chore(deps): update anthropics/claude-code-action action to v1.0.133

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action	action	patch	v1.0.132 → v1.0.133

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.133

Compare Source

What's Changed

• Use workload identity federation for Claude auth in CI workflows by @​ashwin-ant in #​1344

Full Changelog: anthropics/claude-code-action@v1...v1.0.133

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• New Feature (Additive): Workload Identity Federation (WIF) support for Claude auth in CI workflows — allows GitHub's OIDC token to be exchanged for short-lived Claude API credentials, eliminating need for long-lived API key secrets
• No breaking changes: The existing claude_code_oauth_token / anthropic_api_key authentication path is fully preserved and continues working without any modification
• No bug fixes or security patches beyond the optional WIF security enhancement
• WIF is opt-in via three new optional repository variables (ANTHROPIC_FEDERATION_RULE_ID, ANTHROPIC_ORGANIZATION_ID, ANTHROPIC_SERVICE_ACCOUNT_ID); omitting them reverts to token auth

🎯 Impact Scope Investigation

• Usage locations: 3 occurrences across 2 workflow files:
  • .github/workflows/ci.yml:269 — content review job
  • .github/workflows/ci.yml:358 — code review job
  • .github/workflows/claude.yml:37 — claude agent job
• All usages use claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}, which remains fully supported in v1.0.133
• No dependency impact: Patch version update, no transitive dependency changes expected
• No configuration file changes required

💡 Recommended Actions

• No migration steps required — merge as-is
• The existing CLAUDE_CODE_OAUTH_TOKEN secret continues to work without modification
• Optional: Consider migrating to WIF in the future for improved security posture (short-lived credentials vs long-lived OAuth token), but this is not required for this update

🔗 Reference Links

• v1.0.133 Release Notes
• PR #1344: Use workload identity federation for Claude auth in CI workflows
• v1.0.132 → v1.0.133 Diff

Generated by koki-develop/claude-renovate-review