chore(deps): update anthropics/claude-code-action action to v1.0.131

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	v1.0.129 → v1.0.131	v1.0.133 (+1)

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.131

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.131

v1.0.130

Compare Source

What's Changed

• Add Workload Identity Federation (OIDC) authentication support by @​ashwin-ant in #​1338

Full Changelog: anthropics/claude-code-action@v1...v1.0.130

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

v1.0.130 — Workload Identity Federation (OIDC) support (#1338)

• New feature (additive only): Adds OIDC-based authentication via Workload Identity Federation as an opt-in alternative to static API keys/OAuth tokens
• New optional inputs: anthropic_federation_rule_id, anthropic_organization_id, anthropic_service_account_id, anthropic_workspace_id, anthropic_oidc_audience
• Existing auth methods (anthropic_api_key, claude_code_oauth_token, Bedrock, Vertex, Foundry) are explicitly unchanged
• If a static credential is set alongside federation inputs, the static credential takes precedence

v1.0.131 — Dependency bump

• Bumps Claude Code CLI to 2.1.148 and Agent SDK to 0.3.148
• No functional changes to action behavior; maintenance release only

No breaking changes across both versions.

🎯 Impact Scope Investigation

• Usage in codebase: .github/workflows/ci.yml uses anthropics/claude-code-action in two jobs:
  • content-review (line 204): reviews Zenn article content changes
  • code-review (line 294): reviews code changes
• Both jobs authenticate via claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} — the existing OAuth token path, which is unaffected by this update
• The id-token: write permission is already present in both jobs (was there before this update)
• No new inputs are needed; OIDC/WIF is purely opt-in
• No impact on other packages or configuration files

💡 Recommended Actions

• No migration steps or code changes required
• Merge as-is; the update is a straightforward pin bump to a patch version

🔗 Reference Links

• v1.0.130 Release
• v1.0.131 Release
• WIF Support PR #1338
• Commit diff v1.0.129→v1.0.131

Generated by koki-develop/claude-renovate-review