chore(deps): update anthropics/claude-code-action digest to 428971d

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	74eedf1 → 428971d

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

Summary by CodeRabbit

• Chores
  • Updated an internal workflow step to a newer pinned version for the code review automation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 3d184623-20da-493f-86ec-af7997e80122

📥 Commits

Reviewing files that changed from the base of the PR and between c3df709 and 1d484e6.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: Cross-Repo Smoke (trip-planner)

🧰 Additional context used

📓 Path-based instructions (2)

**/.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For reusable workflows (workflow_call trigger), do not include a top-level permissions: block as it conflicts with caller-provided permissions

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

First-party consumers should reference reusable workflows with @main. Match that unless you are intentionally pinning to an exact commit SHA for a controlled reason.

Reference reusable workflows from stranske/Workflows with @main tag by default; only pin to exact commit SHA if there is a controlled and documented reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Linked repositories findings

stranske/Workflows

• .github/workflows/maint-48-docs-drift-audit.yml:13 mentions claude-code-action in a comment, but no other workflow references to that action were found in the search output. [::stranske/Workflows::]
• CHANGELOG.md:160, CHANGELOG.md:161 (also repeated at 373-374, 585-586, etc.) record prior “bump claude code review action” entries, showing this action pin has been updated before. [::stranske/Workflows::]
• docs/HISTORY.md:159 and docs/HISTORY.md:466 mention the consumer-side maint-76-claude-code-review.yml workflow and its phased rollout, indicating this workflow is intentionally shared/consumed across repos. [::stranske/Workflows::]

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: 🔒 Security & Privacy

Pinned anthropics/claude-code-action to v1
The SHA resolves to the v1 tag, so the # v1 comment matches the current release.

---

📝 Walkthrough

Walkthrough

The workflow updates the pinned anthropics/claude-code-action revision used by the claude-review job in .github/workflows/maint-76-claude-code-review.yml.

Changes

Workflow action repin

Layer / File(s)	Summary
Update Claude Code Review action .github/workflows/maint-76-claude-code-review.yml	The claude-review step now uses anthropics/claude-code-action@428971d2... instead of the previous pinned SHA.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related issues

• Dependency Dashboard Trend_Model_Project#5558: Updates the same anthropics/claude-code-action digest in the same workflow step.
• Dependency Dashboard Collab-Admin#831: Updates the same anthropics/claude-code-action digest in the same workflow step.

Possibly related PRs

• stranske/Travel-Plan-Permission#1270: Updates the same .github/workflows/maint-76-claude-code-review.yml claude-review step by changing the pinned anthropics/claude-code-action commit hash.
• stranske/Travel-Plan-Permission#1266: Modifies the same workflow file and repins anthropics/claude-code-action in the claude-review job.
• stranske/Travel-Plan-Permission#1251: Updates the same workflow step to a different pinned anthropics/claude-code-action revision.

Suggested reviewers

• stranske

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the digest update to anthropics/claude-code-action and matches the PR’s main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/anthropics-claude-code-action-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske]

Closing as superseded by stranske/Workflows#2535, which updates the canonical consumer template for maint-76-claude-code-review.yml. Maint 68 sync run https://github.com/stranske/Workflows/actions/runs/28140941200 will propagate the managed file.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the anthropics/claude-code-action 428971d update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.