$ cat anthropics/week/2026-10-05.log
the week in review · Oct 5 – Oct 11, 2026
Claude Code symlink TOCTOU allows arbitrary file write
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The same week the sandbox-runtime's three-part path-handling rewrite merged, and both Python and Java SDKs gained claude-haiku-5-5 support.
Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code anthropics/claude-code
The advisory describes a write-time symlink following race in Claude Code: a path checked as a symlink can be swapped before the write, yielding an arbitrary file write. The report names no affected or fixed version, so the remediation is whatever the advisory itself prescribes rather than a bump to a specific release.
v1.12.0 anthropics/anthropic-sdk-python
The 1.12.0 release adds claude-haiku-5-5 and typed computer and browser toolset tool calls to the Python SDK, so tool-call payloads no longer arrive as loose unions. The same release line also picked up lifecycle stage fields and a filter on /v1/models, plus a fix for empty strings dropped from query params and multipart forms.
Answer 502 when an upstream sends an invalid status code anthropics/sandbox-runtime
A response head Node's res.writeHead refuses, for example `HTTP/1.1 099 x`, threw a RangeError inside the proxy's response callback; nothing caught it, so the proxy process exited and every connection through it died. The fix answers 502 instead, which keeps one malformed upstream from taking the whole proxy down.
v2.70.0 anthropics/anthropic-sdk-java
The Java client gains getters and builders on the structured output classes and now throws before sending a request with an empty path parameter, rather than letting the server reject it. Release notes for 2.70.0 add that listing Claude Console spend requires an admin key.
Add 3sum-apsp: formalization of "Truly Subquadratic 3SUM and Truly Subcubic APSP via Triangles in Sparse Lopsided Graphs" anthropics/formal-math
A new Lean 4 project formalizes the paper's results on subquadratic 3SUM and subcubic APSP via triangles in sparse lopsided graphs, pinned to Lean v4.33.1 as a self-contained Lake project. The accompanying CI change takes lean4export's vX.Y.0 tag when a Lean patch release has no tag of its own.
descriptor: reject unrecognized file syntax and editions files without an edition anthropics/buffa
DescriptorPool had linked any unrecognized syntax string with proto2 semantics, so a typo like `prot3` silently changed field presence, enum openness and packing. Editions files with an unset or EDITION_UNKNOWN edition are now rejected too.
json: reject unset Value during serialization anthropics/buffa
Serializing a google.protobuf.Value with no kind set used to emit null, which reads back as a Value holding NullValue, so the round trip changed the message. It now returns an error, matching struct.proto and protobuf-go.
test(e2e): fix thinking-deltas test for CLI 2.1.287+ to unblock releases anthropics/claude-agent-sdk-python
One e2e test has failed on every CLI bump since 2.1.287, and because Auto Release only fires after a green Test commit, 2.1.287 through 2.1.291 were all skipped. Fixing the thinking-deltas test unblocks the release path rather than shipping a new feature.
$ ls anthropics/week/ # the briefings behind this review
Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.