From 93ff51e76d107cfb249d3927f7c9c28b7354fc11 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 01:51:17 +0000 Subject: [PATCH] chore(deps): bump the actions-minor-patch group across 1 directory with 4 updates Bumps the actions-minor-patch group with 4 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [github/codeql-action](https://github.com/github/codeql-action), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) and [release-plz/action](https://github.com/release-plz/action). Updates `anthropics/claude-code-action` from 1.0.225 to 1.0.248 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/bf38e86e58df9ebf3420326d019f955bb3be64dd...1d6de8cb0c237e7c15e9e1bdf973826ebae490cc) Updates `github/codeql-action` from 4.38.0 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.38.0...v4.38.3) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/v2.6.0...v2.7.0) Updates `release-plz/action` from 0.5.137 to 0.5.141 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](https://github.com/release-plz/action/compare/8e61445f0b34e7c6d985255f2f1f05a36eb350dc...f393a7b38aca9d9b4c58447b291dbac963901df6) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.248 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: github/codeql-action dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: release-plz/action dependency-version: 0.5.141 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/claude-review.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/osv-scanner.yml | 2 +- .github/workflows/release-plz.yml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 7ed6b0c91..a0399daec 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -97,7 +97,7 @@ jobs: - name: Review pull request id: claude-review - uses: anthropics/claude-code-action@bf38e86e58df9ebf3420326d019f955bb3be64dd # v1.0.225 + uses: anthropics/claude-code-action@1d6de8cb0c237e7c15e9e1bdf973826ebae490cc # v1.0.248 with: # Without this the action trades the job's OIDC token for a Claude # GitHub App installation token with write access to contents, pull diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 56a6ce7da..1a694ded7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,11 +31,11 @@ jobs: uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.38.0 + uses: github/codeql-action/init@v4.38.3 with: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/init@v4.38.0 + uses: github/codeql-action/init@v4.38.3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml index 3d009896d..87f372a3b 100644 --- a/.github/workflows/osv-scanner.yml +++ b/.github/workflows/osv-scanner.yml @@ -19,7 +19,7 @@ permissions: jobs: osv-scan: name: OSV Vulnerability Scan - uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.6.0 + uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.7.0 with: fail-on-vuln: false scan-args: |- diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index 1885d2b13..3c31f7208 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -176,7 +176,7 @@ jobs: git_tag_gpgsign: true - name: Run release-plz release - uses: release-plz/action@8e61445f0b34e7c6d985255f2f1f05a36eb350dc # v0.5 + uses: release-plz/action@f393a7b38aca9d9b4c58447b291dbac963901df6 # v0.5 with: command: release # Required here and absent upstream: a composite action's steps do not @@ -270,7 +270,7 @@ jobs: git_tag_gpgsign: true - name: Run release-plz release (root workspace) - uses: release-plz/action@8e61445f0b34e7c6d985255f2f1f05a36eb350dc # v0.5 + uses: release-plz/action@f393a7b38aca9d9b4c58447b291dbac963901df6 # v0.5 with: command: release manifest_path: Cargo.toml