Visitar URL original
chore(deps): bump the github-actions group with 2 updates [skip ci] · humemai/arcadedb-embedded-python@72f7494 · GitHub
Skip to content

Commit 72f7494

Browse files
mergify[bot]mergify[bot]
authored
chore(deps): bump the github-actions group with 2 updates [skip ci]
Bumps the github-actions group with 2 updates: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [github/codeql-action](https://github.com/github/codeql-action). Updates `anthropics/claude-code-action` from 1.0.41 to 1.0.43 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.43 > ------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.43> > > v1.0.42 > ------- > > What's Changed > -------------- > > * fix: pass OpenTelemetry environment variables to Claude Code subprocess by [`@​csy1204`](https://github.com/csy1204) in [anthropics/claude-code-action#886](https://redirect.github.com/anthropics/claude-code-action/pull/886) > * fix: pass GitHub token to setup-bun to avoid rate limits by [`@​peloyeje`](https://github.com/peloyeje) in [anthropics/claude-code-action#861](https://redirect.github.com/anthropics/claude-code-action/pull/861) > > New Contributors > ---------------- > > * [`@​csy1204`](https://github.com/csy1204) made their first contribution in [anthropics/claude-code-action#886](https://redirect.github.com/anthropics/claude-code-action/pull/886) > * [`@​peloyeje`](https://github.com/peloyeje) made their first contribution in [anthropics/claude-code-action#861](https://redirect.github.com/anthropics/claude-code-action/pull/861) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.42> Commits * [`6867bb3`](anthropics/claude-code-action@6867bb3) chore: bump Claude Code to 2.1.31 and Agent SDK to 0.2.31 * [`98af40b`](anthropics/claude-code-action@98af40b) chore: bump Claude Code to 2.1.30 and Agent SDK to 0.2.30 * [`4ce5f17`](anthropics/claude-code-action@4ce5f17) fix: pass GitHub token to setup-bun to avoid rate limits ([ArcadeData#861](https://redirect.github.com/anthropics/claude-code-action/issues/861)) * [`fab4258`](anthropics/claude-code-action@fab4258) fix: pass OpenTelemetry environment variables to Claude Code subprocess ([ArcadeData#886](https://redirect.github.com/anthropics/claude-code-action/issues/886)) * See full diff in [compare view](anthropics/claude-code-action@70e16de...6867bb3) Updates `github/codeql-action` from 4.32.0 to 4.32.1 Release notes *Sourced from [github/codeql-action's releases](https://github.com/github/codeql-action/releases).* > v4.32.1 > ------- > > * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [ArcadeData#3422](https://redirect.github.com/github/codeql-action/pull/3422) > * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [ArcadeData#3421](https://redirect.github.com/github/codeql-action/pull/3421) Changelog *Sourced from [github/codeql-action's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.32.1 - 02 Feb 2026 > -------------------- > > * A warning is now shown in Default Setup workflow logs if a [private package registry is configured](https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries) using a GitHub Personal Access Token (PAT), but no username is configured. [ArcadeData#3422](https://redirect.github.com/github/codeql-action/pull/3422) > * Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. [ArcadeData#3421](https://redirect.github.com/github/codeql-action/pull/3421) > > 4.32.0 - 26 Jan 2026 > -------------------- > > * Update default CodeQL bundle version to [2.24.0](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0). [ArcadeData#3425](https://redirect.github.com/github/codeql-action/pull/3425) > > 4.31.11 - 23 Jan 2026 > --------------------- > > * When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [ArcadeData#3409](https://redirect.github.com/github/codeql-action/pull/3409) > * Improved error handling throughout the CodeQL Action. [ArcadeData#3415](https://redirect.github.com/github/codeql-action/pull/3415) > * Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [ArcadeData#3318](https://redirect.github.com/github/codeql-action/pull/3318) > * The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [ArcadeData#3403](https://redirect.github.com/github/codeql-action/pull/3403) > > 4.31.10 - 12 Jan 2026 > --------------------- > > * Update default CodeQL bundle version to 2.23.9. [ArcadeData#3393](https://redirect.github.com/github/codeql-action/pull/3393) > > 4.31.9 - 16 Dec 2025 > -------------------- > > No user facing changes. > > 4.31.8 - 11 Dec 2025 > -------------------- > > * Update default CodeQL bundle version to 2.23.8. [ArcadeData#3354](https://redirect.github.com/github/codeql-action/pull/3354) > > 4.31.7 - 05 Dec 2025 > -------------------- > > * Update default CodeQL bundle version to 2.23.7. [ArcadeData#3343](https://redirect.github.com/github/codeql-action/pull/3343) > > 4.31.6 - 01 Dec 2025 > -------------------- > > No user facing changes. > > 4.31.5 - 24 Nov 2025 > -------------------- > > * Update default CodeQL bundle version to 2.23.6. [ArcadeData#3321](https://redirect.github.com/github/codeql-action/pull/3321) > > 4.31.4 - 18 Nov 2025 > -------------------- ... (truncated) Commits * [`6bc82e0`](github/codeql-action@6bc82e0) Merge pull request [ArcadeData#3447](https://redirect.github.com/github/codeql-action/issues/3447) from github/update-v4.32.1-f52cbc830 * [`42f00f2`](github/codeql-action@42f00f2) Add a couple of change notes * [`cedee6d`](github/codeql-action@cedee6d) Update changelog for v4.32.1 * [`f52cbc8`](github/codeql-action@f52cbc8) Merge pull request [ArcadeData#3445](https://redirect.github.com/github/codeql-action/issues/3445) from github/dependabot/npm\_and\_yarn/fast-xml-parser-... * [`c5aaca4`](github/codeql-action@c5aaca4) Merge pull request [ArcadeData#3446](https://redirect.github.com/github/codeql-action/issues/3446) from github/mbg/ci/pin-node-packages * [`3e58739`](github/codeql-action@3e58739) Pin `@actions/tool-cache@3` in workflows to avoid failures with `github-script` * [`a6ccefb`](github/codeql-action@a6ccefb) Rebuild * [`0e64858`](github/codeql-action@0e64858) Bump fast-xml-parser from 5.3.3 to 5.3.4 * [`f985be5`](github/codeql-action@f985be5) Merge pull request [ArcadeData#3443](https://redirect.github.com/github/codeql-action/issues/3443) from github/dependabot/npm\_and\_yarn/tar-7.5.7 * [`0c8e06d`](github/codeql-action@0c8e06d) Bump tar from 7.5.6 to 7.5.7 * Additional commits viewable in [compare view](github/codeql-action@b20883b...6bc82e0) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
2 parents 3cd89d1 + a09e4f1 commit 72f7494

4 files changed

Lines changed: 5 additions & 5 deletions

File tree

‎.github/workflows/claude-code-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333

3434
- name: Run Claude Code Review
3535
id: claude-review
36-
uses: anthropics/claude-code-action@70e16deb18402428bd09e08d1ec3662a872e3c72 # v1.0.41
36+
uses: anthropics/claude-code-action@6867bb3ab0b2c0a10629b6823e457347e74ad6d2 # v1.0.43
3737
with:
3838
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
3939
prompt: |

‎.github/workflows/claude.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232

3333
- name: Run Claude Code
3434
id: claude
35-
uses: anthropics/claude-code-action@70e16deb18402428bd09e08d1ec3662a872e3c72 # v1.0.41
35+
uses: anthropics/claude-code-action@6867bb3ab0b2c0a10629b6823e457347e74ad6d2 # v1.0.43
3636
with:
3737
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
3838

‎.github/workflows/meterian.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
with:
2727
cli_args: "--report-sarif=report.sarif"
2828
oss: true
29-
- uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
29+
- uses: github/codeql-action/upload-sarif@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v3.29.5
3030
if: success() || failure()
3131
with:
3232
sarif_file: report.sarif

‎.github/workflows/studio-security-audit.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -166,10 +166,10 @@ jobs:
166166
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
167167

168168
- name: "Initialize CodeQL"
169-
uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
169+
uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v3.29.5
170170
with:
171171
languages: javascript
172172
queries: security-and-quality
173173

174174
- name: "Perform CodeQL Analysis"
175-
uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v3.29.5
175+
uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v3.29.5

0 commit comments

Comments
 (0)