chore(deps): bump the github-actions group across 1 directory with 2 updates - #3761
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
@dependabot rebase |
…updates Bumps the github-actions group with 2 updates in the / directory: [signpath/github-action-submit-signing-request](https://github.com/signpath/github-action-submit-signing-request) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `signpath/github-action-submit-signing-request` from 2 to 3 - [Release notes](https://github.com/signpath/github-action-submit-signing-request/releases) - [Commits](SignPath/github-action-submit-signing-request@v2...v3) Updates `anthropics/claude-code-action` from 1.0.216 to 1.0.224 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@d75b94d...51db78a) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.222 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: signpath/github-action-submit-signing-request dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
86988a6 to
8efb11e
Compare
itomek
left a comment
itomek
left a comment
There was a problem hiding this comment.
Two action bumps, both verified rather than assumed.
claude-code-action 1.0.216 to 1.0.222 touches nine workflows whose Claude steps never run on PR CI, so green checks here prove nothing about them. Dispatched the auth canary on this branch with the bumped pin — run 35238948693 passed, which exercises OAuth plus claude-opus-5 model resolution on the new action build.
signpath/github-action-submit-signing-request v2 to v3 is a major bump on the Windows signing step. Compared v3's action.yml against the inputs the workflow passes (api-token, organization-id, project-slug, signing-policy-slug, artifact-configuration-slug, github-artifact-id, wait-for-completion, output-artifact-directory) — all still present and unrenamed; the v3 change is the Node 24 runtime.
An earlier Custom agent MCP harness failure was a stale branch, not this change: main fixed that test in #3736 after the branch was cut. Rebased; CI is green.
1 participant
Bumps the github-actions group with 2 updates in the / directory: signpath/github-action-submit-signing-request and anthropics/claude-code-action.
Updates
signpath/github-action-submit-signing-requestfrom 2 to 3Commits
f6d0478Build from - 7336bb524a08c99aa48ba5065b00095eb2b0e09e. Original commit messag...ef0ce19Build from - 8ff04a5c1f8d21d18e1eb1fc41b698b425a83654. Original commit messag...a790881Build from - 9c89d7e4aa8c240d6deba49c8e4f52910fd41288. Original commit messag...Updates
anthropics/claude-code-actionfrom 1.0.216 to 1.0.224Release notes
Sourced from anthropics/claude-code-action's releases.
Commits
51db78achore: bump Claude Code to 2.1.271 and Agent SDK to 0.3.2719cdae7fchore: bump Claude Code to 2.1.270 and Agent SDK to 0.3.27056cf60fchore: bump Claude Code to 2.1.269 and Agent SDK to 0.3.2690a8d3c9chore: bump Claude Code to 2.1.268 and Agent SDK to 0.3.26819dda84chore: bump Claude Code to 2.1.267 and Agent SDK to 0.3.2675ccc3a3chore: bump Claude Code to 2.1.266 and Agent SDK to 0.3.2660d0e087chore: bump Claude Code to 2.1.265 and Agent SDK to 0.3.2659c5ddabchore: bump Claude Code to 2.1.263 and Agent SDK to 0.3.263