From 599736c9c19ad718d2237b1613784093510aa3e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 20:30:31 +0000 Subject: [PATCH] Bump the actions group with 4 updates Bumps the actions group with 4 updates: [pnpm/action-setup](https://github.com/pnpm/action-setup), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `pnpm/action-setup` from 6.0.9 to 6.0.10 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v6.0.9...0977fd99725f1db4007ccb2928dbb4e90d06cc86) Updates `aws-actions/configure-aws-credentials` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e6de054238d6b7531b4efff3b6587d9aade6a06c...cbe3b392738ccf3f987d68400dafcf4b0624a56c) Updates `anthropics/claude-code-action` from 1.0.202 to 1.0.211 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/e5ad3c7725bc2459721893f88879fef9dbcf97b0...833fb0f8c9f6686b33d963a8bae0a94f4936ab2a) Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/3dc1ecc9bcb9e94e9b2c709687979e1298497054...70fb788f84895a7701f5643d103d587e460b5c99) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.211 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bundle-deploy-eas-update.yml | 2 +- .github/workflows/claude-mention.yml | 2 +- .github/workflows/claude-review.yml | 2 +- .github/workflows/nightly-e2e.yml | 2 +- .github/workflows/pull-request-commit.yml | 2 +- .github/workflows/zizmor.yml | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/bundle-deploy-eas-update.yml b/.github/workflows/bundle-deploy-eas-update.yml index d4e18cc510..4f80ba7967 100644 --- a/.github/workflows/bundle-deploy-eas-update.yml +++ b/.github/workflows/bundle-deploy-eas-update.yml @@ -228,7 +228,7 @@ jobs: - name: ☁️ Configure AWS credentials (denis) if: ${{ !steps.fingerprint.outputs.includes-changes && !steps.version.outputs.version-changed }} - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 + uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4 with: role-to-assume: arn:aws:iam::007404326489:role/denis-ci-publish aws-region: us-east-2 diff --git a/.github/workflows/claude-mention.yml b/.github/workflows/claude-mention.yml index 8ef4d8ab72..5c7ff81219 100644 --- a/.github/workflows/claude-mention.yml +++ b/.github/workflows/claude-mention.yml @@ -60,7 +60,7 @@ jobs: fetch-depth: 1 - name: 🤖 Claude - uses: anthropics/claude-code-action@e5ad3c7725bc2459721893f88879fef9dbcf97b0 # v1.0.202 + uses: anthropics/claude-code-action@833fb0f8c9f6686b33d963a8bae0a94f4936ab2a # v1.0.211 env: ANTHROPIC_BASE_URL: https://agentgateway.k1.prod.bsky.dev with: diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 86ff9cf71c..3f73c88ce4 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -45,7 +45,7 @@ jobs: fetch-depth: 1 - name: 🤖 Claude review - uses: anthropics/claude-code-action@e5ad3c7725bc2459721893f88879fef9dbcf97b0 # v1.0.202 + uses: anthropics/claude-code-action@833fb0f8c9f6686b33d963a8bae0a94f4936ab2a # v1.0.211 env: ANTHROPIC_BASE_URL: https://agentgateway.k1.prod.bsky.dev with: diff --git a/.github/workflows/nightly-e2e.yml b/.github/workflows/nightly-e2e.yml index 2693d70962..ef4ebf81bb 100644 --- a/.github/workflows/nightly-e2e.yml +++ b/.github/workflows/nightly-e2e.yml @@ -424,7 +424,7 @@ jobs: steps.summary.outputs.notify == 'true' && steps.summary.outputs.screenshot_count != '0' continue-on-error: true - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: 🔧 Set up Node for Slack screenshot framing if: >- diff --git a/.github/workflows/pull-request-commit.yml b/.github/workflows/pull-request-commit.yml index bcd7749479..084c2503a6 100644 --- a/.github/workflows/pull-request-commit.yml +++ b/.github/workflows/pull-request-commit.yml @@ -306,7 +306,7 @@ jobs: pnpm export - name: ☁️ Configure AWS credentials (denis, PR-scoped) - uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 + uses: aws-actions/configure-aws-credentials@cbe3b392738ccf3f987d68400dafcf4b0624a56c # v6.2.4 with: role-to-assume: arn:aws:iam::007404326489:role/denis-ci-publish-pr aws-region: us-east-2 diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 5eebdd608e..e8b080053c 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -26,7 +26,7 @@ jobs: persist-credentials: false - name: 🛡️ Run zizmor - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2 + uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3 with: # Annotate the PR directly instead of uploading SARIF to the # security tab, and fail the check on any finding