Repository navigation
Bump the actions group across 1 directory with 2 updates - #182
dependabot[bot] wants to merge 1 commit into
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Bumps the actions group with 2 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [actions/setup-python](https://github.com/actions/setup-python). Updates `anthropics/claude-code-action` from 1.0.252 to 1.0.265 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@f27be6b...6d5ae52) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@5fda3b9...6d4fd22) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.261 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
741db32 to
d2813fd
Compare
sykosyber
left a comment
sykosyber
left a comment
There was a problem hiding this comment.
No findings. I read AGENTS.md and CLAUDE.md. CONTRIBUTING.md is absent. I read the full diff against origin/main, both workflow files, and dependabot.yml. The pin 6d5ae526d25ce88daa2200be073e1a373167f064 is the commit tagged v1.0.265 of anthropics/claude-code-action, up from v1.0.252 at f27be6b65a4652f08a2ba3cff79114829b588967. The pin 6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 is actions/setup-python v7.1.0, up from v7.0.0 at 5fda3b95a4ea91299a34e894583c3862153e4b97. I read the upstream source for those ranges, including the claude-code-action branch checkout change and the setup-python mirror and token handling. The feedback workflow passes an explicit prompt, so the action stays in agent mode and that checkout pin does not run. setup-python is called with only python-version 3.13, with no mirror and no cache, in a pull_request_target job whose GitHits tokens remain on other steps. The commit trailer still says claude-code-action 1.0.261, while the workflow SHA is the v1.0.265 release commit. I did not read the setup-python dist bundles, the lockfiles, the rest of ci.yml, or the private policy runner. GitHits grounding was not available in this session. I ran npm test (93 files, 856 tests passed) and did not run typecheck, lint, build, e2e, or either workflow. GitHub's Typecheck, Test & Build, bundle scan, and dependency audit checks passed on this head. The policy check uses the base workflow, so it did not execute the new setup-python pin.
Bumps the actions group with 2 updates in the / directory: anthropics/claude-code-action and actions/setup-python.
Updates
anthropics/claude-code-actionfrom 1.0.252 to 1.0.265Release notes
Sourced from anthropics/claude-code-action's releases.
... (truncated)
Commits
6d5ae52chore: bump Claude Code to 2.1.314 and Agent SDK to 0.3.314d70510bchore: bump Claude Code to 2.1.312 and Agent SDK to 0.3.31298a9e39docs: use claude-plugins-official in plugin examples (#1932)8041f1dchore: bump Claude Code to 2.1.311 and Agent SDK to 0.3.311925afb5chore: bump Bun to 1.4.4 (#1916)16f9f71chore: bump Claude Code to 2.1.310 and Agent SDK to 0.3.3108d70a0dPin the PR version a run checks out (#1915)ae68417chore: bump Claude Code to 2.1.309 and Agent SDK to 0.3.3096b6870echore: bump Claude Code to 2.1.308 and Agent SDK to 0.3.308aa8a773chore: bump Claude Code to 2.1.307 and Agent SDK to 0.3.307Updates
actions/setup-pythonfrom 7.0.0 to 7.1.0Release notes
Sourced from actions/setup-python's releases.
Commits
6d4fd22Cache upgrade to 6.3.0 (#1370)ec52d0aBump@typescript-eslint/eslint-pluginfrom 8.62.0 to 8.71.1 (#1369)ff73b24Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)0e40890Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)3892123Bump ts-jest from 29.4.11 to 29.4.14 (#1361)6609657Bump undici from 6.28.0 to 6.29.0 (#1364)e1be392Bump@types/semverfrom 7.7.1 to 7.8.0 (#1359)06da627Bump@vercel/nccfrom 0.44.0 to 0.45.0 (#1357)af9bcc7Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)7aeabebBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1343)