Who contributed to Anthropic on July 18, 2026?

3 developers shipped this update, including github-actions[bot], GitHub Actions, and ashwin-ant.

What were the notable Anthropic updates?

v2.1.214, v0.3.214, and chore: bump Claude Code to 2.1.214 and Agent SDK to 0.3.214.

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

CLAUDE CODE CLOSES PERMISSION BYPASS; AGENT SDK TIGHTENS VALIDATION

By RepoJournal · Filed 06:58 UTC on July 18, 2026 · About Anthropic

3 people shipped this

ashwin-ant @ashwin-ant 2 cited

github-actions[bot] @github-actions[bot] 1 cited

GitHub Actions @actions-user 1 cited

Claude Code 2.1.214 ships critical security fixes for permission checks across Windows and Bash, while the TypeScript agent SDK now rejects invalid permission modes instead of silently accepting them.

The Claude Code team patched three distinct permission-check vulnerabilities in v2.1.214 [1]. A Windows PowerShell 5.1 permission bypass is now closed, Bash permission checks no longer mishandle file-descriptor redirects, and overly-long commands that broke the permission analyzer are now handled correctly. Separately, a logic error in single-segment `dir/**` allow rules was fixed, preventing unintended auto-approvals for nested directories outside the target scope [1]. On the SDK side, the TypeScript agent SDK v0.3.214 [2] now rejects unrecognized permission modes with an error instead of silently adopting them, hardening the validation layer. The agent SDK also added optional `subkind: 'scheduled-trigger'` support to mark task notifications fired from user-configured scheduled tasks [2]. Both the Python agent SDK [4] and Claude Code Action bumped to these latest versions, ensuring consistency across the toolchain. This coordinated release cycle (Claude Code 2.1.214, Agent SDK TypeScript 0.3.214, Python SDK 0.2.122) reflects a tightening of permission semantics across the platform [3].

Action items

→ Update Claude Code to 2.1.214 immediately if you use Windows PowerShell or long command scripts anthropics/claude-code [immediate]
→ Upgrade Agent SDK TypeScript to 0.3.214 and Python to 0.2.122 to enforce stricter permission validation anthropics/claude-agent-sdk-typescript [plan]
→ Audit existing `dir/**` allow rules in your Claude Code configs to verify they target the correct scope anthropics/claude-code [plan]

References

[1] v2.1.214 ↗ anthropics/claude-code
[2] v0.3.214 ↗ anthropics/claude-agent-sdk-typescript
[3] chore: bump Claude Code to 2.1.214 and Agent SDK to 0.3.214 anthropics/claude-code-action
[4] v0.2.122 ↗ anthropics/claude-agent-sdk-python

Quick answers

What shipped in Anthropic on July 18, 2026?: Claude Code 2.1.214 ships critical security fixes for permission checks across Windows and Bash, while the TypeScript agent SDK now rejects invalid permission modes instead of silently accepting them. In total, 6 commits and 4 releases landed.
Who contributed to Anthropic on July 18, 2026?: 3 developers shipped this update, including github-actions[bot], GitHub Actions, and ashwin-ant.
What were the notable Anthropic updates?: v2.1.214, v0.3.214, and chore: bump Claude Code to 2.1.214 and Agent SDK to 0.3.214.

BUFFA CLOSES CRITICAL DECODE GAPS WHILE PLUGIN ECOSYSTEM ROLLS ROUTINE BUMPS

The protobuf decoder just fixed three silent data loss bugs in a single day, while 15 plugins across three registries validated new builds.

ai 125 shipped 1-min read

@anthropics 2 days ago

CLAUDE CODE ACTION PATCHES NULL AUTHOR CRASH, HEALTHCARE PLUGIN SYNC GAINS PERMISSIONS GATE

Claude Code Action hit a production crash when processing comments from deleted GitHub accounts, but three fixes just shipped to harden validation, sanitization, and branch handling.

ai 33 shipped 2-min read

@anthropics 3 days ago

CLAUDE CODE ACTION PATCHES TOKEN LEAK, SDK VERSIONS BUMP ACROSS STACK

Claude Code Action 1.0.174 shipped an emergency fix for a token sanitizer gap that was leaving GitHub user-to-server credentials exposed in prompts.

ai 62 shipped 1-min read

@anthropics 4 days ago

SLACK NOTIFICATION INJECTION PATCHED ACROSS SDK STACK

A JSON injection vulnerability in the Slack issue notification workflow has been fixed, and all three SDK implementations now carry the security patch plus critical bug fixes for false-positive CI success states.

ai 25 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 6 hours ago

PACKAGE UPDATES ROLL ACROSS AUR DERIVED AND PROTON CACHYOS

Claude Desktop jumped to 1.22209.0, Zen Browser patched to 1.21.8b, and documentation fixes landed across the stack overnight.

infra 43 shipped 1-min read

Elixir & Phoenix about 6 hours ago

ELIXIR CUTS EXPONENTIAL GROWTH IN BDD INTERSECTIONS, PHOENIX LIVE VIEW SKIPS CLONES ON STABLE LISTS

The compiler just got smarter about preventing exponential blowup in type intersection logic, while Phoenix Live View stops wastefully copying keyed comprehensions that aren't moving.

elixir 16 shipped 1-min read

@dotnet about 6 hours ago

ASPNETCORE TIGHTENS AUTHORIZATION METADATA EVERYWHERE, BLAZOR DEBUGGING EXITS

Authorization policies now work consistently across all routing paths, not just endpoint middleware, while Blazor templates drop their deprecated WebAssembly debugging hook.

dotnet 58 shipped 2-min read

@spring-projects about 6 hours ago

SPRING FRAMEWORK TIGHTENS RESOURCE SECURITY, NEO4J FIXES CONVERSION LOGIC

Spring Framework reinstated critical resource location validation checks that prevent unauthorized static resource resolution in sensitive directories.

java 4 shipped 1-min read