chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	v1.0.111 → v1.0.119	v1.0.123 (+3)
pnpm/action-setup	action	patch	v6.0.5 → v6.0.6	v6.0.8 (+1)

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.119

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.119

v1.0.118

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.118

v1.0.117

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.117

v1.0.116

Compare Source

What's Changed

• Update HackerOne links in SECURITY.md by @​OctavianGuzu in #​1268

Full Changelog: anthropics/claude-code-action@v1...v1.0.116

v1.0.115

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.115

v1.0.114

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.114

v1.0.113

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.113

v1.0.112

Compare Source

What's Changed

• fix: make trigger_phrase match case-insensitive by @​JustinBis in #​1279

New Contributors

• @​JustinBis made their first contribution in #​1279

Full Changelog: anthropics/claude-code-action@v1...v1.0.112

pnpm/action-setup (pnpm/action-setup)

v6.0.6

Compare Source

What's Changed

• fix: bin_dest output points to self-updated pnpm, not bootstrap by @​zkochan in #​249

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

pnpm/action-setup v6.0.5 → v6.0.6

• Bug fix: bin_dest output now correctly points to the self-updated pnpm binary instead of the bootstrap binary. This is a correctness fix for the output variable — no breaking change.

anthropics/claude-code-action v1.0.111 → v1.0.119

• v1.0.112: Bug fix — trigger_phrase input matching is now case-insensitive. No breaking change.
• v1.0.113–v1.0.115: No documented changes (patch releases).
• v1.0.116: Documentation only — updated HackerOne links in SECURITY.md. No functional change.
• v1.0.117–v1.0.119: No documented changes (patch releases).
• No breaking changes across all 8 patch versions.

🎯 Impact Scope Investigation

pnpm/action-setup is used in 7 locations across 3 workflow files:

• ci.yml: 5 jobs (format, lint, typecheck, test, deploy-check)
• deployment.yml: 1 job (deploy)
• update-pokemon-data.yml: 1 job

None of these jobs consume the bin_dest output that was fixed, so the bug fix has no visible effect on the current workflows — but the update is still correct and safe.

anthropics/claude-code-action is used in 1 location:

• ci.yml: code-review job (human PR reviews only, guarded by github.event.pull_request.user.login != 'renovate[bot]')

The workflow does not use the trigger_phrase input (the feature changed in v1.0.112), so that fix has no direct impact. The action inputs (claude_code_oauth_token, allowed_bots, use_sticky_comment, prompt, claude_args) are all unchanged.

All SHA pins in the diff correctly match the target versions:

• pnpm/action-setup: 91ab88e2619ed1f46221f0ba42d1492c02baf788 = v6.0.6 ✅
• anthropics/claude-code-action: 476e359e6203e73dad705c8b322e333fabbd7416 = v1.0.119 ✅

💡 Recommended Actions

• No migration steps required.
• No code or configuration changes needed.
• Merge as-is.

🔗 Reference Links

• pnpm/action-setup v6.0.6 release
• pnpm/action-setup PR #249 (bin_dest fix)
• anthropics/claude-code-action v1.0.119 release
• anthropics/claude-code-action PR #1279 (trigger_phrase case-insensitive)

Generated by koki-develop/claude-renovate-review