RepoJournal
Anthropic @anthropics
110 wires and counting

$ follow Anthropic

Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-02
stories 29
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Buffa bounds Any nesting; Claude Security Plugin v0.11.0 lands

By RepoJournal · Filed · About Anthropic

github-actions[bot] azdagron Tobin South mmoore warronbebster Darshan Poudel iainmcgin
9 people shipped this
github-actions[bot] @github-actions[bot] 3 cited azdagron @azdagron 2 cited Tobin South @tobinsouth 1 cited mmoore @imichaelmoore 1 cited warronbebster @warronbebster 1 cited Darshan Poudel @rsd-darshan 1 cited iainmcgin @iainmcgin 1 cited Divyansh151005 @Divyansh151005 1 cited GitHub Actions @actions-user 1 cited

Three serialization-bound patches land in buffa while the official Claude plugins ship security release v0.11.0.

The Claude Security Plugin for claude-plugins-official shipped v0.11.0 [1], merged by Tobin South [2]. Also updated is /frontend-design SKILL.md to address "manatee slop measures" [3]. In buffa, two independent patches now bound recursion through nested google.protobuf.Any. Serializing a nested Any no longer expands each level without limit; [4] the reflective JSON serializer now threads a RECURSION_LIMIT (100) budget through to_json() to prevent a sub-megabyte input from overflowing the stack, which was an uncatchable abort [5]. Separately, buffa-build adds Config::exclude_package, matching protoc-gen-buffa's existing exclude_package knob since v0.6.0, for when directory globbing or --include_imports pulls in option-only packages like buf/validate/validate.proto [6]. Three more buffa fixes: repeated message values in one map entry now merge in view and reflective decoders, matching protobuf semantics [7]; Api, Type, and SourceContext join the JSON-mappable WKT set [8]. Meanwhile claude-agent-sdk-python released v0.2.151 and v0.2.150, both bumping the bundled CLI to 2.1.258 and 2.1.257 [9][10]; claude-code-action followed with v1.0.213 and v1.0.212, each carrying corresponding Agent SDK bumps [11][12].

Action items

References

  1. [1] Claude Security Plugin - v0.11.0 ↗ anthropics/claude-plugins-official
  2. [2] Merge pull request #5728 from anthropics/claude-security-v0.11.0 ↗ anthropics/claude-plugins-official
  3. [3] Update /frontend-design SKILL.md ↗ anthropics/claude-plugins-official
  4. [4] any: bound expansion depth when serializing nested Any ↗ anthropics/buffa
  5. [5] reflect: bound JSON serialization nesting through google.protobuf.Any ↗ anthropics/buffa
  6. [6] buffa-build: add Config::exclude_package knob (#383) ↗ anthropics/buffa
  7. [7] Merge repeated message values within one map entry in view and reflective decoders ↗ anthropics/buffa
  8. [8] types: add Api, Type, and SourceContext well-known types ↗ anthropics/buffa
  9. [9] v0.2.151 ↗ anthropics/claude-agent-sdk-python
  10. [10] v0.2.150 ↗ anthropics/claude-agent-sdk-python
  11. [11] v1.0.213 ↗ anthropics/claude-code-action
  12. [12] chore: bump Claude Code to 2.1.258 and Agent SDK to 0.3.258 ↗ anthropics/claude-code-action

$ ls anthropics/reviews/ # the step-back reads

the week in review Buffa hardens encoding, OwnedView drops Drop the month in review Claude Code sync stabilizes, Anthropic SDKs hit 1.0, plugins roll at scale
Topics: AI / ML Full archive →

Quick answers

What shipped in Anthropic on September 2, 2026?
Three serialization-bound patches land in buffa while the official Claude plugins ship security release v0.11.0. In total, 16 commits, 9 pull requests, and 4 releases landed.
Who contributed to Anthropic on September 2, 2026?
9 developers shipped this update, including Tobin South, mmoore, warronbebster, Darshan Poudel, iainmcgin, azdagron, Divyansh151005, and github-actions[bot], and 1 more.
What were the notable Anthropic updates?
Claude Security Plugin - v0.11.0, Merge pull request #5728 from anthropics/claude-security-v0.11.0, and Update /frontend-design SKILL.md.
♥ 1

$ log @anthropics --recent

Buffa strict parsers: unknown fields and bad descriptor indices now rejected 6 shipped Claude Code 2.1.263 ships across GitHub Actions and SDK packages 8 shipped SDKs ship compliance types, Claude Tag usage breakdowns 27 shipped Claude Code bumps to 2.1.260 across action and SDK 18 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes HashiCorp Arch Linux Linux OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.