RepoJournal
Anthropic @anthropics
150 wires and counting

$ follow Anthropic

Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-05
stories 107
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CLAUDE CODE ACTION LOCKS DOWN WORKFLOW PERMISSIONS AND IMAGE PAIRING

By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology

ashwin-ant Bryan Thompson abelribbink github-actions github-actions[bot] GitHub Actions
6 people shipped this
ashwin-ant @ashwin-ant 3 cited Bryan Thompson @bryan-anthropic 2 cited abelribbink @abelribbink 1 cited github-actions @github-actions github-actions[bot] @github-actions[bot] GitHub Actions @actions-user

The code action now enforces collaborator checks on workflow_run events and pairs downloaded images correctly by asset identifier instead of array position.

Claude Code Action v1.0.185 shipped with two critical security and reliability fixes [1] [2]. The write-permission check for collaborator access previously skipped workflow_run-triggered runs entirely, sending them straight into agent mode without validation; the fix applies the same permission gate that entity events (issues, PRs, comments) already enforce, checking both the workflow actor and the upstream run's actor when they differ [1]. Separately, downloadCommentImages now matches image URLs to their signed download URLs by asset identifier instead of array position, fixing a pairing bug that shifted alignments when markdown and HTML representations contained images in different orders [2]. A third PR pinned the bun configuration for MCP server processes so they resolve from the action directory rather than the caller's working directory [3]. Plugin bumping across the ecosystem continues: claude-plugins-official enrolled CrowdStrike entries in release-tag tracking [4], while claude-plugins-community merged the underlying feature that lets plugins track published releases instead of main HEAD [5]. The defending-code-reference-harness added fast-fail for container deaths, so OOM-killed or removed agent containers fail immediately with the cause instead of burning the full 68-minute backoff budget [6].

Action items

References

  1. [1] Check collaborator permissions for workflow_run events ↗ anthropics/claude-code-action
  2. [2] Match downloaded images to their source URLs by asset identifier ↗ anthropics/claude-code-action
  3. [3] Pin bun config for MCP server processes ↗ anthropics/claude-code-action
  4. [4] bump tracking: pin action to community 9247660a + releases-only for CrowdStrike entries (#4879) anthropics/claude-plugins-official ↗
  5. [5] feat(bump-plugin-shas): releases-only (release-tag) tracking via optional tracking-config input ↗ anthropics/claude-plugins-community
  6. [6] Fail fast when the agent container dies mid-run ↗ anthropics/defending-code-reference-harness

$ ls anthropics/reviews/ # the step-back reads

the week in review Claude Code symlink TOCTOU allows arbitrary file write the month in review Sandbox and SDK holes dominate Anthropic's September
Full archive → Weekly reviews →

Quick answers

What shipped in Anthropic on August 5, 2026?
The code action now enforces collaborator checks on workflow_run events and pairs downloaded images correctly by asset identifier instead of array position. In total, 10 commits, 96 pull requests, and 1 releases landed.
Who contributed to Anthropic on August 5, 2026?
6 developers shipped this update, including Bryan Thompson, github-actions, ashwin-ant, github-actions[bot], GitHub Actions, and abelribbink.
What were the notable Anthropic updates?
Check collaborator permissions for workflow_run events, Match downloaded images to their source URLs by asset identifier, and Pin bun config for MCP server processes.
♥

$ log @anthropics --recent

sandbox-runtime fixes a quadratic glob parse, and five projects enroll in OSS Scanner 52 shipped buffa breaks inferred collect() calls, sandbox-runtime fixes the proxy and Linux relays 120 shipped Buffa hardens codegen and descriptor validation, OSS Scanner enrolls WordPress and the AT Protocol stack 26 shipped security-guidance findings reach stderr, and sandbox ignoreViolations types match the CLI 28 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training verl rejects conflicting vLLM engine_kwargs, open-instruct adds MILES OPD behind a Megatron learner Interpretability nnsight 0.8.0 cuts import time from 7.6s to 1.6s

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.