Skip to content

chore(deps): bump the github-actions group across 1 directory with 2 updates#1021

Merged
BigSimmo merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-fd6de3ce94
Jul 21, 2026
Merged

chore(deps): bump the github-actions group across 1 directory with 2 updates#1021
BigSimmo merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-fd6de3ce94

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates in the / directory: actions/checkout and anthropics/claude-code-action.

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates anthropics/claude-code-action from 1.0.178 to 1.0.179

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.179

Full Changelog: anthropics/claude-code-action@v1...v1.0.179

Commits
  • b76a077 chore: bump Claude Code to 2.1.216 and Agent SDK to 0.3.216
  • See full diff in compare view

Summary by CodeRabbit

  • Chores
    • Updated automated workflows to use the latest pinned checkout action version.
    • Updated the Claude automation action to its latest pinned patch version.
    • Preserved existing build, testing, scanning, deployment, and workflow behavior.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from BigSimmo as a code owner July 21, 2026 00:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 21, 2026
@coderabbitai

coderabbitai Bot commented Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Review Change Stack

Warning

Review limit reached

@BigSimmo, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 26 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 3d4b0d43-3da5-480b-8260-74c318b72fa0

📥 Commits

Reviewing files that changed from the base of the PR and between 4d81e09 and 8bc5c59.

📒 Files selected for processing (1)
  • .github/workflows/eval-canary.yml
📝 Walkthrough

Walkthrough

The pull request updates pinned GitHub Actions revisions across workflow files. actions/checkout moves from v7.0.0 to v7.0.1, while anthropics/claude-code-action moves from v1.0.178 to v1.0.179. Workflow logic remains unchanged.

Changes

Workflow action pin updates

Layer / File(s) Summary
Checkout pin rollout
.github/workflows/*.yml		 Checkout steps across CI, security, reporting, evaluation, Docker, and tenancy workflows now use the pinned actions/checkout v7.0.1 revision.
Claude action pins
.github/workflows/claude.yml		 The conditional Claude steps update both actions/checkout and anthropics/claude-code-action to newer pinned revisions.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

Suggested reviewers: bigsimmo

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The summary is detailed, but the required Verification and Risk/rollback sections from the template are missing. Add the template sections for Verification, Risk and rollback, and Notes, including any relevant test commands or explicit not-run reasons.
✅ Passed checks (4 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title accurately summarizes the dependency bump to GitHub Actions in the workflows.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/github-actions-fd6de3ce94

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown

CI triage

CI failed on this PR. Automated classification of the 2 failed job(s):

  • Static PR checks — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
  • PR required — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.

Compared with main CI run #4155 (success).

Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger.

@BigSimmo BigSimmo mentioned this pull request Jul 21, 2026
Merged
3 tasks
@dependabot
chore(deps): bump the github-actions group across 1 directory with 2 …
4d81e09 
…updates

Bumps the github-actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `anthropics/claude-code-action` from 1.0.178 to 1.0.179
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@af0559e...b76a077)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.179
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the github-actions group with 2 updates chore(deps): bump the github-actions group across 1 directory with 2 updates Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-fd6de3ce94 branch from a767c5a to 4d81e09 Compare July 21, 2026 01:13
@BigSimmo
BigSimmo enabled auto-merge (squash) July 21, 2026 01:31
@BigSimmo
BigSimmo merged commit 71059eb into main Jul 21, 2026
19 checks passed
@BigSimmo
BigSimmo deleted the dependabot/github_actions/github-actions-fd6de3ce94 branch July 21, 2026 01:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@BigSimmo BigSimmo BigSimmo approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@BigSimmo