What shipped in Anthropic on August 19, 2026?

A security patch to the Claude Code Action stops public comments from leaking raw credentials. In total, 9 commits, 67 pull requests, and 1 releases landed.

Who contributed to Anthropic on August 19, 2026?

5 developers shipped this update, including Bryan Thompson, Michael Moore, github-actions, Juwan, and Neal006.

What were the notable Anthropic updates?

fix(security): unify secret redaction in public comment outputs (#1693), fix(security): unify secret redaction in public comment outputs, and ci(scan): deterministic static pin check for auto-exec MCP launchers (per-consumer severity).

@anthropics

Claude SDKs and developer tooling

github ↗

Pick a date

Topics: AI / ML Full archive →

The Wire · Showcase

SECRET LEAK THREAT MAKES GITHUB COMMENTS SAFER

By RepoJournal · Filed 06:57 UTC on August 19, 2026 · About Anthropic

5 people shipped this

Juwan @Juwan-Hwang 2 cited

Neal006 @Neal006 2 cited

Bryan Thompson @bryan-anthropic 1 cited

github-actions @github-actions 1 cited

Michael Moore @imichaelmoore

A security patch to the Claude Code Action stops public comments from leaking raw credentials.

Anthropic sealed a real leak: claude-code-action now runs redactSecrets() on every public issue, PR, and inline comment before they hit the GitHub API [1]. Release notes confirm the fix "prevents potential leakage of Anthropic API keys, AWS credentials, Slack tokens, JWTs, and GitHub tokens" [2]. Internal logs and step summaries already redacted, so this closes the last gap. Elsewhere, a bot-filter bug silently let Dependabot comments through regardless of your include/exclude settings, and the fix uses GraphQL __typename to match bots that the REST login can't [4][5]. The Claude plugins picked up a deterministic static pin check that flags any MCP launcher (npx, bunx, uvx, pipx) running a floating spec like @latest or a version range, a real supply-chain risk the pinned source SHA doesn't cover [3]. Those bumps rolling through, 67 PRs across the four repos, are routine [6], but the security work is not. Skip nothing on the redaction front.

Action items

→ Merge and deploy the claude-code-action redaction fix (PR #1693) into your production action anthropics/claude-code-action [immediate]
→ Review existing secrets in public comment history for exposure from before the fix anthropics/claude-code-action [immediate]
→ Update claude-plugins to pick up the static pin check for MCP launchers anthropics/claude-plugins-community [plan]
→ Verify your bot filters now work with the GraphQL __typename fix anthropics/claude-code-action [monitor]

References

[1] fix(security): unify secret redaction in public comment outputs (#1693) anthropics/claude-code-action
[2] fix(security): unify secret redaction in public comment outputs ↗ anthropics/claude-code-action
[3] ci(scan): deterministic static pin check for auto-exec MCP launchers (per-consumer severity) ↗ anthropics/claude-plugins-community
[4] fix(github): match bot actors in comment filters using GraphQL __typename ↗ anthropics/claude-code-action
[5] fix(github): match bot actors in comment filters using GraphQL __typename (#1616) anthropics/claude-code-action
[6] bump(carta-investors): 6a712b6d → 0f0e2f5a ↗ anthropics/claude-plugins-official

Quick answers

What shipped in Anthropic on August 19, 2026?: A security patch to the Claude Code Action stops public comments from leaking raw credentials. In total, 9 commits, 67 pull requests, and 1 releases landed.
Who contributed to Anthropic on August 19, 2026?: 5 developers shipped this update, including Bryan Thompson, Michael Moore, github-actions, Juwan, and Neal006.
What were the notable Anthropic updates?: fix(security): unify secret redaction in public comment outputs (#1693), fix(security): unify secret redaction in public comment outputs, and ci(scan): deterministic static pin check for auto-exec MCP launchers (per-consumer severity).

CLAUDE CODE 2.1.237 SHIPS CONCISE OUTPUT STYLE AND CRITICAL GIT AUTH FIX

Claude Code just got a built-in 'Concise' output style and a long-awaited fix for actions/checkout credential leakage, and one of them is a security patch you should grab before your next CI run.

ai 18 shipped

@anthropics Aug 18

SDK Python SDK Gains Typed Errors, Parent Tool Recovery, and Subagent Text Forwarding

The Python Agent SDK just fixed three long-standing bugs and added a new option, all in a single day's work from qing-ant.

ai 46 shipped

@anthropics Aug 17

CLAUDE-CODE FIREWALL FIX UNBLOCKS DEVCONTAINER STARTUP

A broken DNS resolution in init-firewall.sh was killing devcontainer builds, and it's now patched [ref:1].

ai 12 shipped

@anthropics Aug 16

FOUR PLUGIN BUMPS QUEUED FOR REVIEW ACROSS OFFICIAL CATALOG

Mattpocock-skills, sumup, stripe, and superdesign all shipped validated updates overnight and are waiting for merge approval.

ai 4 shipped

Elsewhere on the wire

AI Agents Aug 20

LangChain ships core 1.6.0 with a security warning tucked inside

LangChain's newest core release fixes a tool-injection bug, but the fix itself widens the path for arbitrary code execution.

ai-agents 95 shipped

Local LLMs Aug 20

OLLAMA FIXES DEADLOCK THAT HUNG CHAT AND GENERATE

A mid-stream parser error in Ollama's server silently wedged chat and generate requests, leaking goroutines and hanging retries until a fix landed overnight.

+14

llms 268 shipped

@CachyOS Aug 20

LINUX-CACHYOS SHIPS 7.2.0-1

CachyOS's custom kernel just advanced to 7.2.0-1, and the sched-ext toolchain is moving in lockstep.

infra 55 shipped

Elixir & Phoenix Aug 20

LIVE VIEW HOOKS GET THE ELOQUENT TREATMENT

Phoenix Live View is shipping a passel of hook and JS-client fixes today, headlined by new beforeUpdate arguments that hand you more control over a hook's lifespan.