141 wires and counting

$ follow Anthropic

Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-21
stories 38

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Buffa hardens WKT and descriptor parsing, claude-code smooths the diff pane

By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology

Buffa's parsers stop accepting malformed input and its reflection layer stops paying for repeated lookups, while Claude Code's diff pane and telemetry mod move closer to the built-in behavior they shadow.

wkt: reject signed components in RFC 3339 timestamps (#447) anthropics/buffa

by Lucca Boas

parse_timestamp checked RFC 3339 separators and then handed each component to integer from_str, which accepts a leading + even for unsigned types, so "+1".parse::<u8>() returned Ok(1). Signed components are now rejected rather than silently parsed.

descriptor: validate reserved-range bounds as protoc does (#418) anthropics/buffa

by Minh Vu

DescriptorPool used to silently drop reserved ranges with an unset or reversed bound, drop valid enum ranges such as ..8, and let a message range starting at zero or below reserve field numbers. ReservedRanges::for_message / for_enum now validate while indexing, reading an unset bound as 0 as protoc and protobuf-go do, and report PoolError::InvalidMessageRange instead.

reflect: return a borrowed empty message for unset message fields (#443) anthropics/buffa

by devjoinedthechat

DynamicMessage::get() on an unset singular message field used to build its default on every call, costing a Box allocation, an Arc::clone of the descriptor pool and the matching drop per read. It now returns a borrowed empty message, which is a breaking change to ReflectCow for callers that assumed an owned value.

diff: a resumed session with edits opens the pane, /clear leaves it up, and the session line follows the engine's start anthropics/claude-code

by poteat

A session resumed or continued whose transcript already holds an edit now opens the diff pane as soon as the width is known, and /clear leaves an open pane up and reads afresh under it. The line between "this session" and "edited before this session" now follows the engine's own session start, so the mod and the built-in panel no longer disagree.

telemetry: complete rows gathered through $, sent in batches, serving built-in plugins only anthropics/claude-code

by poteat

The telemetry mod runs wherever Claude Code's analytics are on, but only for plugins built into Claude Code: a hook reads next.origin and refuses a plugin a person installed or an administrator listed, with a reason. Rows carry the same fields as the CLI's own, gathered through $ once a session, so third-party plugins stay out of the pipeline.

Correct five false statements, and remove dead and duplicated code anthropics/sandbox-runtime

by ronleizrowice-ant

Five claims the repository makes about itself were false and are now corrected, dead and duplicated code is gone, and srt --version stops reporting 1.0.0: npm exports npm_package_version only to its own lifecycle scripts, so an installed srt printed 1.0.0 against a package at 0.0.77. A companion change makes nine tests able to fail and adds coverage for globToRegex and the public export list.

Quick answers

What shipped in Anthropic on September 21, 2026?
Buffa's parsers stop accepting malformed input and its reflection layer stops paying for repeated lookups, while Claude Code's diff pane and telemetry mod move closer to the built-in behavior they shadow. In total, 19 commits and 19 pull requests landed.
Who contributed to Anthropic on September 21, 2026?
7 developers shipped this update, including Lucca Boas, Minh Vu, Harshit Wandhare, devjoinedthechat, Tim Holland, poteat, and ronleizrowice-ant.
What were the notable Anthropic updates?
wkt: reject signed components in RFC 3339 timestamps (#447), descriptor: validate reserved-range bounds as protoc does (#418), and reflect: return a borrowed empty message for unset message fields (#443).