The Wire · Showcase
CLAUDE CODE ACTION PATCHES NULL AUTHOR CRASH, HEALTHCARE PLUGIN SYNC GAINS PERMISSIONS GATE
By RepoJournal · Filed · About Anthropic
Claude Code Action hit a production crash when processing comments from deleted GitHub accounts, but three fixes just shipped to harden validation, sanitization, and branch handling.
The null author bug [1] was a silent killer: GitHub returns null when an account gets deleted, but the code typed author as non-null and read login directly, crashing the entire run on a single orphaned comment. That one's fixed. The sanitizer also had a reference-style markdown image gap [2] that let alt text (a hidden instruction channel) slip through to the prompt when someone used ![alt][ref] syntax instead of inline . Both are merged. On validation coverage, prepareContext had twenty untested guards [3] - missing PR_NUMBER, unsupported event types, bad branches - now all covered. Meanwhile, the healthcare repo's plugin sync keeps deleting its own CODEOWNERS file [4] because it mirrors upstream over the tracked tree and purges anything it doesn't recognize at the root. Moving CODEOWNERS to .github/ [4] fixes it since the sync has never touched that directory. Branch name validation also relaxed to allow leading underscores [5], which are valid per git-check-ref-format but were rejected, breaking every PR targeting branches like _release/v1.2.3. The agent SDK bumped its bundled CLI to 2.1.211 [7] and fixed argv parsing for optional-value flags [6], where --resume and --session-id were passed as separate tokens instead of bound pairs.
Action items
- → Pull the latest claude-code-action if you're processing GitHub comments from any org with deleted accounts anthropics/claude-code-action [immediate]
- → Review your docs if you migrated from custom_instructions to claude_args in v1 [ref:10] - semantics changed anthropics/claude-code-action [plan]
- → Upgrade claude-agent-sdk-python to v0.2.120 [ref:15] for CLI 2.1.211 compatibility anthropics/claude-agent-sdk-python [plan]
References
- [1] fix: handle null comment/review author from deleted accounts ↗ anthropics/claude-code-action
- [2] fix(sanitizer): strip alt text from reference-style markdown images (#1488) anthropics/claude-code-action
- [3] test: cover prepareContext validation error branches ↗ anthropics/claude-code-action
- [4] Add CODEOWNERS under .github/ so the plugin sync can't remove it ↗ anthropics/healthcare
- [5] fix: allow leading underscore in branch names (valid per git-check-ref-format) (#1486) anthropics/claude-code-action
- [6] Pass --resume and --session-id as a single argv token (#1123) anthropics/claude-agent-sdk-python
- [7] v0.2.120 ↗ anthropics/claude-agent-sdk-python
- [8] docs: map custom_instructions to --append-system-prompt (#1480) (#1484) anthropics/claude-code-action