chore(deps): bump anthropics/claude-code-action from 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146 by dependabot[bot] · Pull Request #178 · sjnims/plugin-dev

dependabot · 2025-12-20T04:42:47Z

Bumps anthropics/claude-code-action from 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

sjnims · 2025-12-20T04:43:43Z

@claude please review this PR

claude · 2025-12-20T04:43:55Z

Claude finished @sjnims's task in 1m 16s —— View job

PR Review: claude-code-action Version Bump

Todo List

Read modified workflow files
Analyze the version bump changes
Check for consistency across all workflows
Verify no breaking changes or issues
Provide review feedback

Review Summary

This Dependabot PR updates anthropics/claude-code-action from commit 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146 across 7 workflow files.

Changes Analysis

Files Modified:

.github/workflows/ci-failure-analysis.yml
.github/workflows/claude-pr-review.yml
.github/workflows/claude.yml
.github/workflows/component-validation.yml
.github/workflows/semantic-labeler.yml (2 instances)
.github/workflows/version-check.yml
.github/workflows/weekly-maintenance.yml

Change Pattern: All changes follow the same pattern - updating the commit SHA while keeping the version comment # v1.0.26 unchanged.

Upstream Commits Included

Between the old and new commit, the following improvements were made in claude-code-action:

chore: bump Claude Code to 2.0.72 and Agent SDK to 0.1.72 (commit 0d193352) - December 17, 2025
- This is the target commit
fix: set GH_TOKEN alongside GITHUB_TOKEN for gh CLI precedence (#752) - December 17, 2025
- Important fix: Ensures gh CLI commands use the action's prepared token
- Prevents issues when GH_TOKEN is set in environment
fix: respect user's --setting-sources in claude_args (#750) - December 16, 2025
- Fixes hardcoded settingSources that was overriding user preferences
fix: merge multiple --mcp-config flags and support --allowed-tools parsing (#748) - December 16, 2025
- Fixes MCP config merging issue
- Adds support for hyphenated --allowed-tools flag

Review Findings

✅ Strengths

Consistent Updates: All 7 workflow files updated uniformly with the same commit hash
Bug Fixes Included: The update includes several important bug fixes:
- GitHub token handling improvements
- User preference respect for settings
- MCP config flag parsing fixes
Version Stability: Still labeled as v1.0.26, indicating no breaking changes
Safe Update: All changes are bug fixes and minor improvements with no breaking changes

⚠️ Observations

Version Comment Mismatch: The inline comment still shows # v1.0.26 but points to a newer commit. This is expected for patch-level updates within the same version, but it's worth noting that the commit hash is the source of truth, not the version tag comment.
No Release Tag: The target commit 0d193352 appears to be a direct commit reference rather than a tagged release. This is acceptable but means the version relies on commit SHA rather than semantic versioning tags.

Recommendation

✅ APPROVE - This is a safe update that includes important bug fixes, particularly:

GitHub CLI token handling (prevents authentication issues)
User settings preferences (respects user configuration)
MCP config parsing (improves functionality)

The changes are backward-compatible and the update pattern is consistent across all workflows. The bug fixes address real issues without introducing breaking changes.

Additional Notes

The repository uses Dependabot for automated dependency updates, which is a good security practice
All workflow files maintain consistent formatting and structure
No functional changes to workflow logic, only the action version reference

sjnims

@claude Isn't the latest released version of this action 1.0.27?

sjnims · 2025-12-20T04:48:59Z

@claude Isn't the latest released version of this action 1.0.27?

claude · 2025-12-20T04:49:29Z

Claude finished @sjnims's task in 2m 55s —— View job

Investigation: claude-code-action Version

Summary

You're absolutely correct! The latest released version is v1.0.27 (released Dec 19, 2024), not v1.0.26.

Version Timeline:

v1.0.26 → Commit 0d19335 (what this PR originally targeted)
v1.0.27 → Commit 7145c3e (latest release, Dec 19, 2024)

Changes Made Locally

I've updated all 7 workflow files to use v1.0.27 (commit 7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f):

.github/workflows/ci-failure-analysis.yml ✓
.github/workflows/claude-pr-review.yml ✓
.github/workflows/claude.yml ✓
.github/workflows/component-validation.yml ✓
.github/workflows/semantic-labeler.yml (2 instances) ✓
.github/workflows/version-check.yml ✓
.github/workflows/weekly-maintenance.yml ✓

All files now reference:

uses: anthropics/claude-code-action@7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f # v1.0.27

Action Required

I cannot commit these changes due to GitHub App permission restrictions on workflow files (.github/workflows/ directory is protected).

Recommended Approach:

# Checkout the PR branch
git fetch origin dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146
git checkout dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146

# Update all workflow files
find .github/workflows -name "*.yml" -type f -exec sed -i '' \
  's/@0d1933529914177075d5bc3558ae3d047f188146 # v1.0.26/@7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f # v1.0.27/g' {} +

# Commit and push
git add .github/workflows/
git commit -m "chore(deps): update claude-code-action to v1.0.27"
git push

Alternative: Close this PR and let Dependabot create a new one for v1.0.27.

sjnims · 2025-12-20T04:53:21Z

Claude finished @sjnims's task in 2m 55s —— View job

Investigation: claude-code-action Version

Summary

You're absolutely correct! The latest released version is v1.0.27 (released Dec 19, 2024), not v1.0.26.

Version Timeline:

v1.0.26 → Commit 0d19335 (what this PR originally targeted)

v1.0.27 → Commit 7145c3e (latest release, Dec 19, 2024)

Changes Made Locally

I've updated all 7 workflow files to use v1.0.27 (commit 7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f):

.github/workflows/ci-failure-analysis.yml ✓

.github/workflows/claude-pr-review.yml ✓

.github/workflows/claude.yml ✓

.github/workflows/component-validation.yml ✓

.github/workflows/semantic-labeler.yml (2 instances) ✓

.github/workflows/version-check.yml ✓

.github/workflows/weekly-maintenance.yml ✓

All files now reference:
uses: anthropics/claude-code-action@7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f # v1.0.27
Action Required

I cannot commit these changes due to GitHub App permission restrictions on workflow files (.github/workflows/ directory is protected).

Recommended Approach:
# Checkout the PR branch
git fetch origin dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146
git checkout dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146

# Update all workflow files
find .github/workflows -name "*.yml" -type f -exec sed -i '' \
  's/@0d1933529914177075d5bc3558ae3d047f188146 # v1.0.26/@7145c3e0510bcdbdd29f67cc4a8c1958f1acfa2f # v1.0.27/g' {} +

# Commit and push
git add .github/workflows/
git commit -m "chore(deps): update claude-code-action to v1.0.27"
git push
Alternative: Close this PR and let Dependabot create a new one for v1.0.27.

@dependabot recreate

Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@94e310e...0d19335) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 0d1933529914177075d5bc3558ae3d047f188146 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

sjnims · 2025-12-20T05:01:22Z

Waiting for dependabot to correctly update to 1.0.27

dependabot · 2025-12-20T05:01:24Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot Bot assigned sjnims Dec 20, 2025

dependabot Bot added dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code labels Dec 20, 2025

dependabot Bot requested a review from sjnims as a code owner December 20, 2025 04:42

dependabot Bot added dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code labels Dec 20, 2025

sjnims requested changes Dec 20, 2025

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146 branch from b72bc62 to 90efa3f Compare December 20, 2025 04:54

sjnims closed this Dec 20, 2025

dependabot Bot deleted the dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146 branch December 20, 2025 05:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump anthropics/claude-code-action from 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146#178

chore(deps): bump anthropics/claude-code-action from 94e310eb2ce38c5bff2934c5858caf6cbde5ac01 to 0d1933529914177075d5bc3558ae3d047f188146#178
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/anthropics/claude-code-action-0d1933529914177075d5bc3558ae3d047f188146

dependabot Bot commented on behalf of github Dec 20, 2025 •

edited

Loading

Uh oh!

sjnims commented Dec 20, 2025

Uh oh!

claude Bot commented Dec 20, 2025 •

edited

Loading

Uh oh!

sjnims left a comment

Uh oh!

sjnims commented Dec 20, 2025

Uh oh!

claude Bot commented Dec 20, 2025 •

edited

Loading

Uh oh!

sjnims commented Dec 20, 2025

Investigation: claude-code-action Version

Summary

Changes Made Locally

Action Required

Uh oh!

sjnims commented Dec 20, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Dec 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Dec 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sjnims commented Dec 20, 2025

Uh oh!

claude Bot commented Dec 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Review: claude-code-action Version Bump

Todo List

Review Summary

Changes Analysis

Upstream Commits Included

Review Findings

✅ Strengths

⚠️ Observations

Recommendation

Additional Notes

Uh oh!

sjnims left a comment

Choose a reason for hiding this comment

Uh oh!

sjnims commented Dec 20, 2025

Uh oh!

claude Bot commented Dec 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Investigation: claude-code-action Version

Summary

Changes Made Locally

Action Required

Uh oh!

sjnims commented Dec 20, 2025

Investigation: claude-code-action Version

Summary

Changes Made Locally

Action Required

Uh oh!

sjnims commented Dec 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Dec 20, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Dec 20, 2025 •

edited

Loading

claude Bot commented Dec 20, 2025 •

edited

Loading

claude Bot commented Dec 20, 2025 •

edited

Loading

sjnims commented Dec 20, 2025 •

edited

Loading