Skip to content

ci: bump the actions-deps group with 2 updates - #185

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions-deps-534fcfb0b5
May 25, 2026
Merged

ci: bump the actions-deps group with 2 updates#185
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/actions-deps-534fcfb0b5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 2 updates: anthropics/claude-code-action and docker/login-action.

Updates anthropics/claude-code-action from 1.0.124 to 1.0.133

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.133

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.133

v1.0.132

Full Changelog: anthropics/claude-code-action@v1...v1.0.132

v1.0.131

Full Changelog: anthropics/claude-code-action@v1...v1.0.131

v1.0.130

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.130

v1.0.129

Full Changelog: anthropics/claude-code-action@v1...v1.0.129

v1.0.128

Full Changelog: anthropics/claude-code-action@v1...v1.0.128

v1.0.127

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.127

v1.0.126

Full Changelog: anthropics/claude-code-action@v1...v1.0.126

v1.0.125

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.125

Commits
  • 787c5a0 chore: bump Claude Code to 2.1.150 and Agent SDK to 0.3.150
  • 4257c8e Use workload identity federation for Claude auth in CI workflows (#1344)
  • bbfaf8e chore: bump Claude Code to 2.1.149 and Agent SDK to 0.3.149
  • 4481e6d chore: bump Claude Code to 2.1.148 and Agent SDK to 0.3.148
  • 661a6fe Add Workload Identity Federation (OIDC) authentication support (#1338)
  • c9d66af chore: bump Claude Code to 2.1.147 and Agent SDK to 0.3.147
  • 20c8abf chore: bump Claude Code to 2.1.146 and Agent SDK to 0.3.146
  • 1dc994e Resolve actor account type before applying allowed_bots (#1330)
  • ca89df3 chore: bump Claude Code to 2.1.145 and Agent SDK to 0.3.145
  • fd1877d Simplify comment tool instructions in prompt (#1328)
  • See full diff in compare view

Updates docker/login-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/login-action's releases.

v4.2.0

Full Changelog: docker/login-action@v4.1.0...v4.2.0

Commits
  • 650006c Merge pull request #960 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 99df1a3 chore: update generated content
  • 3ab375f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 39d8580 Merge pull request #970 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 4eefcd3 chore: update generated content
  • 56d092c build(deps): bump @​docker/actions-toolkit from 0.86.0 to 0.90.0
  • e2e31ca Merge pull request #976 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 0bced94 chore: update generated content
  • 3e75a0f build(deps): bump @​actions/core from 3.0.0 to 3.0.1
  • 365bebd Merge pull request #984 from docker/dependabot/github_actions/aws-actions/con...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 2 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [docker/login-action](https://github.com/docker/login-action).


Updates `anthropics/claude-code-action` from 1.0.124 to 1.0.133
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@2449274...787c5a0)

Updates `docker/login-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...650006c)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.133
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 25, 2026
@github-actions github-actions Bot added area/infra CI, build, deploy, Docker, release and removed dependencies Pull requests that update a dependency file labels May 25, 2026
@coderabbitai

coderabbitai Bot commented May 25, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 12155ec1-6dc1-495e-8095-ec376ad0bb10

📥 Commits

Reviewing files that changed from the base of the PR and between 4170074 and dcb3e22.

📒 Files selected for processing (3)
  • .github/workflows/claude-review.yml
  • .github/workflows/publish-dev.yml
  • .github/workflows/release.yml
📜 Recent review details
⏰ Context from checks skipped due to timeout of 300000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: CI
  • GitHub Check: Validate snapshot build
🧰 Additional context used
📓 Path-based instructions (1)
.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (AGENTS.md)

GitHub Actions must pin third-party actions to full commit SHAs with version comments; never use @main or floating tags on third-party actions; prefer inline bash or official actions// github/ actions

Files:

  • .github/workflows/publish-dev.yml
  • .github/workflows/release.yml
  • .github/workflows/claude-review.yml
🔇 Additional comments (3)
.github/workflows/claude-review.yml (1)

154-154: LGTM!

.github/workflows/publish-dev.yml (1)

51-51: LGTM!

.github/workflows/release.yml (1)

27-27: LGTM!


📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated CI/CD pipeline action dependencies to newer versions for improved stability and security.

Walkthrough

This PR updates pinned versions of GitHub Actions dependencies across three workflow files: the Claude code review action is bumped from v1.0.124 to v1.0.133, and the Docker login action is bumped from v4.1.0 to v4.2.0 in the publish-dev workflow and to a newer commit in the release workflow.

Changes

GitHub Actions dependency updates

Layer / File(s) Summary
Workflow action version pins
.github/workflows/claude-review.yml, .github/workflows/publish-dev.yml, .github/workflows/release.yml
Three GitHub Actions are pinned to newer versions: anthropics/claude-code-action from v1.0.124 to v1.0.133 in claude-review, and docker/login-action from v4.1.0 to v4.2.0 in publish-dev and release workflows.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • Wave-RF/WaveHouse#161: Updates the same anthropics/claude-code-action pinned commit in .github/workflows/claude-review.yml.

Suggested labels

area/infra

Suggested reviewers

  • taitelee
  • github-actions
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and concisely describes the main change: bumping two GitHub Actions dependencies in the actions-deps group.
Description check ✅ Passed The description provides detailed information about both dependency updates, including version changes, release notes, commits, and Dependabot commands.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/actions-deps-534fcfb0b5
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch dependabot/github_actions/actions-deps-534fcfb0b5

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved by dependabot-automerge workflow (version-update:semver-minor).

@github-actions
github-actions Bot enabled auto-merge (squash) May 25, 2026 22:15
@github-project-automation github-project-automation Bot moved this from Backlog to In progress in WaveHouse Task Board May 25, 2026
@coderabbitai
coderabbitai Bot requested a review from taitelee May 25, 2026 22:15
@github-actions
github-actions Bot merged commit e52c649 into main May 25, 2026
8 checks passed
@github-project-automation github-project-automation Bot moved this from In progress to Done in WaveHouse Task Board May 25, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-deps-534fcfb0b5 branch May 25, 2026 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/infra CI, build, deploy, Docker, release github_actions Pull requests that update GitHub Actions code

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

0 participants