chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action (changelog)	action	digest	5fb8995 → 38ec876
loft-sh/github-actions (changelog)	action	digest	4207288 → 53686d2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Claude finished @renovate[bot]'s task in 38s —— View job

---

PR Review: chore(deps): update github-actions

• Gather context
• Review changed files
• Post findings

---

No issues found. This PR makes four digest-pin bumps across workflow files:

• anthropics/claude-code-action: 5fb8995 → 905d4eb (3 files)
• loft-sh/github-actions validate-renovate workflow: 4207288 → 53686d2 (1 file)

All actions remain pinned to full commit SHAs, which is the correct security posture for supply chain protection. No logic changes, no configuration changes — safe to merge.

[github-actions]

Claude finished @renovate[bot]'s task in 19s —— View job

---

No issues found. This PR is a routine digest-pin bump:

• anthropics/claude-code-action: 5fb8995 → 905d4eb (3 workflow files)
• loft-sh/github-actions reusable workflow: 4207288 → 53686d2 (1 workflow file)

All references remain pinned to full commit SHAs — correct security posture. No logic, configuration, or permission changes.

[github-actions]

Claude finished @renovate[bot]'s task in 20s —— View job

---

No issues found. Routine digest-pin bumps — all references remain pinned to full commit SHAs. Safe to merge.

[github-actions]

Claude finished @renovate[bot]'s task in 16s —— View job

---

No issues found. Routine digest-pin bumps — all references remain pinned to full commit SHAs. Safe to merge.

[github-actions]

Claude finished @renovate[bot]'s task in 24s —— View job

---

Smoke Test: chore(deps): update github-actions

• Gather context
• Review changed files
• Verify digest updates
• Post findings

---

Findings: ✅ No issues found.

This PR updates action digests in 5 files:

• anthropics/claude-code-action → c3d45e8e941e1b2ad7b278c57482d9c5bf1f35b3 (4 files: ai-pr-review/action.yml, claude-code-review.yaml, claude.yaml, claude.yml)
• loft-sh/github-actions → 53686d2452bc48398252887a37ad248c38a7f1eb (1 file: ci.yaml)

All references remain pinned to full commit SHAs — correct security posture. No logic, configuration, or permission changes.

[github-actions]

Claude finished @renovate[bot]'s task in 18s —— View job

---

No issues found. Routine digest-pin bumps — all references remain pinned to full commit SHAs. Safe to merge.

[github-actions]

Claude finished @renovate[bot]'s task in 15s —— View job

---

No issues found. Routine digest-pin bumps — all references remain pinned to full commit SHAs. Safe to merge.

[github-actions]

Claude finished @renovate[bot]'s task in 20s —— View job

---

Smoke Test: chore(deps): update github-actions

• Gather context
• Review changed files
• Verify digest updates
• Post findings

---

Findings: ✅ No issues found.

This PR updates action digests in 5 files:

• anthropics/claude-code-action → 0d2971c (4 files: ai-pr-review/action.yml, claude-code-review.yaml, claude.yaml, claude.yml)
• loft-sh/github-actions → 53686d2 (1 file: ci.yaml)

All references remain pinned to full commit SHAs — correct security posture. No logic, configuration, or permission changes.

---

[github-actions]

Claude finished @renovate[bot]'s task in 19s —— View job

---

Smoke Test: chore(deps): update github-actions

• Gather context
• Review changed files
• Verify digest updates
• Post findings

---

Findings: ✅ No issues found.

This PR updates action digests in 5 files:

• anthropics/claude-code-action → 38ec876 (4 files: ai-pr-review/action.yml, claude-code-review.yaml, claude.yaml, claude.yml)
• loft-sh/github-actions → 53686d2 (1 file: ci.yaml)

All references remain pinned to full commit SHAs — correct security posture. No logic, configuration, or permission changes.

---

[github-actions]

Claude finished @renovate[bot]'s task in 19s —— View job

---

No issues found. Routine digest-pin bumps — all references remain pinned to full commit SHAs. Safe to merge.