From 3a9487b37f2c5a9a91b9cf7267da0be8e1371ac3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 17 Oct 2026 00:21:45 +0000 Subject: [PATCH] chore(deps): bump anthropics/claude-code-action Bumps the claude-code-action group with 1 update in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `anthropics/claude-code-action` from 1.0.229 to 1.0.250 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/a4f54ef2c58884867281bd8e2f8d63352ad019a9...a26b07d8c778b0c43f64618e5fd29fd0f8af72e8) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.236 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: claude-code-action ... Signed-off-by: dependabot[bot] --- .github/workflows/claude-adversarial-review.yml | 2 +- .github/workflows/claude-review.yml | 2 +- .github/workflows/verifier-on-high-risk.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/claude-adversarial-review.yml b/.github/workflows/claude-adversarial-review.yml index e393a18..f06ca8c 100644 --- a/.github/workflows/claude-adversarial-review.yml +++ b/.github/workflows/claude-adversarial-review.yml @@ -182,7 +182,7 @@ jobs: id: claude # Pinned by full SHA; claude-review.yml's action step says why this # version and how the pin moves. - uses: anthropics/claude-code-action@a4f54ef2c58884867281bd8e2f8d63352ad019a9 # v1.0.229 + uses: anthropics/claude-code-action@a26b07d8c778b0c43f64618e5fd29fd0f8af72e8 # v1.0.250 # Attributes come from the base commit, never from the PR. `gh pr diff` # is GitHub's server-side diff, which ignores .gitattributes, but the # allowlisted `git log` prints patches too (-p), and git takes diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 2509e21..0880b2a 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -453,7 +453,7 @@ jobs: # A bump must also re-check what the caller check relies on: a # `github_token` input skips the OIDC exchange and is never revoked, # and a validation skip still exits 0 with no `conclusion`. - uses: anthropics/claude-code-action@a4f54ef2c58884867281bd8e2f8d63352ad019a9 # v1.0.229 + uses: anthropics/claude-code-action@a26b07d8c778b0c43f64618e5fd29fd0f8af72e8 # v1.0.250 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} # The job token when this PR changes its calling workflow, or when diff --git a/.github/workflows/verifier-on-high-risk.yml b/.github/workflows/verifier-on-high-risk.yml index c24b81b..ab85aea 100644 --- a/.github/workflows/verifier-on-high-risk.yml +++ b/.github/workflows/verifier-on-high-risk.yml @@ -521,7 +521,7 @@ jobs: # CLI install and well under 1 more on real runs) and the reporting # after it. Real runs take about 2 minutes in all. timeout-minutes: 10 - uses: anthropics/claude-code-action@a4f54ef2c58884867281bd8e2f8d63352ad019a9 # v1.0.229 + uses: anthropics/claude-code-action@a26b07d8c778b0c43f64618e5fd29fd0f8af72e8 # v1.0.250 # Attributes come from the base commit, never from the PR. The model # reads each file with `git diff` in the PR checkout, and git takes # .gitattributes from that checkout: a path the PR itself marks