chore(deps): update anthropics/claude-code-action digest to 80b3182

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	30544b6 → 80b3182

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated internal code review workflow infrastructure.

[stranske-keepalive]

Automated Status Summary

Head SHA: ecd3895
Latest Runs: ⏳ pending — Gate
Required: core tests (3.12): ⏳ pending, core tests (3.13): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Coverage Overview

• Coverage history entries: 0

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: a09af656-0756-40d0-b03a-ebe14254dfd9

📥 Commits

Reviewing files that changed from the base of the PR and between aef81de and 51fadee.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (3)

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

.github/workflows/**/*.{yml,yaml}: Ensure coverage threshold settings in GitHub Actions workflow files for coverage-min match the [tool.coverage.report] fail_under setting in pyproject.toml, as the lower value will be the effective threshold
For startup_failure in GitHub Actions workflows with zero jobs, check for invalid YAML syntax, top-level permissions: blocks in workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Based on my exploration of the stranske/Workflows repository, I now have comprehensive cross-repository context. Let me provide the findings:

Linked repositories findings

stranske/Workflows [::stranske/Workflows::]

File being changed:

• ./templates/consumer-repo/.github/workflows/maint-76-claude-code-review.yml — This is a template file that gets synced to 13 registered consumer repositories.

Action version update:

• The PR updates anthropics/claude-code-action from digest 30544b6 (Claude Code 2.1.186 / Agent SDK 0.3.186) to 80b31826338489861333dc17217865dfe8085cdc (Claude Code 2.1.187 / Agent SDK 0.3.187).
• This is a minor version bump with a one-day gap between versions (June 22 → June 23, 2026).

Distribution impact:

• The workflow is listed in .github/sync-manifest.yml at line 161-162 with sync description: "Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch" [::stranske/Workflows::]
• This file is automatically synced to 13 registered consumer repositories via maint-68-sync-consumer-repos.yml [::stranske/Workflows::]:
  • stranske/Travel-Plan-Permission
  • stranske/Template
  • stranske/Counter_Risk
  • stranske/Pension-Data
  • stranske/Inv-Man-Intake
  • stranske/Ready
  • stranske/trip-planner
  • stranske/Manager-Database
  • stranske/Portable-Alpha-Extension-Model
  • stranske/Trend_Model_Project
  • stranske/Collab-Admin
  • stranske/learning-management-system
  • stranske/Fine-Art-Archive

Workflow safeguards in place:

• The workflow has workflow integrity checking that blocks execution if the workflow file itself is modified in the PR being reviewed (lines 121-150) [::stranske/Workflows::]
• Secret validation: Requires CLAUDE_CODE_OAUTH_TOKEN configured (lines 154-166) [::stranske/Workflows::]
• Opt-in activation: Requires claude-review label on PRs or manual dispatch (lines 94-96) [::stranske/Workflows::]
• Non-blocking execution: Uses continue-on-error: true (line 191) [::stranske/Workflows::]

Validation process:

• The health-70-validate-sync-manifest.yml workflow validates that all synced files remain properly declared and complete before allowing pushes to main [::stranske/Workflows::]
• The maint-sync-action-versions.yml workflow automatically syncs action version updates to templates after Dependabot merges changes [::stranske/Workflows::]

Related PRs pattern:

• The PR context shows 5 related PRs (Template#805, #823, #827, #837, #850) that all update the same workflow step with different Claude Code Action digests, indicating this is part of an ongoing action version management cadence [::stranske/Workflows::]

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: 🔒 Security & Privacy

Pinned commit verified as valid.

The commit 80b31826338489861333dc17217865dfe8085cdc exists in anthropics/claude-code-action and corresponds to the legitimate version bump ("chore: bump Claude Code to 2.1.187 and Agent SDK to 0.3.187" from 2026-06-23). The SHA-pinning approach protects against supply-chain tampering and will not break the 13 synced consumer repositories.

Note: The # v1 comment tag does not match the current v1 tag SHA (c54c7d65...), so consider removing or updating the version annotation if accuracy is desired.

---

📝 Walkthrough

Walkthrough

The pinned commit hash for anthropics/claude-code-action in the claude-review job of the Claude Code Review workflow is updated to 80b31826338489861333dc17217865dfe8085cdc. No other workflow logic, inputs, or parameters are changed.

Changes

Claude Code Review Workflow Action Pin

Layer / File(s)	Summary
Update claude-code-action commit hash .github/workflows/maint-76-claude-code-review.yml	The uses: pin for the Run Claude Code Review step is changed to commit 80b31826338489861333dc17217865dfe8085cdc (still labelled # v1); no other step logic is modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Template#805: Updates the same anthropics/claude-code-action commit pin in the same workflow file.
• stranske/Template#850: Modifies the same Run Claude Code Review step in the same workflow by changing the pinned commit hash.
• stranske/Template#837: Updates the same workflow step's anthropics/claude-code-action pin to a different commit hash with no other logic changes.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: updating the anthropics/claude-code-action dependency digest to a specific version.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/anthropics-claude-code-action-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske]

Closing as superseded by stranske/Workflows#2523. This PR modifies the Workflows-managed Claude review workflow directly; Maint 68 will propagate the source-of-truth template update.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the anthropics/claude-code-action 80b3182 update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.