chore(deps): update anthropics/claude-code-action digest to 4d7e1f0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	593d7a5 → 4d7e1f0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for stranske-trip-planner canceled.

Name	Link
🔨 Latest commit	3a06c36
🔍 Latest deploy log	https://app.netlify.com/projects/stranske-trip-planner/deploys/6a313dfdbb50f300080ca4e6

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: a20d3279-a25e-4e4f-a31e-8109584ea79c

📥 Commits

Reviewing files that changed from the base of the PR and between 735c038 and 3a06c36.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: Cross-Repo Smoke / cross-repo-full-product
• GitHub Check: Runtime CI

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/**/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

Check both pyproject.toml ([tool.coverage.report] fail_under) AND workflow files for coverage-min settings; ensure these match or the lower value will be the effective threshold

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For GitHub Actions workflow startup_failure errors with zero jobs, check for invalid YAML syntax, top-level permissions: block on workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

In consumer repositories, reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

**/.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

Reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Linked repositories findings

stranske/Workflows

Distribution & Usage:

The workflow file is located at templates/consumer-repo/.github/workflows/maint-76-claude-code-review.yml [::stranske/Workflows::] and is actively distributed to consumer repositories via the sync-manifest at .github/sync-manifest.yml [::stranske/Workflows::]. The manifest entry (line 122) confirms this workflow is synced to all consumer repos.

Workflow Configuration:

The workflow at line 192 calls anthropics/claude-code-action@593d7a5c4e0073569f74772c2b7b64c30ec14707 [::stranske/Workflows::] with these inputs:

• claude_code_oauth_token: From secrets
• allowed_bots: '*'
• claude_args: --max-turns 8
• plugin_marketplaces: GitHub actions plugin marketplace
• plugins: code-review@claude-code-plugins

The action call uses continue-on-error: true (line 191) [::stranske/Workflows::], meaning failures in the review step do not block the workflow.

Backward Compatibility:

The PR updates the action commit hash from 593d7a5 to 4d7e1f0 without changing:

• Input parameters or configuration
• Workflow step logic or permissions
• Error handling strategy

Critical Upstream Fixes in the New Version:

Between commits 593d7a5 and 4d7e1f0, the anthropics/claude-code-action includes fixes for:

1. SDK iterator hang (#1339) — Critical fix for pull_request-triggered workflow hangs; directly relevant to this workflow's pull_request trigger (line 10)
2. Image type detection (#1396) — Prevents JPEG/GIF/WebP media-type mismatch errors
3. HTML sanitization (#1371) — Fixes content corruption in suggestion blocks
4. MCP tools parser alignment (#1373) — Ensures tools configured via allowed_bots are correctly granted
5. Auth fallback (#1342) — Improves handling of inherited environment variables
6. Prompt directory cleanup (#1288) — Fixes leakage on self-hosted runners
7. Label support (#1298) — Enables drift-watcher routing patterns

Security & Integrity:

The workflow includes a workflow-integrity guard (lines 121-150) [::stranske/Workflows::] that prevents execution if the workflow itself is modified in the PR, protecting against secret exfiltration via workflow manipulation.

No Breaking Changes Detected:

All upstream changes between versions are backward-compatible. Consumer repositories using this workflow template will automatically receive these quality and security improvements when synced without any configuration changes needed.

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

---

📝 Walkthrough

Walkthrough

The Run Claude Code Review step in .github/workflows/maint-76-claude-code-review.yml has its uses: field updated to a new pinned commit SHA for anthropics/claude-code-action. No other workflow logic, inputs, permissions, or configuration is changed.

Changes

Claude Code Review Workflow Action Bump

Layer / File(s)	Summary
Pinned SHA update for claude-code-action .github/workflows/maint-76-claude-code-review.yml	The uses: commit hash for anthropics/claude-code-action in the Run Claude Code Review step is updated to a new pinned revision.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating the anthropics/claude-code-action dependency to a new digest hash.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/anthropics-claude-code-action-digest

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}