Repository navigation
chore(deps): bump the github-actions group across 1 directory with 2 updates - #3753
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM — straightforward Dependabot SHA bump, no logic changes.
What was reviewed: all 33 changed lines across the 18 workflow files are uses: pins for astral-sh/setup-uv (v10.0.1 to v10.2.0) and anthropics/claude-code-action (v1.0.234 to v1.0.237); confirmed via a diff-line filter that every added/removed line contains one of those two action references, so no other YAML content (jobs, permissions, secrets, triggers) changed.
Extended reasoning...
Dependabot PR updating pinned commit SHAs for two GitHub Actions (astral-sh/setup-uv, anthropics/claude-code-action) across 18 workflow files; diff is 33 single-line SHA+version-comment swaps with no other content altered, verified by filtering out lines matching the two action names and finding zero remainder. No new security-sensitive surface is introduced (no permissions/secrets/trigger changes); both replacement SHAs are well-formed 40-hex-char commit hashes matching those cited in the PR description's compare links. The mechanical, self-contained nature of the change and absence of any findings support approval.
165a22e to
3a852ab
Compare
…updates Bumps the github-actions group with 2 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `astral-sh/setup-uv` from 10.0.1 to 10.2.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@20cfd1b...c18668a) Updates `anthropics/claude-code-action` from 1.0.234 to 1.0.240 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@9171db3...ed670b4) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.237 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
3a852ab to
b834551
Compare
Bumps the github-actions group with 2 updates in the / directory: astral-sh/setup-uv and anthropics/claude-code-action.
Updates
astral-sh/setup-uvfrom 10.0.1 to 10.2.0Release notes
Sourced from astral-sh/setup-uv's releases.
... (truncated)
Commits
c18668achore(deps): roll up Dependabot updates (#1059)ffe1476chore: update known checksums for 0.12.17 (#1058)f5548c5chore: update known checksums for 0.12.16 (#1057)a761a4eDisable automatic cache saves for merge queues (#1056)3377a30chore: update known checksums for 0.12.15 (#1054)dfb5f38chore: update known checksums for 0.12.14 (#1053)45c121fchore: update known checksums for 0.12.13 (#1045)8073452docs: update version references to v10.1.0 (#1044)bec219dchore(deps-dev): roll up Dependabot updates (#1043)b90ec40fix: respect no proxy directive (#1037)Updates
anthropics/claude-code-actionfrom 1.0.234 to 1.0.240Release notes
Sourced from anthropics/claude-code-action's releases.
Commits
ed670b4chore: bump Claude Code to 2.1.288 and Agent SDK to 0.3.28897c5347chore: bump Claude Code to 2.1.287 and Agent SDK to 0.3.28712dd8d7chore: bump Claude Code to 2.1.286 and Agent SDK to 0.3.286a8cb0dbci: security hardening for GitHub Actions workflows that call Claude (#1867)fd1c128chore: bump Claude Code to 2.1.285 and Agent SDK to 0.3.2858ce9314chore: bump Claude Code to 2.1.284 and Agent SDK to 0.3.284756cc22chore: bump Claude Code to 2.1.283 and Agent SDK to 0.3.283