chore(deps): update anthropics/claude-code-action digest to 806af32

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	9dd8b95 → 806af32

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 38e18e29-4c8c-4f1e-a0ec-2c7e08b7ca4e

📥 Commits

Reviewing files that changed from the base of the PR and between 7a0a8db and bfee2a6.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (2)

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

.github/workflows/**/*.{yml,yaml}: Ensure coverage threshold settings in GitHub Actions workflow files for coverage-min match the [tool.coverage.report] fail_under setting in pyproject.toml, as the lower value will be the effective threshold
For startup_failure in GitHub Actions workflows with zero jobs, check for invalid YAML syntax, top-level permissions: blocks in workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

Reference reusable workflows with @main by default unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Based on my exploration of the stranske/Workflows repository, I can now provide my findings:

Linked repositories findings

stranske/Workflows

Summary:
This PR updates the anthropics/claude-code-action pinned digest in the consumer-template workflow. The change affects all downstream consumer repositories.

Key findings:

1. Template Workflow Location & Consumers [::stranske/Workflows::]

   • The modified workflow is located at ./templates/consumer-repo/.github/workflows/maint-76-claude-code-review.yml (line 192)
   • Currently pinned to: anthropics/claude-code-action@9dd8b95a392eb34b6f5fb56cf5a64cb735912d4b # v1
   • This template is synced to 13 registered first-party consumer repositories via .github/workflows/maint-68-sync-consumer-repos.yml:
     • stranske/Travel-Plan-Permission
     • stranske/Template
     • stranske/Counter_Risk
     • stranske/Pension-Data
     • stranske/Inv-Man-Intake
     • stranske/Ready
     • stranske/trip-planner
     • stranske/Manager-Database
     • stranske/Portable-Alpha-Extension-Model
     • stranske/Trend_Model_Project
     • stranske/Collab-Admin
     • stranske/learning-management-system
     • stranske/Fine-Art-Archive

2. Workflow Configuration [::stranske/Workflows::]

   • The Claude Code Review workflow is opt-in: requires either:
     • claude-review label on a PR, OR
     • Manual workflow dispatch with a PR number
   • Current action inputs (lines 193-202):
     • claude_code_oauth_token: from secrets.CLAUDE_CODE_OAUTH_TOKEN
     • allowed_bots: '*'
     • claude_args: --max-turns 8
     • plugin_marketplaces: https://github.com/anthropics/claude-code.git
     • plugins: code-review@claude-code-plugins
     • prompt: /code-review:code-review

3. Related PR Alignment [::stranske/Workflows::]

   • The related PR stranske/Template#805 makes the identical change to the same workflow digest update
   • The sync manifest (.github/sync-manifest.yml) confirms maint-76-claude-code-review.yml is explicitly synced to consumers with description: "Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch"

4. Security & Configuration [::stranske/Workflows::]

   • The workflow includes integrity checks: it verifies the workflow hasn't been modified in the PR before allowing execution (lines 121-150)
   • Requires CLAUDE_CODE_OAUTH_TOKEN secret to be configured in consumer repos per ./templates/consumer-repo/docs/SETUP_CHECKLIST.md
   • The action runs with continue-on-error: true (line 191), making failures non-blocking

Cross-boundary impact:
The digest update will propagate to all 13 consumer repositories through the automated sync workflow. Since the action interface (inputs/outputs) uses semantic versioning (v1), the digest update should maintain API compatibility. The opt-in nature and non-blocking error handling minimize risk of widespread disruption.

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

---

📝 Walkthrough

Walkthrough

The pinned commit SHA for the anthropics/claude-code-action (v1) action in the claude-review step of .github/workflows/maint-76-claude-code-review.yml is updated to a new digest. No other workflow logic, inputs, conditions, or configuration is modified.

Changes

Claude Code Action SHA Bump

Layer / File(s)	Summary
Update pinned claude-code-action SHA .github/workflows/maint-76-claude-code-review.yml	The uses: commit SHA for anthropics/claude-code-action@v1 in the claude-review step is replaced with a new pinned revision.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Template#805: Modifies the same claude-review step in the same workflow file by changing only the pinned anthropics/claude-code-action SHA, identical in nature to this PR.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating the anthropics/claude-code-action dependency to a new digest, which matches the pull request's primary objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/anthropics-claude-code-action-digest

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[stranske-keepalive]

Automated Status Summary

Head SHA: 2c4486a
Latest Runs: ⏳ pending — Gate
Required: core tests (3.12): ⏳ pending, core tests (3.13): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Coverage Overview

• Coverage history entries: 0

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined