RepoJournal
Anthropic

@anthropics

Claude SDKs and developer tooling

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CLAUDE CODE ACTION PATCHES NULL AUTHOR CRASH, HEALTHCARE PLUGIN SYNC GAINS PERMISSIONS GATE

By RepoJournal · Filed · About Anthropic

Claude Code Action hit a production crash when processing comments from deleted GitHub accounts, but three fixes just shipped to harden validation, sanitization, and branch handling.

The null author bug [1] was a silent killer: GitHub returns null when an account gets deleted, but the code typed author as non-null and read login directly, crashing the entire run on a single orphaned comment. That one's fixed. The sanitizer also had a reference-style markdown image gap [2] that let alt text (a hidden instruction channel) slip through to the prompt when someone used ![alt][ref] syntax instead of inline ![alt](url). Both are merged. On validation coverage, prepareContext had twenty untested guards [3] - missing PR_NUMBER, unsupported event types, bad branches - now all covered. Meanwhile, the healthcare repo's plugin sync keeps deleting its own CODEOWNERS file [4] because it mirrors upstream over the tracked tree and purges anything it doesn't recognize at the root. Moving CODEOWNERS to .github/ [4] fixes it since the sync has never touched that directory. Branch name validation also relaxed to allow leading underscores [5], which are valid per git-check-ref-format but were rejected, breaking every PR targeting branches like _release/v1.2.3. The agent SDK bumped its bundled CLI to 2.1.211 [7] and fixed argv parsing for optional-value flags [6], where --resume and --session-id were passed as separate tokens instead of bound pairs.

Action items

References

  1. [1] fix: handle null comment/review author from deleted accounts ↗ anthropics/claude-code-action
  2. [2] fix(sanitizer): strip alt text from reference-style markdown images (#1488) anthropics/claude-code-action
  3. [3] test: cover prepareContext validation error branches ↗ anthropics/claude-code-action
  4. [4] Add CODEOWNERS under .github/ so the plugin sync can't remove it ↗ anthropics/healthcare
  5. [5] fix: allow leading underscore in branch names (valid per git-check-ref-format) (#1486) anthropics/claude-code-action
  6. [6] Pass --resume and --session-id as a single argv token (#1123) anthropics/claude-agent-sdk-python
  7. [7] v0.2.120 ↗ anthropics/claude-agent-sdk-python
  8. [8] docs: map custom_instructions to --append-system-prompt (#1480) (#1484) anthropics/claude-code-action

Quick answers

What shipped in Anthropic on July 16, 2026?
Claude Code Action hit a production crash when processing comments from deleted GitHub accounts, but three fixes just shipped to harden validation, sanitization, and branch handling. In total, 18 commits, 13 pull requests, and 2 releases landed.
Who contributed to Anthropic on July 16, 2026?
10 developers shipped this update, including healthcare-sync, john-michael, healthcare-sync[bot], Riley Mete, pa-arth, farmer-data, Humphrey, and GitHub Actions, and 2 more.
What were the notable Anthropic updates?
fix: handle null comment/review author from deleted accounts, fix(sanitizer): strip alt text from reference-style markdown images (#1488), and test: cover prepareContext validation error branches.

More from @anthropics

Daily updates, in your inbox

Follow Anthropic

Claude SDKs and developer tooling We'll email you a link to confirm first.

Free. Confirm via email. Unsubscribe in one click.

— or follow the whole beat:

Elsewhere on the wire