RepoJournal
Anthropic @anthropics

Anthropic — full archive

150 daily briefings · 9 reviews.

$ ls anthropics/reviews/ # the step-back reads

  1. week Claude Code symlink TOCTOU allows arbitrary file write
  2. week Sonnet 5.5 becomes the default model
  3. week Cowork folder file can execute on macOS hosts
  4. week Claude Code 2.1.277 adds AGENTS.md support
  5. week Claude Agent SDK patches argument injection
  6. month Sandbox and SDK holes dominate Anthropic's September
  7. week Buffa hardens encoding, OwnedView drops Drop
  8. week Organization API lands SDK-wide, Claude Code patches production paths
  9. month Claude Code sync stabilizes, Anthropic SDKs hit 1.0, plugins roll at scale
  1. sandbox-runtime fixes a quadratic glob parse, and five projects enroll in OSS Scanner
  2. buffa breaks inferred collect() calls, sandbox-runtime fixes the proxy and Linux relays
  3. Buffa hardens codegen and descriptor validation, OSS Scanner enrolls WordPress and the AT Protocol stack
  4. security-guidance findings reach stderr, and sandbox ignoreViolations types match the CLI
  5. Bun header encoding corrupts sandboxed responses, and backwards glob ranges stop paths from compiling
  6. OSS Scanner adds simplex-chat, tinyssh, tinyauth, openmetadata, pdf_oxide
  7. sandbox-runtime cleans up mounts, warns on writable installs
  8. srt-proxy leaks trailers across Bun connections, and the Linux wrap stops blaming the config
  9. Python agent SDK types catch up to TypeScript hooks and init payloads
  10. Python and Java SDKs take claude-haiku-5-5, typed computer and browser tool calls
  11. sandbox-runtime drops connections on invalid upstream status, buffa tightens its parsers
  12. Claude Code symlink TOCTOU allows arbitrary file write
  13. Sandbox path entries stop silently dropping bracketed directories
  14. Buffered Any payloads now count against the element memory limit
  15. security-guidance follows the newest Opus, bubblewrap 0.4 sandboxes start again
  16. CI actions pinned to commits, codegen drops default-instance derefs
  17. Diff pane stops forking per file, Sonnet 4.5 gets an end date
  18. Claude CI moves behind the egress firewall, permission mode goes auto"
  19. Sonnet 5.5 becomes the default, Opus 5.5 takes over the skills docs
  20. Scope guard stops failing command-source PRs
  21. buffa closes a JSON recursion bypass, shrinks generated encoders
  22. Cowork folder file execution on macOS, axt-verify v0.1.0
  23. Gateway stops trusting stale signing keys, tokio publishes to internal registry
  24. Codegen lifetime bug in buffa views, descriptor pool tightens validation
  25. Buffa closes silent JSON parse failures, quickstarts move to ant apply
  26. Explicit string copying lands in buffa 0.10
  27. Buffa hardens WKT and descriptor parsing, claude-code smooths the diff pane
  28. Verbatim prompt mode closes an @-path file read in the Python SDK
  29. Claude Code 2.1.277 reads AGENTS.md, agent-sdk ships the AGENTS.md mod
  30. Sandbox-runtime closes a silent deny-glob hole and two Linux startup failures
  31. Sales plugin declares Salesforce and Microsoft 365 connectors, plugin directory adds six integrations
  32. Diff pane stops surprising you, sales plugin goes 9 to 36 skills
  33. A root write/read root no longer disables sandbox denies, npm root lookup off the event loop
  34. Mod tests move next to their mods, BlackRock Advisor Center lands twice
  35. Argument injection in claude-agent-sdk-python, mod test harness lands in claude-code
  36. NetSuite plugins land in Cowork, wealth-management plugin pulled
  37. sandbox-runtime blocks DNS-resolved private IPs, buffa stops double-writing bytes
  38. Claude Code ships hooks-module plugins as source, security-guidance learns repo resolution
  39. Claude Code and Agent SDK sync to 2.1.266 across action repos
  40. Homebrew tap ships ant v1.31.0 cask updates
  41. Buffa strict parsers: unknown fields and bad descriptor indices now rejected
  42. Claude Code 2.1.263 ships across GitHub Actions and SDK packages
  43. SDKs ship compliance types, Claude Tag usage breakdowns
  44. Claude Code bumps to 2.1.260 across action and SDK
  45. Buffa descriptor pool now rejects malformed enums and reserved fields
  46. Buffa bounds Any nesting; Claude Security Plugin v0.11.0 lands
  47. buffa fixes double-drop, unset ProtoJSON null, and re-measures benchmarks
  48. Buffa wires shared descriptor pools, cuts codegen token blow-up
  49. Claude cookbook drops unverified cost claims, formal-math tightens authorship and CI
  50. ANTHROPIC RESTRUCTURES FORMAL-MATH TOWARD MULTI-PROJECT LEAN
  51. ORGANIZATION API LANDS ACROSS EVERY ANTHROPIC SDK
  52. CLAUDE CODE PATCHES STALLED LOG FETCH, SECURITY WILDCARD WARNINGS
  53. Claude Code 2.1.245 fixes Linux startup crash
  54. Noibu joins the Anthropic plugin marketplace
  55. Claude Code 2.1.241 Lands Overnight in Cross-Stack Sync
  56. BUFFA CUTS BINARY BLOAT WITH DEBUG GATE AND SELECTIVE INLINING
  57. ANTHROPIC SDK PYTHON HITS 1.0.0
  58. CLAUDE CODE 2.1.237 SHIPS CONCISE OUTPUT STYLE AND CRITICAL GIT AUTH FIX
  59. SECRET LEAK THREAT MAKES GITHUB COMMENTS SAFER
  60. SDK Python SDK Gains Typed Errors, Parent Tool Recovery, and Subagent Text Forwarding

Never miss a Anthropic briefing.

Get Anthropic's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.

One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →