chore(deps): update github actions by renovate[bot] · Pull Request #149 · aignostics/foundry-python-core

renovate · 2026-11-06T20:53:14Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
SonarSource/sonarqube-scan-action	action	minor	`v8.2.0` → `v8.4.0`	`v8.4.1`
actions/checkout	action	patch	`v7.0.0` → `v7.0.1`
actions/create-github-app-token	action	minor	`v3.2.0` → `v3.3.0`
actions/upload-artifact	action	patch	`v7.0.1` → `v7.0.2`
anthropics/claude-code-action	action	patch	`v1.0.166` → `v1.0.266`	`v1.0.269` (+2)
codecov/codecov-action	action	minor	`v7.0.0` → `v7.1.1`
github/codeql-action	action	minor	`v4.36.3` → `v4.39.1`	`v4.39.3` (+1)
jdx/mise-action	action	major	`v4.2.0` → `v5.2.5`	`v5.2.7` (+1)
slackapi/slack-github-action	action	major	`v3.0.3` → `v4.0.0`
stefanzweifel/git-auto-commit-action	action	patch	`v7.2.0` → `v7.2.1`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

SonarSource/sonarqube-scan-action

`v8.4.0`

Compare Source

What's Changed

SQSCANGHA-174 NO-JIRA Bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #277
Update Rollup and preserve scanner argument compatibility by @renovate[bot] in #275
Update dependency rollup to v4.64.6 by @renovate[bot] in #279
SQSCANGHA-177 Update SonarScanner CLI to 8.2.0.6438 by @github-actions[bot] in #281
SQSCANGHA-176 docs: refresh action and scanner version examples by @zglicz in #280
Update dependency rollup to v4.64.7 by @renovate[bot] in #282
[CONTENT-3798] README update for marketing by @tom-howlett-sonarsource in #274
Update dependency rollup to v4.64.9 by @renovate[bot] in #283
Update dependency rollup to v4.64.12 by @renovate[bot] in #288
Update dependency rollup to v4.65.0 by @renovate[bot] in #291
SQSCANGHA-185 NO-JIRA Bump madhead/semver-utils from 5.0.0 to 5.1.1 by @dependabot[bot] in #290
Update SonarScanner CLI to 8.3.0.16463 by @github-actions[bot] in #293

New Contributors

@zglicz made their first contribution in #280
@tom-howlett-sonarsource made their first contribution in #274

Full Changelog: SonarSource/sonarqube-scan-action@v8.3.0...v8.4.0

`v8.3.0`

Compare Source

What's Changed

Fix GPG key retrieval through HTTPS proxies by @Torbjorn-Svensson in #265
Configure Renovate by @renovate[bot] in #267
SQSCANGHA-168 Update actions/cache action to v5.1.0 by @renovate[bot] in #269
Update npm dependencies by @renovate[bot] in #268
Update dependency @actions/exec to v3 by @renovate[bot] in #270
Update GitHub Actions dependencies (major) by @renovate[bot] in #271

New Contributors

@Torbjorn-Svensson made their first contribution in #265
@renovate[bot] made their first contribution in #267

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0

`v8.2.2`

Compare Source

What's Changed

SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 by @dependabot[bot] in #261

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.1...v8.2.2

`v8.2.1`

Compare Source

What's Changed

Bug fix

SQSCANGHA-156 GPG signature verification fails when temporary directory path is too long

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.0...v8.2.1

actions/checkout

`v7.0.1`

Compare Source

Skip running unsafe pr check if input is default by @aiqiaoy in #2518
Trim only ascii whitespace for branch by @aiqiaoy in #2521
Escape values passed to --unset by @aiqiaoy in #2530
Various dependency updates

actions/create-github-app-token

`v3.3.0`

Compare Source

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

actions/upload-artifact

`v7.0.2`

Compare Source

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in #821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

anthropics/claude-code-action

What's Changed

docs: use claude-plugins-official in plugin examples by @mhegazy in #1932

Full Changelog: anthropics/claude-code-action@v1.0.263...v1.0.264

`v1.0.263`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.262...v1.0.263

`v1.0.262`

Compare Source

What's Changed

chore: bump Bun to 1.4.4 by @dylan-conway in #1916

New Contributors

@dylan-conway made their first contribution in #1916

Full Changelog: anthropics/claude-code-action@v1.0.261...v1.0.262

`v1.0.261`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.260...v1.0.261

`v1.0.260`

Compare Source

What's Changed

Pin the PR version a run checks out by @OctavianGuzu in #1915

Full Changelog: anthropics/claude-code-action@v1.0.259...v1.0.260

`v1.0.259`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.258...v1.0.259

`v1.0.258`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.257...v1.0.258

`v1.0.257`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.256...v1.0.257

`v1.0.256`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.255...v1.0.256

`v1.0.255`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.254...v1.0.255

`v1.0.254`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.253...v1.0.254

`v1.0.253`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.252...v1.0.253

`v1.0.252`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.251...v1.0.252

`v1.0.251`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.250...v1.0.251

`v1.0.250`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.249...v1.0.250

`v1.0.249`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.248...v1.0.249

`v1.0.248`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.247...v1.0.248

`v1.0.247`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.246...v1.0.247

`v1.0.246`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.245...v1.0.246

`v1.0.245`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.244...v1.0.245

`v1.0.244`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.243...v1.0.244

`v1.0.243`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.242...v1.0.243

`v1.0.242`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.241...v1.0.242

`v1.0.241`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.240...v1.0.241

`v1.0.240`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.239...v1.0.240

`v1.0.239`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.238...v1.0.239

`v1.0.238`

Compare Source

What's Changed

ci: security hardening for GitHub Actions workflows that call Claude by @qing-ant in #1867

New Contributors

@qing-ant made their first contribution in #1867

Full Changelog: anthropics/claude-code-action@v1.0.237...v1.0.238

`v1.0.237`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.236...v1.0.237

`v1.0.236`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.235...v1.0.236

`v1.0.235`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.234...v1.0.235

`v1.0.234`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.233...v1.0.234

`v1.0.233`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.232...v1.0.233

`v1.0.232`

Compare Source

What's Changed

ci: pin the integration tests to claude-opus-5 by @mhegazy in #1853

New Contributors

@mhegazy made their first contribution in #1853

Full Changelog: anthropics/claude-code-action@v1.0.231...v1.0.232

`v1.0.231`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.230...v1.0.231

`v1.0.230`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.229...v1.0.230

`v1.0.229`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.228...v1.0.229

`v1.0.228`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.227...v1.0.228

`v1.0.227`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.226...v1.0.227

`v1.0.226`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.225...v1.0.226

`v1.0.225`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.224...v1.0.225

`v1.0.224`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.223...v1.0.224

`v1.0.223`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.222...v1.0.223

`v1.0.222`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.221...v1.0.222

`v1.0.221`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.220...v1.0.221

`v1.0.220`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.219...v1.0.220

`v1.0.219`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.218...v1.0.219

`v1.0.218`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.217...v1.0.218

`v1.0.217`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.216...v1.0.217

`v1.0.216`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.215...v1.0.216

`v1.0.215`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.214...v1.0.215

`v1.0.214`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.213...v1.0.214

`v1.0.213`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.212...v1.0.213

`v1.0.212`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.211...v1.0.212

`v1.0.211`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.210...v1.0.211

`v1.0.210`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.209...v1.0.210

`v1.0.209`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.208...v1.0.209

`v1.0.208`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.207...v1.0.208

`v1.0.207`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.206...v1.0.207

`v1.0.206`

Compare Source

What's Changed

chore: add .gitattributes to normalize line endings by @MohammedAlkindi in #1708
fix: use paths in delete_files prompt example by @WeAreResilience in #1702
fix: allow parentheses in valid branch names by @YauheniPo in #1710
fix: bound download_job_log against a stalled log fetch by @shoemoney in #1719
fix: encode branch names in GitHub links by @Abdullah-Builds in #1713

New Contributors

@MohammedAlkindi made their first contribution in #1708
@YauheniPo made their first contribution in #1710
@Abdullah-Builds made their first contribution in #1713

Full Changelog: anthropics/claude-code-action@v1.0.205...v1.0.206

`v1.0.205`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.203...v1.0.205

`v1.0.204`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.202...v1.0.204

`v1.0.203`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.202...v1.0.203

`v1.0.202`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.201...v1.0.202

`v1.0.201`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.200...v1.0.201

`v1.0.200`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.199...v1.0.200

`v1.0.199`

Compare Source

What's Changed

fix(github): honor GITHUB_GRAPHQL_URL for the GraphQL client by @rover0811 in #1575
fix(cleanup): keep the base-branch config revert out of the auto-commit by @GautamSharma99 in #1677
fix(mcp): recognize mcp__github aggregate selector for GitHub MCP server initialization by @anishesg in #1657
Document 1M gateway models and surface resolved limits by @ulofiai in #1608
fix: teach claude_args --allowedTools in the signed prompt by @WeAreResilience in #1704

New Contributors

@rover0811 made their first contribution in #1575
@GautamSharma99 made their first contribution in #1677
@WeAreResilience made their first contribution in #1704

Full Changelog: anthropics/claude-code-action@v1.0.198...v1.0.199

`v1.0.198`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.197...v1.0.198

`v1.0.197`

Compare Source

What's Changed

fix: neutralize the checkout credential under actions/checkout v6+ include layout (#1510) by @TemRevil in #1526

New Contributors

@TemRevil made their first contribution in #1526

Full Changelog: anthropics/claude-code-action@v1.0.196...v1.0.197

`v1.0.196`

Compare Source

What's Changed

fix(security): unify secret redaction in public comment outputs by @Juwan-Hwang in #1693
fix: strip unused ALL_INPUTS environment variable from Claude subprocess env by @Juwan-Hwang in #1692
fix(github): match bot actors in comment filters using GraphQL __typename by @Neal006 in #1616

New Contributors

@Juwan-Hwang made their first contribution in #1693

Full Changelog: anthropics/claude-code-action@v1.0.195...v1.0.196

`v1.0.195`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.194...v1.0.195

`v1.0.194`

Compare Source

What's Changed

Harden delete_files MCP tool: validate paths within repo root (consistency with commit_files) by @GabrielOnRails in #1636
Only limit fetch depth when the checkout is already shallow by @winklemad in #1647
fix(base-action): add ~/.local/bin to $GITHUB_PATH after auto-install by @anishesg in #1643
feat(context): include diffHunk in PR review comment context by @rishavnaskar in #1584
ci: skip Claude-backed test jobs on fork PRs by @ashwin-ant in #1655
fix: bump shell-quote to 1.8.4 to remediate CVE-2026-9277 by @doshidhaval in #1557
fix(images): bound attachment downloads by @abhinavkr26104 in #1625

New Contributors

@GabrielOnRails made their first contribution in #1636
@winklemad made their first contribution in #1647
@doshidhaval made their first contribution in #1557

Full Changelog: anthropics/claude-code-action@v1.0.193...v1.0.194

`v1.0.193`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.192...v1.0.193

`v1.0.192`

Compare Source

What's Changed

fix(mcp): paginate GitHub Actions results by @abhinavkr26104 in #1629
fix(summary): keep every text block in structured tool results by @Neal006 in #1619
fix(mcp): detect binary files by content instead of extension allowlist by @henriquepe in #1633

New Contributors

@abhinavkr26104 made their first contribution in #1629
@Neal006 made their first contribution in #1619
@henriquepe made their first contribution in #1633

Full Changelog: anthropics/claude-code-action@v1.0.191...v1.0.192

`v1.0.191`

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.190...v1.0.191

`v1.0.190`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.190

`v1.0.189`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.189

`v1.0.188`

Compare Source

What's Changed

Enforce max-turn limits from claude_args by @ulofiai in #1607
fix: handle null files field from GraphQL on very large PRs by @leepokai in #1593
fix: support labeled action for pull_request events in track_progress by @takakisatojp in #1586
fix: match label_trigger case-insensitively by @sahilempire in #1576
docs: fix broken Bedrock anchor in cloud-providers.md by @shoemoney in #1579
docs: replace removed base-action inputs with claude_args and settings by @fallintoplace in #1550
fix(cache): disable setup-bun cache to avoid 5-retry HTML-error burn by @necofuryai in #1580
ci: pass base-action tool restrictions through claude_args by @fallintoplace in #1552
fix(mcp): stop retrying deterministic reference update failures by @fallintoplace in #1551
fix: expose conclusion as a root action output by @fallintoplace in #1549
fix(branch): validate generated branch name under commit signing by @rishavnaskar in #1582
fix(branch): collapse empty path segments in branch_name_template by @NickNojiri in #1539

New Contributors

@ulofiai made their first contribution in #1607
@leepokai made their first contribution in #1593
@takakisatojp made their first contribution in #1586
@sahilempire made their first contribution in #1576
@shoemoney made their first contribution in #1579
@fallintoplace made their first contribution in #1550
@necofuryai made their first contribution in #1580
@rishavnaskar made their first contribution in #1582

Full Changelog: anthropics/claude-code-action@v1...v1.0.188

`v1.0.187`

Compare Source

What's Changed

Redact common credential patterns from published run output by @ashwin-ant in #1595
Scope the config snapshot to fil

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2026-11-06T20:54:45Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

sonarqubecloud · 2026-11-06T20:55:18Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

chore(deps): update github actions

012cbcb

renovate Bot requested a review from a team as a code owner November 6, 2026 20:53

renovate Bot enabled auto-merge (squash) November 6, 2026 20:53

renovate Bot merged commit d896b5f into main Nov 7, 2026
14 checks passed

renovate Bot deleted the renovate/github-actions branch November 7, 2026 01:31

Navigation Menu

Repository navigation

chore(deps): update github actions - #149

chore(deps): update github actions#149
renovate[bot] merged 1 commit into
mainfrom
renovate/github-actions

renovate Bot commented Nov 6, 2026

Uh oh!

codecov Bot commented Nov 6, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Nov 6, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 6, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

Bug fix

Features

Bug Fixes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

codecov Bot commented Nov 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

sonarqubecloud Bot commented Nov 6, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

codecov Bot commented Nov 6, 2026 •

edited

Loading