$ cat anthropics/week/2026-10-12.log
the week in review · Oct 12 – Oct 18, 2026
OSS Scanner signs OpenSSH, Airflow, Gitea, WordPress and Bluesky's stack
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
Twenty-plus projects enrolled this week, while sandbox-runtime fixed three path-matching and write-deny defects across Linux, Windows and Bun.
Response header bytes past ASCII reach the client unchanged under Bun anthropics/sandbox-runtime
Under Bun, a response's head is written as a string and reaches the socket without a declared encoding, so the UTF-8 default applies; the proxy's latin1 read of upstream headers turns every byte from 0x80 up into a corrupted character. If you run the sandbox behind Bun's http.Server, header values outside ASCII arrive mangled at the client.
Read brackets that spell no set of characters as text, so no path entry keeps a sandbox from starting anthropics/sandbox-runtime
A path entry whose brackets hold no real range, like a folder named [user-id], compiles to no regular expression, and the damage spreads: an ordinary **/.env no longer matches when the working directory sits inside such a folder, so the sandbox fails to start. Bracket literals and backward ranges now fall through to text.
linux: bind a write deny that holds an allowed write path anthropics/sandbox-runtime
denyWrite outranks allowWrite regardless of nesting, so a deny path inside, equal to, or holding an allowed write path now gets a read-only bind mounted after the allow binds. A deny that meets none of those cases mounts nothing.
security-guidance: deliver commit and push findings on stderr (#6379) anthropics/claude-plugins-official
Commit and push findings previously went only into hookSpecificOutput.additionalContext, which Claude Code's asyncRewake path never reads. They now print to stderr, and a failed review is no longer reported as clean.
security-guidance: send ANTHROPIC_CUSTOM_HEADERS on the plugin's own API calls anthropics/claude-plugins-official
Both of the plugin's own API calls, the /v1/models lookup and the review itself, now send ANTHROPIC_CUSTOM_HEADERS. Reviews behind a header-keyed gateway had always failed without it.
codegen: validate custom attribute strings as #[...] attributes anthropics/buffa
Custom attribute strings passed to type_attribute, field_attribute, message_attribute, enum_attribute, oneof_attribute and oneof_struct_field_attribute are now validated as real #[...] attributes. Previously they were only checked for balanced delimiters, so a bad serde(skip) surfaced late as InvalidSyntax rather than at codegen.
enroll indigo in OSS Scanner anthropics/oss-scanner
Bluesky's Go implementations of AT Protocol services and libraries join the scanner: all Go packages compile and every command installs with CGO enabled, reports route to security@bsky.app with infra@blueskyweb.xyz on auto_ccs, and the Relay admin UI builds in the check.
Build the project of an enrolment pull request anthropics/oss-scanner
A new workflow runs tools/check against the project each enrolment pull request adds or changes, so a reviewer sees whether its Dockerfile builds. Both the workflow and the tool come from the base branch; only regular files directly inside the project directory are taken from the PR.
$ ls anthropics/week/ # the briefings behind this review
Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.