From 8a1ae114a4ad7fbaf44c17a9d000cb6035bdc557 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 14 Jul 2026 09:46:43 +0000 Subject: [PATCH 1/2] chore(deps): bump anthropics/claude-code-action from 1 to 1.0.167 Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1 to 1.0.167. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/v1...v1.0.167) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.167 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/claude-code-review.yml | 2 +- .github/workflows/claude.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index ac0ba57..f8d987b 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -23,7 +23,7 @@ jobs: - name: Run Claude Code Review id: claude-review - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@v1.0.167 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} prompt: | diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index fcbb1b5..60594f1 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -32,7 +32,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@v1.0.167 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} From 4bfe6bc890ba48442307f2e46c6ea700ad65d8a2 Mon Sep 17 00:00:00 2001 From: MarianKijewski Date: Wed, 15 Jul 2026 09:26:20 +0200 Subject: [PATCH 2/2] Replace tag with full commit SHA This blocks repointing of tag to different code version in case of unlikely repository takeover. Dependabot can operate on commit SHAs so we won't lose automatic updates, source: https://github.blog/changelog/2022-10-31-dependabot-now-updates-comments-in-github-actions-workflows-referencing-action-versions/ --- .github/workflows/claude-code-review.yml | 2 +- .github/workflows/claude.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index f8d987b..e20f53e 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -23,7 +23,7 @@ jobs: - name: Run Claude Code Review id: claude-review - uses: anthropics/claude-code-action@v1.0.167 + uses: anthropics/claude-code-action@0fe28cdb64e23015219b0e478100b7105fd7dfa1 # v1.0.167 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} prompt: | diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 60594f1..8db183a 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -32,7 +32,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@v1.0.167 + uses: anthropics/claude-code-action@0fe28cdb64e23015219b0e478100b7105fd7dfa1 # v1.0.167 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}