Repository navigation
fix(deps): update anthropics/claude-code-action action to v1.0.93 - #38
Merged
Merged
Conversation
Contributor
Renovate PR Review Results⚖️ Safety Assessment: ✅ Safe🔍 Release Content AnalysisThis update spans 60 patch versions (v1.0.33 → v1.0.93) with 115 commits. The changes are entirely within the v1.0.x line, maintaining backward compatibility. Key improvements include: Security Enhancements:
Bug Fixes and Stability:
New Features:
Architecture Changes:
Version Pins:
🎯 Impact Scope InvestigationCurrent Usage in Codebase: - uses: anthropics/claude-code-action/base-action@b47fd721da662d48c5680e154ad16a73ed74d2e0 # v1.0.93Usage Analysis:
Compatibility Assessment:
No Migration Required:
💡 Recommended ActionsImmediate Actions:
Post-Merge Verification:
Optional Considerations:
🔗 Reference Links
Generated by koki-develop/claude-renovate-review |
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
January 29, 2026 01:57
c19b46b to
5920814
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
January 29, 2026 06:08
5920814 to
abdb689
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
January 30, 2026 08:49
abdb689 to
363e62a
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
January 31, 2026 04:38
363e62a to
e2ac981
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
January 31, 2026 21:13
e2ac981 to
d838fa5
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
February 2, 2026 00:32
d838fa5 to
2dc923e
Compare
renovate
Bot
force-pushed
the
renovate/anthropics-claude-code-action-1.x
branch
from
February 3, 2026 00:58
2dc923e to
e069455
Compare
This was referenced Apr 20, 2026
This was referenced May 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.0.33→v1.0.93v1.0.101(+7)Release Notes
anthropics/claude-code-action (anthropics/claude-code-action)
v1.0.93Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.93
v1.0.92Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.92
v1.0.91Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.91
v1.0.90Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.90
v1.0.89Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.89
v1.0.88Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.88
v1.0.87Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.87
v1.0.86Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.86
v1.0.85Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.85
v1.0.84Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.84
v1.0.83Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.83
v1.0.82Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.82
v1.0.81Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.81
v1.0.80Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.80
v1.0.79Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.79
v1.0.78Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.78
v1.0.77Compare Source
Subprocess environment scrubbing for untrusted-input workflows
Workflows that configure
allowed_non_write_usersnow automatically getCLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1, which makes Claude Code (v2.1.79+) strip Anthropic and cloud provider credentials from the environment of subprocesses it spawns (Bash tool, hooks, MCP stdio servers). The parent Claude process keeps these vars for its own API calls — only child subprocess environments are scrubbed.Why: Workflows that process untrusted input (issue triage, PR review from non-write users) are exposed to prompt injection. A malicious issue body could trick Claude into running a Bash command that reads
$ANTHROPIC_API_KEYvia shell expansion and leaks it through an observable side channel. Scrubbing the subprocess environment removes the read primitive entirely.What's scrubbed: Anthropic auth tokens, cloud provider credentials, GitHub Actions OIDC and runtime tokens, OTEL auth headers.
What's kept:
GITHUB_TOKEN/GH_TOKEN— so wrapper scripts can still call the GitHub API.Opt out: Set
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: "0"at the job or step level if your workflow legitimately needs a subprocess to inherit these credentials.No action required for most users — if you've configured
allowed_non_write_users, scrubbing is now on automatically. If your workflow breaks because a subprocess expected inherited credentials, re-inject them explicitly (e.g., via MCP serverenv:config) or use the opt-out.What's Changed
Full Changelog: anthropics/claude-code-action@v1.0.76...v1.0.77
v1.0.76Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.76
v1.0.75Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.75
v1.0.74Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.74
v1.0.73Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.73
v1.0.72Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.72
v1.0.71Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.71
v1.0.70Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.70
v1.0.69Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.69
v1.0.68Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.68
v1.0.67Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.67
v1.0.66Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.66
v1.0.65Compare Source
What's Changed
display_reportoption to false to restrict exposed data by @ddworken in #992Full Changelog: anthropics/claude-code-action@v1...v1.0.65
v1.0.64Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.64
v1.0.63Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.63
v1.0.62Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.62
v1.0.61Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.61
v1.0.60Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.60
v1.0.59Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.59
v1.0.58Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.58
v1.0.57Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.57
v1.0.56Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.56
v1.0.55Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.55
v1.0.54Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.54
v1.0.53Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.53
v1.0.52Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.52
v1.0.51Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.51
v1.0.50Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.50
v1.0.49Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.49
v1.0.48Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.48
v1.0.47Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.47
v1.0.46Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.46
v1.0.45Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.45
v1.0.44Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.44
v1.0.43Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.43
v1.0.42Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.42
v1.0.41Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.41
v1.0.40Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.40
v1.0.39Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.39
v1.0.38Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.38
v1.0.37Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.37
v1.0.36Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1...v1.0.36
v1.0.35Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1...v1.0.35
v1.0.34Compare Source
Full Changelog: anthropics/claude-code-action@v1...v1.0.34
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.