/claude-plugins-official
  18. [18] bump(netlify-skills): 7b32f0c8 → fce2a2fd ↗ anthropics/claude-plugins-official
  19. [19] bump(amplitude): fb22979d → 05ce0a91 ↗ anthropics/claude-plugins-official

Quick answers

What shipped in Anthropic on July 7, 2026?
Buffa's WirePayload type was bypassing the slack-aware UTF-8 validator on one critical string decode path, letting invalid data slip through undetected until now. In total, 5 commits and 73 pull requests landed.
Who contributed to Anthropic on July 7, 2026?
2 developers shipped this update, including iainmcgin and github-actions[bot].
What were the notable Anthropic updates?
types: make WirePayload opaque so to_str reaches the slack-aware validator, types: make WirePayload opaque so to_str reaches the slack-aware validator (#247), and Fix trailing whitespace in SECURITY.md (#273).

More from @anthropics

Anthropic @anthropics

PLUGIN VALIDATION SWEEP ACROSS THREE REPOS, 43 PRS MERGED

Automated SHA bumps for 14 plugins passed validation overnight across the official, community, and knowledge-work plugin repos, with every PR validated before merge.

github-actions
ai 43 shipped 1-min read
Anthropic @anthropics

PLUGIN ECOSYSTEM SHIPS 47 VALIDATED UPDATES ACROSS THREE REPOS

Automated validation swept through the plugin ecosystem overnight, pushing 12 coordinated SHA bumps across community, official, and knowledge-work registries.

github-actions
ai 47 shipped 1-min read
Anthropic @anthropics

CLAUDE AGENT SDK FIXES STDIN CLOSURE BUG IN BACKGROUND TASKS

The Python SDK's query method was prematurely closing stdin when background subagents were still in flight, breaking tool calls and silently bypassing hooks - now fixed in v0.2.127.

github-actions[bot] GitHub Actions ashwin-ant
ai 16 shipped 1-min read
Anthropic @anthropics

BUFFA v0.9.1 PATCHES REGRESSION THAT BROKE ORDINARY SCHEMAS

Buffa shipped an emergency patch overnight after v0.9.0 broke codegen on schemas with a few hundred proto files, small enough to hit in production.

iainmcgin github-actions[bot] Bryan Thompson github-actions +1
ai 113 shipped 1-min read

Daily updates, in your inbox

Follow Anthropic

Keep up with Anthropic in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.