$ ls anthropics/reviews/ # the step-back reads
Anthropic in review
One review per week (and month): what shipped, what broke, what to act on.
Nov 2–8, 2026 weekly [act] 7 stories
PHP SDK 1.5.0 ships typed exceptions; self-hosted sandboxes land
Agent SDK hooks can now block a crashed PreToolUse guard, and oss-scanner enrolled FFmpeg, Tesseract, Lustre, BIND 9, scilab and fasthttp.
Oct 26–Nov 1, 2026 weekly [act] 8 stories
OSS Scanner enrollment wave takes in curl, starlette and Bitcoin
Projects gained per-severity report routing this week while Claude Code 2.1.316 added pooled group budgets and a switch to disable ultrat...
Oct 19–25, 2026 weekly [plan] 8 stories
Claude Code 2.1.304 adds plugin hook-skip transcripts
Release train reached 2.1.308 in the action while the sandbox-runtime closed Node proxy and Windows fence gaps.
Oct 12–18, 2026 weekly [act] 8 stories
OSS Scanner signs OpenSSH, Airflow, Gitea, WordPress and Bluesky's stack
Twenty-plus projects enrolled this week, while sandbox-runtime fixed three path-matching and write-deny defects across Linux, Windows and...
Oct 5–11, 2026 weekly [act] 8 stories
Claude Code symlink TOCTOU allows arbitrary file write
The same week the sandbox-runtime's three-part path-handling rewrite merged, and both Python and Java SDKs gained claude-haiku-5-5 support.
Oct 1–31, 2026 monthly [act] 8 stories
Claude Code symlink TOCTOU allows arbitrary file write
The month's security work spans both ends: that write primitive in Claude Code, and the sandbox-runtime and buffa hardening that followed...
Sep 28–Oct 4, 2026 weekly [act] 8 stories
Sonnet 5.5 becomes the default model
Claude Code v2.1.284 ships the switch at 1M context and $2/$10 per Mtok, and CI pipelines pin their models in response.
Sep 21–27, 2026 weekly [act] 8 stories
Cowork folder file can execute on macOS hosts
Claude Desktop on macOS runs commands from a malicious file opened in a Cowork folder; buffa 0.10 hardened parsing all week.
Sep 14–20, 2026 weekly [act] 8 stories
Claude Code 2.1.277 adds AGENTS.md support
The same week, sandbox-runtime closed a hole where a root write or read root silently disabled every deny beneath it.
Sep 7–13, 2026 weekly [act] 8 stories
Claude Agent SDK patches argument injection
buffa tightens descriptor parsing and the sandbox runtime now refuses hostnames that resolve to private addresses.
Sep 1–30, 2026 monthly [act] 7 stories
Sandbox and SDK holes dominate Anthropic's September
Three command-execution and file-read flaws shipped fixes across the Python agent SDK, Claude Desktop for macOS, and buffa's JSON parser.
Aug 31–Sep 6, 2026 weekly [act]
Buffa hardens encoding, OwnedView drops Drop
Claude Security Plugin v0.11.0 ships breaking changes; SDKs land compliance types; Claude Code bumps to 2.1.260/263.
Aug 24–30, 2026 weekly
Organization API lands SDK-wide, Claude Code patches production paths
This week Anthropic shipped the Organization API across every official SDK, patched two Claude Code production failure modes, and restruc...
Aug 1–31, 2026 monthly
Claude Code sync stabilizes, Anthropic SDKs hit 1.0, plugins roll at scale
August brought Claude Code and the SDKs into a hardened, synchronized state, capped by the Python SDK hitting 1.0.0 and the Organization ...
Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.