Update koki-develop/claude-renovate-review action to v1.0.10

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
koki-develop/claude-renovate-review	action	patch	v1.0.8 → v1.0.10	v1.1.0

---

Release Notes

koki-develop/claude-renovate-review (koki-develop/claude-renovate-review)

v1.0.10

Compare Source

Bug Fixes

• correctly pass JSON schema and extract report from structured output (51528e3)
• deps: update koki-develop/claude-denied-tools action to v1.1.3 (#​26) (d051a71)
• docs: remove redundant IMPORTANT note from action.yml (85bc7c9)

v1.0.9

Compare Source

Bug Fixes

• deps: update anthropics/claude-code-action base-action to v1.0.29 (d8b83fb)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

This PR updates the koki-develop/claude-renovate-review GitHub Action from v1.0.8 to v1.0.10, spanning two incremental releases (v1.0.9 and v1.0.10).

Version 1.0.9 Changes (Jan 9, 2026):

• Updated base dependency anthropics/claude-code-action to v1.0.29
• Internal refactoring to adapt allowed_tools input to use claude_args with --allowedTools flag

Version 1.0.10 Changes (Jan 10, 2026):

• Critical Bug Fix: Corrected JSON schema handling and structured output extraction
  • Fixed shell parsing issues by adding proper quoting around JSON schema argument
  • Replaced deprecated CLAUDE_CODE_EXECUTION_FILE with STRUCTURED_OUTPUT environment variable
  • Updated output extraction to use jq -r '.report' on structured output
  • Removed legacy extract.js file and introduced schema.json for structured output definition
• Dependency Update: Updated koki-develop/claude-denied-tools action to v1.1.3
• Documentation Cleanup: Removed redundant IMPORTANT note from action.yml

Security Status:

• No security advisories published for this repository
• No breaking changes or security vulnerabilities identified in either release

🎯 Impact Scope Investigation

Usage Location:
The action is used in a single location within the Piston codebase:

• .github/workflows/claude-renovate-review.yml:28

Current Configuration:

- uses: koki-develop/claude-renovate-review@...
  with:
    claude-code-oauth-token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
    allowed-tools: |
      WebSearch
      WebFetch

Impact Assessment:

• The workflow configuration uses only the claude-code-oauth-token and allowed-tools inputs, both of which remain fully compatible in v1.0.10
• No API changes or breaking modifications to the action's interface
• The bug fixes improve reliability of structured output handling without requiring any changes to consumer workflows
• The update to the base action (v1.0.29) maintains backward compatibility
• No impact on other dependencies or configuration files

Workflow Context:

• Triggered on PR opened/edited events
• Runs only for PRs created by renovate[bot]
• Uses minimal permissions: contents: read, pull-requests: write
• Timeout: 30 minutes

💡 Recommended Actions

✅ Safe to Merge Immediately

No manual migration or code changes required. The update provides:

1. Improved reliability through JSON schema bug fixes
2. Updated dependencies for better compatibility
3. Cleaner codebase with removed deprecated code

Suggested Post-Merge Verification:

1. Monitor the next Renovate PR that triggers this workflow to ensure the action executes successfully
2. Verify that review comments are posted correctly with the improved structured output handling

Optional Future Consideration:

• Review open issue Update buildpack-deps:bookworm Docker digest to 95d2832 #7 regarding the new allowed_bots input if the project wants to expand bot support beyond Renovate

🔗 Reference Links

• v1.0.10 Release Notes
• v1.0.9 Release Notes
• Compare v1.0.8...v1.0.10
• Critical JSON Schema Fix Commit
• Repository Security Advisories (None published)

Generated by koki-develop/claude-renovate-review