Skip to content

chore(deps): update claude-code-action to v1.0.25#176

Merged
sjnims merged 1 commit intomainfrom
chore/update-claude-code-action-v1.0.25
Dec 17, 2025
Merged

chore(deps): update claude-code-action to v1.0.25#176
sjnims merged 1 commit intomainfrom
chore/update-claude-code-action-v1.0.25

Conversation

@sjnims
Copy link
Copy Markdown
Owner

@sjnims sjnims commented Dec 17, 2025

Summary

  • Update anthropics/claude-code-action from v1.0.23 to v1.0.25 across all 7 workflow files
  • SHA: d7b6d50442a89f005016e778bf825a72ef582525

Files Changed

Workflow Purpose
claude.yml Main @claude trigger
claude-pr-review.yml Automated PR review
ci-failure-analysis.yml CI failure analysis
component-validation.yml Plugin component validation
semantic-labeler.yml Issue/PR labeling (2 occurrences)
version-check.yml Version consistency check
weekly-maintenance.yml Weekly maintenance report

Test plan

  • CI workflows pass
  • No breaking changes in v1.0.25

🤖 Generated with Claude Code

Update anthropics/claude-code-action from v1.0.23 to v1.0.25
(SHA: d7b6d50442a89f005016e778bf825a72ef582525) across all workflows.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@sjnims sjnims self-assigned this Dec 17, 2025
@sjnims
Copy link
Copy Markdown
Owner Author

sjnims commented Dec 17, 2025

@claude please review this PR

@claude
Copy link
Copy Markdown

claude bot commented Dec 17, 2025

Claude finished @sjnims's task in 1m 44s —— View job


PR Review: claude-code-action v1.0.25 Update

Review Progress

  • Read all 7 modified workflow files
  • Check for any missed workflow files (all 8 occurrences updated)
  • Verify SHA corresponds to v1.0.25 (SHA confirmed: d7b6d50)
  • Check for breaking changes in v1.0.25 (none found)
  • Verify consistency across all files
  • Provide final review feedback

Summary

Looks good - approve when ready

This PR correctly updates anthropics/claude-code-action from v1.0.23 to v1.0.25 across all workflow files. All changes are consistent, the SHA is correct, and there are no breaking changes.


What's Good

  1. Complete coverage: All 8 occurrences of claude-code-action across 7 workflow files have been updated

    • .github/workflows/claude.yml (1 occurrence)
    • .github/workflows/claude-pr-review.yml (1 occurrence)
    • .github/workflows/ci-failure-analysis.yml (1 occurrence)
    • .github/workflows/component-validation.yml (1 occurrence)
    • .github/workflows/semantic-labeler.yml (2 occurrences - both jobs updated)
    • .github/workflows/version-check.yml (1 occurrence)
    • .github/workflows/weekly-maintenance.yml (1 occurrence)
  2. Consistent SHA: All references use the correct commit SHA d7b6d50442a89f005016e778bf825a72ef582525 with version comment # v1.0.25

  3. Version jump includes important fixes: The upgrade from v1.0.23 → v1.0.25 includes:

    • v1.0.24 changes:
      • Security fix for command injection vulnerability in branch setup
      • Agent SDK is now the default execution path
      • Added session_id output for resuming conversations
    • v1.0.25 changes:
      • Model updated to claude-opus-4-5 in workflows
      • Fixed handling of multiple --mcp-config flags
      • Added support for --allowed-tools parameter parsing
  4. No breaking changes: None of the changes in v1.0.24 or v1.0.25 introduce breaking changes


Verification Details

SHA Verification

  • Tag v1.0.25 points to commit d7b6d50442a89f005016e778bf825a72ef582525
  • All workflow files use this exact SHA ✅

Completeness Check

  • Searched all .yml files for anthropics/claude-code-action@
  • Found exactly 8 occurrences across 7 files
  • All 8 occurrences have been updated in this PR ✅

Breaking Changes Check

  • Reviewed release notes for v1.0.24 and v1.0.25
  • No breaking changes identified ✅
  • Changes are primarily bug fixes and feature additions

Test Plan Review

The test plan in the PR description is appropriate:

  • ✅ CI workflows should pass (all workflows use standard action parameters)
  • ✅ No breaking changes in v1.0.25 (confirmed via release notes)

Additional validation:

  • This PR will trigger the validate-workflows.yml check to lint the workflow files
  • Consider manually triggering one of the updated workflows to verify the new version works as expected (optional)

Minor Observations

Security note: The v1.0.24 release (included in this jump) fixed a command injection vulnerability in branch setup. This makes the update particularly important from a security perspective.

Feature note: The --allowed-tools parsing fix in v1.0.25 may be relevant to this repository since several workflows use the claude_args parameter with --allowedTools (e.g., semantic-labeler.yml:111, claude-pr-review.yml:93).


Recommendation

Approve and merge. All changes are correct, consistent, and include important security fixes. No issues found.


| Branch: chore/update-claude-code-action-v1.0.25

@sjnims sjnims merged commit 947ce52 into main Dec 17, 2025
4 of 6 checks passed
@sjnims sjnims deleted the chore/update-claude-code-action-v1.0.25 branch December 17, 2025 02:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant