From 9aaea42b4b95baff0af8eddb4f3ff22dc0387bfd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 06:10:53 +0000 Subject: [PATCH] chore(deps): bump the actions-minor-patch group with 2 updates Bumps the actions-minor-patch group with 2 updates: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `trufflesecurity/trufflehog` from 3.95.6 to 3.95.8 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/30d5bb91af1a771378349dbbb0c82129392acf70...00155c9dc586f34d189adc83d3ac2698c2ec551f) Updates `anthropics/claude-code-action` from 1.0.159 to 1.0.165 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/a92e7c70a4da9793dc164451d829089dc057a464...558b1d6cab4085c7753fe402c10bef0fbb92ac7a) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch - dependency-name: anthropics/claude-code-action dependency-version: 1.0.165 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/claude.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b5fa732..d25378b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -134,7 +134,7 @@ jobs: fetch-depth: 0 - name: Scan for secrets - uses: trufflesecurity/trufflehog@30d5bb91af1a771378349dbbb0c82129392acf70 # v3.95.6 + uses: trufflesecurity/trufflehog@00155c9dc586f34d189adc83d3ac2698c2ec551f # v3.95.8 with: path: ./ base: ${{ github.event.pull_request.base.sha }} diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 5f221fc..69f1bdf 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -66,7 +66,7 @@ jobs: echo "Claude token shape OK (length ${#TOKEN})." - name: Claude auto-review - uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1 + uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1 with: claude_code_oauth_token: ${{ env.CLAUDE_OAUTH }} # Prompt sent automatically on every PR — no @claude mention needed @@ -129,7 +129,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1 + uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1 with: claude_code_oauth_token: ${{ env.CLAUDE_OAUTH }} claude_args: |