chore(deps): update anthropics/claude-code-action digest to 30544b6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	2fee155 → 30544b6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated GitHub Actions workflow configuration to use a newer version of the code review action.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ed8c53dd-aa64-4cee-ae17-8d12fb92986e

📥 Commits

Reviewing files that changed from the base of the PR and between 5b1aeb2 and 4d4e132.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (2)

**/.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For reusable workflows (workflow_call trigger), do not include a top-level permissions: block as it conflicts with caller-provided permissions

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

First-party consumers should reference reusable workflows with @main. Match that unless you are intentionally pinning to an exact commit SHA for a controlled reason.

Reference reusable workflows from stranske/Workflows with @main tag by default; only pin to exact commit SHA if there is a controlled and documented reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Perfect! I now have comprehensive information about this PR. Let me compile my findings:

Linked repositories findings

stranske/Workflows

Template Distribution & Consumer Scope:

The PR updates the anthropics/claude-code-action pinned digest in the template workflow file at templates/consumer-repo/.github/workflows/maint-76-claude-code-review.yml:192 [::stranske/Workflows::], changing the commit hash from 2fee155 to 30544b6 while keeping the v1 tag reference intact.

Distribution to Consumer Repos:

This template is listed in .github/sync-manifest.yml:122-123 [::stranske/Workflows::] as a synced maintenance workflow, which means it will be distributed via maint-68-sync-consumer-repos.yml [::stranske/Workflows::] to 13 registered consumer repositories:

• stranske/Travel-Plan-Permission
• stranske/Template
• stranske/Counter_Risk
• stranske/Pension-Data
• stranske/Inv-Man-Intake
• stranske/Ready
• stranske/trip-planner
• stranske/Manager-Database
• stranske/Portable-Alpha-Extension-Model
• stranske/Trend_Model_Project
• stranske/Collab-Admin
• stranske/learning-management-system
• stranske/Fine-Art-Archive

Workflow Characteristics:

• Opt-in mechanism: The workflow only runs on PRs labeled with claude-review or via manual workflow dispatch (.github/workflows/maint-76-claude-code-review.yml:10-11) [::stranske/Workflows::]
• Non-blocking: The action step runs with continue-on-error: true, so failures don't block PR merges (line 191) [::stranske/Workflows::]
• Security guard: The workflow includes an integrity check to ensure the workflow itself hasn't been modified in the PR before using the CLAUDE_CODE_OAUTH_TOKEN secret (lines 121-150) [::stranske/Workflows::]
• Token dependency: Requires secrets.CLAUDE_CODE_OAUTH_TOKEN (CLAUDE_CODE_OAUTH_TOKEN) to be configured in each consumer repo, checked via the detect-secret job (lines 152-166) [::stranske/Workflows::]

Action Interface (Unchanged):

The workflow calls the action with the same inputs as before:

• claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
• allowed_bots: '*'
• claude_args: --max-turns 8
• plugin_marketplaces: https://github.com/anthropics/claude-code.git
• plugins: code-review@claude-code-plugins
• prompt: /code-review:code-review ${{ github.repository }}/pull/${{ needs.resolve-target.outputs.pr_number }}

All inputs remain unchanged per the PR summary.

Cross-Repo Coordination:

Related PRs in Travel-Plan-Permission (#1202, #1225, #1229, #1239) [::stranske/Workflows::] show similar concurrent updates to this workflow across the consumer fleet, suggesting this is a coordinated dependency update cycle.

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

189-203: LGTM!

---

📝 Walkthrough

Walkthrough

The Run Claude Code Review step in .github/workflows/maint-76-claude-code-review.yml updates the pinned revision of anthropics/claude-code-action from the previous commit hash to 30544b674398ee15c84819bd87caf8a87e8c7b55 (v1). No other configuration in the workflow is modified.

Changes

Claude Code Action Pin Update

Layer / File(s)	Summary
Update anthropics/claude-code-action commit pin .github/workflows/maint-76-claude-code-review.yml	Replaces the old commit hash with 30544b674398ee15c84819bd87caf8a87e8c7b55 (v1) for the anthropics/claude-code-action reference in the Run Claude Code Review step; all other step inputs are unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Travel-Plan-Permission#1202: Also repins anthropics/claude-code-action@v1 to a different commit SHA in the same workflow step with no other changes.
• stranske/Travel-Plan-Permission#1239: Updates the same claude-review step's pinned commit SHA for anthropics/claude-code-action, leaving all other configuration unchanged.
• stranske/Travel-Plan-Permission#1229: Modifies the same workflow step in .github/workflows/maint-76-claude-code-review.yml to update the anthropics/claude-code-action commit digest.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating the anthropics/claude-code-action digest to a new commit hash.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/anthropics-claude-code-action-digest

---

_{Comment @coderabbitai help to get the list of available commands.}