From 18b6f16b1d7fce7462025c46eb083635a6d4a6b2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 29 Jul 2026 19:41:04 +0000 Subject: [PATCH] build(deps): bump the actions group with 5 updates Bumps the actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.319.0` | `1.321.0` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.2` | `6.2.3` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.0` | `4.37.3` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.175` | `1.0.181` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.83.2` | `2.84.1` | Updates `ruby/setup-ruby` from 1.319.0 to 1.321.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/003a5c4d8d6321bd302e38f6f0ec593f77f06600...95ef2b042f9d7a56d8268cba8559e2842e2ad01b) Updates `aws-actions/configure-aws-credentials` from 6.2.2 to 6.2.3 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/517a711dbcd0e402f90c77e7e2f81e849156e31d...e6de054238d6b7531b4efff3b6587d9aade6a06c) Updates `github/codeql-action/upload-sarif` from 4.37.0 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81) Updates `anthropics/claude-code-action` from 1.0.175 to 1.0.181 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/1298632ce7736903d02a1435002705aa2a594a6c...44423bdec74b97d67543eb16c110546762c110b2) Updates `taiki-e/install-action` from 2.83.2 to 2.84.1 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/43aecc8d72668fbcfe75c31400bc4f890f1c5853...c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.321.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.181 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.84.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ios-release.yml | 2 +- .github/workflows/preview-destroy.yml | 2 +- .github/workflows/previews-shared-deploy.yml | 2 +- .github/workflows/security.yml | 2 +- .github/workflows/stack-deploy.yml | 4 ++-- .github/workflows/thunder-deep-review.yml | 4 ++-- .github/workflows/version-bump.yml | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ios-release.yml b/.github/workflows/ios-release.yml index 818d49176..ab684314e 100644 --- a/.github/workflows/ios-release.yml +++ b/.github/workflows/ios-release.yml @@ -196,7 +196,7 @@ jobs: echo "✅ Metal Toolchain removed" - name: Setup Ruby - uses: ruby/setup-ruby@003a5c4d8d6321bd302e38f6f0ec593f77f06600 # v1 + uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1 with: ruby-version: '3.0' bundler-cache: true diff --git a/.github/workflows/preview-destroy.yml b/.github/workflows/preview-destroy.yml index 29bb686bd..e138f7159 100644 --- a/.github/workflows/preview-destroy.yml +++ b/.github/workflows/preview-destroy.yml @@ -63,7 +63,7 @@ jobs: # the base ref anyway, but being explicit prevents accidents if # the trigger is ever changed.) ref: main - - uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 + - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }} aws-region: us-east-1 diff --git a/.github/workflows/previews-shared-deploy.yml b/.github/workflows/previews-shared-deploy.yml index 97cb90870..ed3ea3628 100644 --- a/.github/workflows/previews-shared-deploy.yml +++ b/.github/workflows/previews-shared-deploy.yml @@ -69,7 +69,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 - - uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 + - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }} aws-region: ${{ inputs.region || 'us-east-1' }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index b1232ae9b..3adc640ae 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -60,7 +60,7 @@ jobs: --json-output semgrep.json - name: Upload SARIF - uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 if: always() && hashFiles('semgrep.sarif') != '' continue-on-error: true with: diff --git a/.github/workflows/stack-deploy.yml b/.github/workflows/stack-deploy.yml index bb6e8d285..014bc671a 100644 --- a/.github/workflows/stack-deploy.yml +++ b/.github/workflows/stack-deploy.yml @@ -110,7 +110,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 - - uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 + - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }} aws-region: ${{ inputs.region }} @@ -234,7 +234,7 @@ jobs: - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 - - uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 + - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: role-to-assume: ${{ secrets.AWS_DEPLOY_ROLE_ARN }} aws-region: ${{ inputs.region }} diff --git a/.github/workflows/thunder-deep-review.yml b/.github/workflows/thunder-deep-review.yml index 20aae5e5d..c96b38b60 100644 --- a/.github/workflows/thunder-deep-review.yml +++ b/.github/workflows/thunder-deep-review.yml @@ -196,7 +196,7 @@ jobs: # ───────────────────────────────────────────────────────────────────── - name: thunder-deep-review (step 1 — recall pass, candidate findings) id: review_model - uses: anthropics/claude-code-action@1298632ce7736903d02a1435002705aa2a594a6c # v1 + uses: anthropics/claude-code-action@44423bdec74b97d67543eb16c110546762c110b2 # v1 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} # Pass the workflow token so the action authenticates to GitHub WITH it @@ -398,7 +398,7 @@ jobs: if: >- steps.persist_candidates.outputs.count != '' && steps.persist_candidates.outputs.count != '0' - uses: anthropics/claude-code-action@1298632ce7736903d02a1435002705aa2a594a6c # v1 + uses: anthropics/claude-code-action@44423bdec74b97d67543eb16c110546762c110b2 # v1 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/version-bump.yml b/.github/workflows/version-bump.yml index 14ae6daf3..8f6d2eab9 100644 --- a/.github/workflows/version-bump.yml +++ b/.github/workflows/version-bump.yml @@ -90,7 +90,7 @@ jobs: - name: Install git-cliff if: ${{ !inputs.nightly }} - uses: taiki-e/install-action@43aecc8d72668fbcfe75c31400bc4f890f1c5853 # v2 + uses: taiki-e/install-action@c44f6b046f1c29ae5918b1e0bfdbb2f1813836fd # v2 with: tool: git-cliff