●2.1.296 — Subagents can set their own autoCompactWindow, and an env var pins the model used by workflow agents●AGENTS — Managed Agents gain dynamic workflows in beta: an agent can build a run for work with many pieces (Oct 9)●SONNET 4.5 — Retires on the Claude API on 11/30, 50 days left. Migrate to Sonnet 5.5●Q&A — A long-running report: Max plan users hit usage limits almost immediately●HAIKU 5.5 — Code written for Haiku 4.5 hits a 400 error on budget_tokens●NEW — Before you cut an always-loaded instruction file in half, sort it into three drawers●2.1.296 — Subagents can set their own autoCompactWindow, and an env var pins the model used by workflow agents●AGENTS — Managed Agents gain dynamic workflows in beta: an agent can build a run for work with many pieces (Oct 9)●SONNET 4.5 — Retires on the Claude API on 11/30, 50 days left. Migrate to Sonnet 5.5●Q&A — A long-running report: Max plan users hit usage limits almost immediately●HAIKU 5.5 — Code written for Haiku 4.5 hits a 400 error on budget_tokens●NEW — Before you cut an always-loaded instruction file in half, sort it into three drawers

TAG

WIF

1 articles

← Back to all tags

Claude Code¹ Security¹ Automation¹

⟐ Claude Code/2026-06-28Intermediate

Stop Leaving a Static API Key in Your Unattended Jobs — Move to Short-Lived WIF Credentials

Claude Code is moving from static API keys toward short-lived, scoped credentials via WIF (Workload Identity Federation). Here is how to translate that idea to a small unattended pipeline so a leaked key has a much smaller blast radius — with working code and the failure modes to watch.