RepoJournal
Anthropic @anthropics
173 wires and counting

$ follow Anthropic

Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-10-28
stories 36
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

Scanners route reports to GitHub advisories; claude-code consolidates its plugin marketplace

By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology

Mohamed Hegazy David Ansari Martin Costello henry-hai Radoslav Dimitrov Sam Barani Tobin South
9 people shipped this
Mohamed Hegazy @mhegazy 2 cited David Ansari @ansd 1 cited Martin Costello @martincostello 1 cited henry-hai @hhai-ant 1 cited Radoslav Dimitrov @rdimitrov Sam Barani @sb- Tobin South @tobinsouth jordanecker-ant @jordanecker-ant GitHub Actions (publish-mods) @actions-user

oss-scanner moved four upstream projects off email disclosure and onto GitHub Security Advisories, while claude-code retired its stale plugin copies in favor of claude-plugins-official.

Install marketplace plugins from claude-plugins-official anthropics/claude-code

by mhegazy

The claude-code-plugins marketplace now installs every plugin from claude-plugins-official, and the stale copies in this repo are deleted. Existing name@claude-code-plugins ids keep working, but the merge note warns that landing this before the code-review port and plugin-version PRs would have given users the older code-review and no-op updates.

opentelemetry-dotnet: use GitHub Security Advisories anthropics/oss-scanner

by Martin Costello

opentelemetry-dotnet's vulnerability reports now go through GitHub Security Advisories instead of email, and the merge of the same change followed in a separate commit. The same advisory routing landed for RabbitMQ in a second merged PR.

Report vulnerabilities via GitHub Security Advisories anthropics/oss-scanner

by David Ansari

A general path for reporting vulnerabilities through GitHub Security Advisories rather than email, which the project-specific changes for opentelemetry-dotnet and RabbitMQ then configure. go-tuf's advisories were enabled at medium severity in a companion commit.

Merge pull request #1396 from anthropics/mhegazy/bump-security-guidance-2.0.17 anthropics/knowledge-work-plugins

by Mohamed Hegazy

The security-guidance plugin moved from af59ee3a to 41f619d6, and the marketplace.json update that followed is what makes the newer entry visible to installers.

Release v2.0.1 anthropics/claude-for-financial-advisors

by henry-hai

claude-for-financial-advisors tagged v2.0.1 with no changelog detail in the input; a CODEOWNERS addition for jordanecker-ant landed alongside it.

$ ls anthropics/reviews/ # the step-back reads

the week in review PHP SDK 1.5.0 ships typed exceptions; self-hosted sandboxes land the month in review Claude Code symlink TOCTOU allows arbitrary file write
Full archive → Weekly reviews →

Quick answers

What shipped in Anthropic on October 28, 2026?
oss-scanner moved four upstream projects off email disclosure and onto GitHub Security Advisories, while claude-code retired its stale plugin copies in favor of claude-plugins-official. In total, 25 commits, 10 pull requests, and 1 releases landed.
Who contributed to Anthropic on October 28, 2026?
9 developers shipped this update, including David Ansari, Martin Costello, Radoslav Dimitrov, Sam Barani, Tobin South, jordanecker-ant, henry-hai, and Mohamed Hegazy, and 1 more.
What were the notable Anthropic updates?
Install marketplace plugins from claude-plugins-official, opentelemetry-dotnet: use GitHub Security Advisories, and Report vulnerabilities via GitHub Security Advisories.
♥

$ log @anthropics --recent

Maintainers get to set the format of scanner reports and patches 8 shipped fasthttp joins the scanner roll 7 shipped Office skills go Apache 2.0, security-guidance ships 2.0.18 121 shipped Hardening security-guidance reviews, CLI 2.7.0, self-hosted sandboxes 69 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.