From 49384d909a0534eac9275351e00524428bf00754 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 01:52:24 +0000 Subject: [PATCH] chore(deps): bump the actions-minor-patch group across 1 directory with 4 updates Bumps the actions-minor-patch group with 4 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [github/codeql-action](https://github.com/github/codeql-action), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) and [release-plz/action](https://github.com/release-plz/action). Updates `anthropics/claude-code-action` from 1.0.225 to 1.0.254 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/bf38e86e58df9ebf3420326d019f955bb3be64dd...db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c) Updates `github/codeql-action` from 4.38.0 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.38.0...v4.39.0) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/v2.6.0...v2.7.0) Updates `release-plz/action` from 0.5.137 to 0.5.143 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](https://github.com/release-plz/action/compare/8e61445f0b34e7c6d985255f2f1f05a36eb350dc...6caa8d34f74d82b0dc76a18edd1cc3d6801c9baf) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.248 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: github/codeql-action dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: release-plz/action dependency-version: 0.5.141 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/claude-review.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/osv-scanner.yml | 2 +- .github/workflows/release-plz.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 7ed6b0c91..17dc05855 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -97,7 +97,7 @@ jobs: - name: Review pull request id: claude-review - uses: anthropics/claude-code-action@bf38e86e58df9ebf3420326d019f955bb3be64dd # v1.0.225 + uses: anthropics/claude-code-action@db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c # v1.0.254 with: # Without this the action trades the job's OIDC token for a Claude # GitHub App installation token with write access to contents, pull diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 56a6ce7da..9a2e662fc 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,11 +31,11 @@ jobs: uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.38.0 + uses: github/codeql-action/init@v4.39.0 with: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/init@v4.38.0 + uses: github/codeql-action/init@v4.39.0 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index 3d009896d..87f372a3b 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -19,7 +19,7 @@ permissions: jobs: osv-scan: name: OSV Vulnerability Scan - uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.6.0 + uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.7.0 with: fail-on-vuln: false scan-args: |- diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index 1885d2b13..68c1a2090 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -176,7 +176,7 @@ jobs: git_tag_gpgsign: true - name: Run release-plz release - uses: release-plz/action@8e61445f0b34e7c6d985255f2f1f05a36eb350dc # v0.5 + uses: release-plz/action@6caa8d34f74d82b0dc76a18edd1cc3d6801c9baf # v0.5 with: command: release # Required here and absent upstream: a composite action's steps do not @@ -270,7 +270,7 @@ jobs: git_tag_gpgsign: true - name: Run release-plz release (root workspace) - uses: release-plz/action@8e61445f0b34e7c6d985255f2f1f05a36eb350dc # v0.5 + uses: release-plz/action@6caa8d34f74d82b0dc76a18edd1cc3d6801c9baf # v0.5 with: command: release manifest_path: Cargo.toml