Skip to content

chore(deps): bump the actions-all group across 1 directory with 2 updates#665

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-all-5254b65b89
Open

chore(deps): bump the actions-all group across 1 directory with 2 updates#665
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-all-5254b65b89

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 17, 2026

Bumps the actions-all group with 2 updates in the / directory: anthropics/claude-code-action and pnpm/action-setup.

Updates anthropics/claude-code-action from 1.0.120 to 1.0.133

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.133

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.133

v1.0.132

Full Changelog: anthropics/claude-code-action@v1...v1.0.132

v1.0.131

Full Changelog: anthropics/claude-code-action@v1...v1.0.131

v1.0.130

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.130

v1.0.129

Full Changelog: anthropics/claude-code-action@v1...v1.0.129

v1.0.128

Full Changelog: anthropics/claude-code-action@v1...v1.0.128

v1.0.127

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.127

v1.0.126

Full Changelog: anthropics/claude-code-action@v1...v1.0.126

v1.0.125

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.125

v1.0.124

What's Changed

New Contributors

... (truncated)

Commits
  • 787c5a0 chore: bump Claude Code to 2.1.150 and Agent SDK to 0.3.150
  • 4257c8e Use workload identity federation for Claude auth in CI workflows (#1344)
  • bbfaf8e chore: bump Claude Code to 2.1.149 and Agent SDK to 0.3.149
  • 4481e6d chore: bump Claude Code to 2.1.148 and Agent SDK to 0.3.148
  • 661a6fe Add Workload Identity Federation (OIDC) authentication support (#1338)
  • c9d66af chore: bump Claude Code to 2.1.147 and Agent SDK to 0.3.147
  • 20c8abf chore: bump Claude Code to 2.1.146 and Agent SDK to 0.3.146
  • 1dc994e Resolve actor account type before applying allowed_bots (#1330)
  • ca89df3 chore: bump Claude Code to 2.1.145 and Agent SDK to 0.3.145
  • fd1877d Simplify comment tool instructions in prompt (#1328)
  • Additional commits viewable in compare view

Updates pnpm/action-setup from 4.3.0 to 4.4.0

Release notes

Sourced from pnpm/action-setup's releases.

v4.4.0

Updated the action to use Node.js 24.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 17, 2026
@greptile-apps
Copy link
Copy Markdown
Contributor

greptile-apps Bot commented May 17, 2026

Greptile Summary

Routine dependabot bump of two GitHub Actions used across CI/CD workflows. All references use SHA-pinned commits, which is good practice.

  • anthropics/claude-code-action bumped from v1.0.120v1.0.133 (SHA dde2242787c5a0), picking up OIDC/Workload Identity Federation auth support and several prompt improvements.
  • pnpm/action-setup bumped from v4.3.0v5.0.0 (SHA b906afffc06bc1) across all 5 workflow files, upgrading the action runtime to Node.js 24.

Confidence Score: 5/5

Safe to merge — all action references remain SHA-pinned, and both upstream changes are additive improvements with no breaking changes to existing workflow inputs.

Both action upgrades are straightforward: claude-code-action gains OIDC auth support (opt-in, no existing inputs change), and pnpm/action-setup switches its internal runner to Node.js 24 with no interface changes. SHA pinning is maintained throughout all 5 workflow files, preserving supply-chain integrity.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/ci.yml Updates both anthropics/claude-code-action (v1.0.120 → v1.0.133) and pnpm/action-setup (v4.3.0 → v5.0.0) with correct SHA pins.
.github/workflows/e2e-real-llm.yml Updates pnpm/action-setup to v5.0.0 SHA pin; no other changes.
.github/workflows/publish_engine_testpypi.yml Updates two pnpm/action-setup references to v5.0.0 SHA pin; no other changes.
.github/workflows/release.yml Updates pnpm/action-setup to v5.0.0 SHA pin; no other changes.
.github/workflows/standalone-ci.yml Updates four pnpm/action-setup references to v5.0.0 SHA pin; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Dependabot PR #665] --> B[anthropics/claude-code-action]
    A --> C[pnpm/action-setup]
    B --> B1["v1.0.120 → v1.0.133\ndde2242 → 787c5a0\nci.yml"]
    C --> C1["v4.3.0 → v5.0.0\nb906aff → fc06bc1"]
    C1 --> D1[ci.yml]
    C1 --> D2[e2e-real-llm.yml]
    C1 --> D3[publish_engine_testpypi.yml]
    C1 --> D4[release.yml]
    C1 --> D5[standalone-ci.yml]
Loading

Reviews (2): Last reviewed commit: "chore(deps): bump the actions-all group ..." | Re-trigger Greptile

Comment thread .github/workflows/ci.yml
…ates

Bumps the actions-all group with 2 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [pnpm/action-setup](https://github.com/pnpm/action-setup).


Updates `anthropics/claude-code-action` from 1.0.120 to 1.0.133
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@dde2242...787c5a0)

Updates `pnpm/action-setup` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@b906aff...fc06bc1)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.123
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: pnpm/action-setup
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Build(deps): Bump the actions-all group with 2 updates chore(deps): bump the actions-all group across 1 directory with 2 updates Jun 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-all-5254b65b89 branch from 223877f to b4792bb Compare June 1, 2026 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants