chore(deps): update anthropics/claude-code-action action to v1.0.91

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	v1.0.90 → v1.0.91	v1.0.94 (+2)

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.91

Compare Source

What's Changed

• Use pinned bun binary for post-steps when allowed_non_write_users is set by @​OctavianGuzu in #​1190

Full Changelog: anthropics/claude-code-action@v1...v1.0.91

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Version Update: v1.0.90 → v1.0.91

Changes in v1.0.91:

1. Use pinned bun binary for post-steps when allowed_non_write_users is set (#1190)

   • Copies bun binary into $GITHUB_ACTION_PATH/bin before the claude step runs
   • Uses the pinned copy in two post-steps: "Cleanup SSH signing key" and "Post buffered inline comments"
   • Falls back to PATH-resolved bun when allowed_non_write_users is empty

2. Dependency version bumps:

   • Claude Code: bumped to 2.1.97
   • Agent SDK: bumped to 0.2.97

Breaking Changes: None

Security/Reliability Improvements:

• Improved consistency and security for post-step execution when allowed_non_write_users is configured
• Reduces risk of PATH manipulation affecting post-step execution
• Fully backward compatible (no-op for default configuration)

🎯 Impact Scope Investigation

Usage Locations in Current Codebase:

1. .github/workflows/ci.yml (2 instances)
   • Line 253: content-review job - reviews blog content changes
   • Line 342: code-review job - reviews code changes
2. .github/workflows/claude.yml (1 instance)
   • Line 35: claude job - interactive Claude Code invocation via @claude mentions

Configuration Analysis:

• allowed_non_write_users parameter: Not used in any workflow in this codebase
• allowed_bots parameter: Used in ci.yml (value: 'lacolaco-actions-worker[bot]')
• The change affects workflows that use allowed_non_write_users, which this codebase does NOT use

Dependency Impact:

• This is a GitHub Action (not an npm/pnpm package), so no package.json impact
• No transitive dependency conflicts
• No configuration file changes required

Behavior Changes:

• Since allowed_non_write_users is not configured in this codebase, the fallback behavior applies
• All existing workflows will continue to use PATH-resolved bun (identical to v1.0.90 behavior)
• Zero functional change for this codebase

💡 Recommended Actions

Immediate Actions:

• ✅ Safe to merge immediately - This is a transparent patch update with backward compatibility
• No code modifications required
• No configuration changes needed
• No migration work necessary

Post-Merge Verification:

• Monitor the next CI run to confirm all three workflows execute successfully:
  • content-review job in ci.yml
  • code-review job in ci.yml
  • claude job in claude.yml
• Expected behavior: Identical to current v1.0.90 behavior (no observable changes)

Future Consideration:

• If allowed_non_write_users is ever added to workflow configuration in the future, this update ensures more reliable post-step execution

🔗 Reference Links

• Release Notes v1.0.91
• PR #1190: Use pinned bun binary for post-steps
• Full Changelog v1.0.90...v1.0.91

Generated by koki-develop/claude-renovate-review