Fetching from the wire…
Security2026-09-21 · source-backed
v1.103.0-rc.1 on September 20 includes #41541, fixing a guardrail that blocked the event loop for every request it inspected, plus #41555 which returns 429 when a deployment's max_parallel_requests slots are full instead of queueing. Also JWT key-mapping cache eviction on user, team, org and bulk key deletion, and save_config persisting only the keys a caller changed. A security control that halves your throughput gets turned off, so this is a security fix dressed as a performance fix.
Each link below shares sources, entities, or timing with this story.
The release candidate cut September 13 adds Azure Mistral in standard and native-auth variants, Azure Document Intelligence, Reducto legacy and v3, Vertex Mistral and Vertex DeepSeek OCR adapters, and PR #40509 removes the old pipeline instead of deprecating it. Native OCR req...
Released September 1, leading its notes with cosign verification for ghcr.io/berriai/litellm, recommending verification against the public key at pinned commit 0112e53 because a commit hash is cryptographically immutable, with tag-based verification offered as the weaker optio...
CometixCode, created September 20 at 230 stars within the day, AGPL-3.0 and unaffiliated with Anthropic, describes itself as a 1:1 Rust reimplementation porting the TypeScript React/Ink UI into iocraft, following the original file by file with TypeScript components mapped to R...
On September 9, Anthropic added a mods/ folder to the public claude-code repo containing the full source of three plugins compiled into the binary: sec-default, diff and telemetry. 52 commits by September 13. None of it appears in the CHANGELOG, so the repo is running ahead of...
Anthropic released Claude Fable 5.1 on September 1. Claude Code v2.1.257 made it the default Fable model at 17:53 UTC that day, with a 1M-token context window, $10 per million input tokens, $50 per million output, and $0.25 per million on cache reads (claude-code CHANGELOG). B...
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.