Skip to content

chore(deps): bump the actions group across 1 directory with 2 updates - #1234

Merged
frankbria merged 2 commits into
mainfrom
dependabot/github_actions/actions-3ceec6c9d6
Sep 17, 2026
Merged

frankbria merged 2 commits into
mainfrom
dependabot/github_actions/actions-3ceec6c9d6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: anthropics/claude-code-action and softprops/action-gh-release.

Updates anthropics/claude-code-action from 1.0.200 to 1.0.215

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.215

Full Changelog: anthropics/claude-code-action@v1.0.214...v1.0.215

v1.0.214

Full Changelog: anthropics/claude-code-action@v1.0.213...v1.0.214

v1.0.213

Full Changelog: anthropics/claude-code-action@v1.0.212...v1.0.213

v1.0.212

Full Changelog: anthropics/claude-code-action@v1.0.211...v1.0.212

v1.0.211

Full Changelog: anthropics/claude-code-action@v1.0.210...v1.0.211

v1.0.210

Full Changelog: anthropics/claude-code-action@v1.0.209...v1.0.210

v1.0.209

Full Changelog: anthropics/claude-code-action@v1.0.208...v1.0.209

v1.0.208

Full Changelog: anthropics/claude-code-action@v1.0.207...v1.0.208

v1.0.207

Full Changelog: anthropics/claude-code-action@v1.0.206...v1.0.207

v1.0.206

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1.0.205...v1.0.206

v1.0.205

Full Changelog: anthropics/claude-code-action@v1.0.203...v1.0.205

v1.0.204

Full Changelog: anthropics/claude-code-action@v1.0.202...v1.0.204

v1.0.203

Full Changelog: anthropics/claude-code-action@v1.0.202...v1.0.203

... (truncated)

Commits
  • ef8bb1e chore: bump Claude Code to 2.1.260 and Agent SDK to 0.3.260
  • fa2b266 chore: bump Claude Code to 2.1.259 and Agent SDK to 0.3.259
  • 8251c10 chore: bump Claude Code to 2.1.258 and Agent SDK to 0.3.258
  • 781d62e chore: bump Claude Code to 2.1.257 and Agent SDK to 0.3.257
  • 833fb0f chore: bump Claude Code to 2.1.252 and Agent SDK to 0.3.252
  • a874e9e chore: bump Claude Code to 2.1.251 and Agent SDK to 0.3.251
  • a60f3e1 chore: bump Claude Code to 2.1.250 and Agent SDK to 0.3.250
  • e8c2d7c chore: bump Claude Code to 2.1.248 and Agent SDK to 0.3.248
  • 70fec18 chore: bump Claude Code to 2.1.247 and Agent SDK to 0.3.247
  • 1f291e1 chore: bump Claude Code to 2.1.246 and Agent SDK to 0.3.246
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.2 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

... (truncated)

Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 12, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the actions group with 2 updates chore(deps): bump the actions group across 1 directory with 2 updates Sep 17, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-3ceec6c9d6 branch 2 times, most recently from 485ac89 to aceb1ec Compare September 17, 2026 03:48
Bumps the actions group with 2 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `anthropics/claude-code-action` from 1.0.200 to 1.0.215
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@24dcd50...ef8bb1e)

Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@3d0d988...efb3536)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.210
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-3ceec6c9d6 branch 2 times, most recently from aceb1ec to ad95c1e Compare September 17, 2026 15:30
@frankbria

Copy link
Copy Markdown
Owner

Dependabot Triage — PR #1234: actions group (2 updates)

Classification

  • Update type: High-impact core (CI tooling; claude-code-action runs with repo secrets)
  • Security urgency: Low
  • Supply-chain risk: Low

Key observations

  • anthropics/claude-code-action 1.0.200 → 1.0.215 in claude.yml and claude-code-review.yml. Pin ef8bb1e4… verified: the v1.0.215 annotated tag (tagged by github-actions[bot] 2026-09-03) dereferences to exactly that commit. Note the # v1 comment is the moving major tag, which resolves elsewhere — comparing against v1 gives a false mismatch; the release tag is the right oracle.
  • softprops/action-gh-release 3.0.2 → 3.0.3 in release.yml. Pin efb35369… verified against the v3.0.3 tag. Release notes: remove unused TypeScript tooling, dependency roll-ups; no behaviour change to inputs we use.
  • Both new versions are ≥ 2 weeks old. No new inputs, no new permissions, SHA-pinned throughout.
  • CI green, including check / check (reusable-call permission audit) and Workflow Lint (actionlint).

Recommendation

Merge now.

Two SHA-pinned bumps to first-party or well-established actions, both verified against their release tags and both weeks old. Keeping the review bot current is the main value; nothing in the diff changes what these actions may do in this repo.

Follow-up actions

  • Rebase after the preceding merges, then merge.

@frankbria
frankbria merged commit add9d69 into main Sep 17, 2026
16 checks passed
@frankbria
frankbria deleted the dependabot/github_actions/actions-3ceec6c9d6 branch September 17, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant