Repository navigation
chore(deps): bump the actions-minor-patch group across 1 directory with 4 updates - #1277
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
Contributor
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
freshtonic
approved these changes
Oct 20, 2026
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions-minor-patch-d287541d49
branch
2 times, most recently
from
October 28, 2026 01:22
49384d9 to
bfabb80
Compare
freshtonic
requested changes
Oct 30, 2026
freshtonic
left a comment
freshtonic
left a comment
Contributor
There was a problem hiding this comment.
scripts/__tests__/claude-review-workflow.test.mjs fails on Node 22 and Node 24. The test pins anthropics/claude-code-action to the reviewed SHA bf38e86…, and this PR moves it to aa8a773…. A person must review the new action release and update ACTION_SHA in the test in the same change. Do not merge until that is done.
…th 4 updates Bumps the actions-minor-patch group with 4 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [github/codeql-action](https://github.com/github/codeql-action), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) and [release-plz/action](https://github.com/release-plz/action). Updates `anthropics/claude-code-action` from 1.0.225 to 1.0.263 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@bf38e86...8041f1d) Updates `github/codeql-action` from 4.38.0 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.38.0...v4.39.1) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.6.0 to 2.7.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@v2.6.0...v2.7.0) Updates `release-plz/action` from 0.5.137 to 0.5.146 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](release-plz/action@8e61445...b2baf30) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.248 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: github/codeql-action dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor-patch - dependency-name: release-plz/action dependency-version: 0.5.141 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions-minor-patch-d287541d49
branch
from
November 2, 2026 01:51
bfabb80 to
bc1a38a
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions-minor-patch group with 4 updates in the / directory: anthropics/claude-code-action, github/codeql-action, google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml and release-plz/action.
Updates
anthropics/claude-code-actionfrom 1.0.225 to 1.0.263Release notes
Sourced from anthropics/claude-code-action's releases.
... (truncated)
Commits
8041f1dchore: bump Claude Code to 2.1.311 and Agent SDK to 0.3.311925afb5chore: bump Bun to 1.4.4 (#1916)16f9f71chore: bump Claude Code to 2.1.310 and Agent SDK to 0.3.3108d70a0dPin the PR version a run checks out (#1915)ae68417chore: bump Claude Code to 2.1.309 and Agent SDK to 0.3.3096b6870echore: bump Claude Code to 2.1.308 and Agent SDK to 0.3.308aa8a773chore: bump Claude Code to 2.1.307 and Agent SDK to 0.3.307a5a423fchore: bump Claude Code to 2.1.306 and Agent SDK to 0.3.306e4a6faachore: bump Claude Code to 2.1.305 and Agent SDK to 0.3.305db77d4dchore: bump Claude Code to 2.1.304 and Agent SDK to 0.3.304Updates
github/codeql-actionfrom 4.38.0 to 4.39.1Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
Commits
9b32540Merge pull request #4257 from github/update-v4.39.1-c5a2f4b0fb5e1ed9Trigger workflows20f5ec3Update changelog for v4.39.1c5a2f4bMerge pull request #4245 from github/henrymercer/graduate-overlay-trap-caching61a5a80Merge pull request #4256 from github/update-bundle/codeql-bundle-v2.27.33dd33f8Merge pull request #4249 from github/mbg/upload-improvements-for-4223b96e339Change comment forgetConfigcall inupload-sarif7fa4518UseshouldSkipSarifUploadinanalyze-action.tsa69c7cbDocument that setting the env vars tofalsetakes precedence74ddcd9Fix typo in commentUpdates
google/osv-scanner-action/.github/workflows/osv-scanner-reusable.ymlfrom 2.6.0 to 2.7.0Release notes
Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases.
Commits
b1d267aMerge pull request #146 from google/update-to-v2.7.02b1cfc6Update unified workflow example to point to v2.7.0 reusable workflowsef6dfdfUpdate reusable workflows to point to v2.7.0 actions0a65f82"Update actions to use v2.7.0 osv-scanner image"8ac9e5cMerge pull request #143 from renovate-bot/renovate/workflows3b06fbbUpdate github/codeql-action action to v4.38.0Updates
release-plz/actionfrom 0.5.137 to 0.5.146Release notes
Sourced from release-plz/action's releases.
... (truncated)
Commits
b2baf30update to release-plz 0.4.1 (#583)d608ecbchore(deps): update dependency cargo-bins/cargo-binstall to v1.26.1 (#584)85037c6chore(deps): update dependency taiki-e/install-action to v2.87.31 (#582)7ef5e4dupdate release-plz tag (#581)a1745f2Update to 0.4.0 (#580)9027ad4chore(deps): update dependency taiki-e/install-action to v2.87.30 (#579)8b5bf23Update to 0.3.174 (#578)1101550feat(updater): move the minor tag inupdater release(#577)69970cefix(updater): fail when a git or gh command fails (#576)6caa8d3Update to 0.3.173 (#575)