Repository navigation
Update github actions - #7139
Merged
Merged
Conversation
renovate
Bot
requested review from
JAORMX,
jerm-dro,
jhrozek and
rdimitrov
as code owners
November 14, 2026 00:52
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #7139 +/- ##
=======================================
Coverage 81.24% 81.25%
=======================================
Files 877 879 +2
Lines 89907 89947 +40
=======================================
+ Hits 73043 73082 +39
- Misses 16859 16860 +1
Partials 5 5 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
jhrozek
approved these changes
Nov 15, 2026
jhrozek
left a comment
jhrozek
left a comment
Contributor
There was a problem hiding this comment.
Checked the diff: action pins and Helm version bumps only, matching the tags upstream. CI is green. Approving.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.0.269→v1.0.276v5.0.1→v5.1.0v4.3.1→v4.3.2Release Notes
anthropics/claude-code-action
v1.0.276Compare Source
Full Changelog: anthropics/claude-code-action@v1.0.275...v1.0.276
v1.0.275Compare Source
What's Changed
Other changes
Full Changelog: anthropics/claude-code-action@v1.0.274...v1.0.275
v1.0.274Compare Source
What's Changed
Other changes
Full Changelog: anthropics/claude-code-action@v1.0.273...v1.0.274
v1.0.273: (breaking changes)Compare Source
What's Changed
Other changes
Full Changelog: anthropics/claude-code-action@v1.0.272...v1.0.273
This release tightens what a Claude session can do, especially on content from people without write access. Workflows on
@v1get these changes automatically. Most keep working as they are, but check the items below if yours runs tests on outside pull requests, uses later steps after the action, or relies on--allowedToolsas a strict list.Sessions start in auto mode
A safety review now decides tool calls that no allow rule covers. Calls that used to be denied can run if the review passes, so
--allowedToolsis no longer a strict list. Workflows with apromptcan also edit workspace files without an allow rule.Opt out: set the earlier mode in
claude_args:--permission-mode acceptEditsfor@claudementions, or--permission-mode defaultfor workflows with aprompt.Sessions keep the earlier defaults if you set
allowed_non_write_users,allowed_bots, a customANTHROPIC_BASE_URLorpath_to_claude_code_executable. The same applies if yoursettingsinput is a file path, or sets a base URL or another permission mode.Code-running commands are denied on outside pull requests
If a pull request's author doesn't have write access, common commands such as
npm testandbun installare denied, even ifclaude_argsallows them. The run still succeeds, so check the log for a warning.Opt out:
restrict_untrusted_prs: false. This lets code from that pull request run in a job that holds your workflow's tokens.Only trusted text and runs start a session
promptandtrack_progress,label_triggerandassignee_triggernow apply.workflow_runalso checks the owner of the fork the run came from.Adjust:
label_triggerto your label, or to""to accept any label.workflow_runon outside contributions, add those users toallowed_non_write_usersand passgithub_token.There's no opt-out for the rest.
A session can't leave anything behind for later steps
GITHUB_ENV,GITHUB_PATHand git config are restored when the session ends, so a session's changes to them no longer reach later steps. Token revocation also ignores~/.curlrc, including a proxy set there.Git hooks are also off from before the checkout on pull requests covered by
restrict_untrusted_prs, so a push Claude makes on one of those won't upload Git LFS objects.Adjust: pass values to later steps with
GITHUB_OUTPUTor--json-schema. There's no opt-out.No token in
.git/configwhenallowed_botsis setThese workflows now use the same credential helper as
allowed_non_write_users, and it only answers for your GitHub server.Adjust: a later step that pushes through
origin, or fetches from it on a private repository, needs its own credentials:GH_TOKEN,GIT_ASKPASS, a credential saved for the usernamex-access-token, or its own remote URL. There's no opt-out.Stricter git commands in
@clauderuns--amend,--no-verify,--authorand flags that read a file.git commitorgit pushmust be inclaude_argsto cover these wrappers. One in a settings file doesn't.Opt out: add your own rule in
claude_args, such asBash(git commit:*)orBash(git push:*). This brings back what the wrappers block for that workflow.Signed commits from
promptruns go to their own branchWith
use_commit_signing, a run on an issue now commits toissue-N. A run on a pull request commits to its branch, or topr-Nif that branch isn't known to be in this repository. They used to reach the default branch or a branch named by a fork.Opt out: set
CLAUDE_BRANCHin the step'senvto choose the branch.v1.0.272Compare Source
What's Changed
Full Changelog: anthropics/claude-code-action@v1.0.271...v1.0.272
v1.0.271Compare Source
Full Changelog: anthropics/claude-code-action@v1.0.270...v1.0.271
v1.0.270Compare Source
What's Changed
New Contributors
Full Changelog: anthropics/claude-code-action@v1.0.269...v1.0.270
azure/setup-helm
v5.1.0Compare Source
Added
Fixed
Security
Changed
helm/helm (helm)
v4.3.2: Helm v4.3.2Compare Source
Helm v4.3.2 is a patch release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
Notable Changes
Installation and Upgrading
Download Helm v4.3.2. The common platform binaries are here:
This release was signed with
208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155and can be found at @scottrigby keybase account. Please use the attached signatures for verifying this release usinggpg.The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with
bash.What's Next
Changelog
8346aaa(Sean Schneeweiss)8c92fca(dependabot[bot])214f6f6(Sean Schneeweiss)90d48fc(dependabot[bot])961bddf(ump45nose)ddb8be7(Zain Qureshi)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.