ci: bump the github-actions group across 1 directory with 2 updates - #61
Open
dependabot[bot] wants to merge 1 commit into
Open
ci: bump the github-actions group across 1 directory with 2 updates#61dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-3b641ba166
branch
from
July 5, 2026 21:32
24e46d5 to
2883052
Compare
Contributor
|
Bugbot is not enabled for this team, so this pull request was not reviewed. Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs. |
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-3b641ba166
branch
2 times, most recently
from
July 26, 2026 21:32
e282a3f to
85e570c
Compare
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-3b641ba166
branch
from
August 2, 2026 21:32
85e570c to
8107126
Compare
Bumps the github-actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6...v7) Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.186 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@787c5a0...c038e4d) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.153 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-3b641ba166
branch
from
August 9, 2026 21:33
8107126 to
4cd4b8b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 2 updates in the / directory: actions/checkout and anthropics/claude-code-action.
Updates
actions/checkoutfrom 6 to 7Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
anthropics/claude-code-actionfrom 1.0.133 to 1.0.186Release notes
Sourced from anthropics/claude-code-action's releases.
... (truncated)
Commits
c038e4dchore: bump Claude Code to 2.1.223 and Agent SDK to 0.3.2234c04887Invoke the formatter directly from the format hook (#1594)9db594cchore: bump Claude Code to 2.1.222 and Agent SDK to 0.3.222acb0385Check collaborator permissions for workflow_run events (#1590)b80a0f0Match downloaded images to their source URLs by asset identifier (#1588)6fb6bb6Pin bun config for MCP server processes (#1589)b2963b9Derive trigger timestamps for issues and pull_request events (#1592)86180fachore: bump Claude Code to 2.1.221 and Agent SDK to 0.3.221be7b93bchore: bump Claude Code to 2.1.220 and Agent SDK to 0.3.220e0cf66dchore: bump Claude Code to 2.1.219 and Agent SDK to 0.3.219Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.Note
Low Risk
Dependency-only workflow pin bumps with no product code changes; checkout v7’s safer PR defaults are unlikely to affect these trigger types, but agent review behavior may shift slightly with the claude-code-action upgrade.
Overview
This PR bumps third-party GitHub Actions across CI, agent PR review, release binaries, and zizmor workflows—no application or CLI code changes.
actions/checkoutmoves from v6.0.2 to v7.0.1 (pinned SHA) inci.yml,cli-pr-review.yml, andzizmor.yml, and from@v6to@v7inrelease-binaries.yaml. v7 tightens defaults around checking out fork PRs onpull_request_target/workflow_run; these workflows use normalpull_request/issue_commentcheckouts, so behavior should stay the same unless a workflow relied on the old unsafe defaults.anthropics/claude-code-actionincli-pr-review.ymlgoes from v1.0.133 to v1.0.186, which pulls newer Claude Code / Agent SDK versions and includes permission and event-handling fixes (e.g. collaborator checks onworkflow_run, image matching, trigger timestamps).Reviewed by Cursor Bugbot for commit 4cd4b8b. Bugbot is set up for automated code reviews on this repo. Configure here.