build(deps): bump anthropics/claude-code-action from 1.0.193 to 1.0.202

[dependabot]

Bumps anthropics/claude-code-action from 1.0.193 to 1.0.202.

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.202

Full Changelog: anthropics/claude-code-action@v1.0.201...v1.0.202

v1.0.201

Full Changelog: anthropics/claude-code-action@v1.0.200...v1.0.201

v1.0.200

Full Changelog: anthropics/claude-code-action@v1.0.199...v1.0.200

v1.0.199

What's Changed

• fix(github): honor GITHUB_GRAPHQL_URL for the GraphQL client by @​rover0811 in anthropics/claude-code-action#1575
• fix(cleanup): keep the base-branch config revert out of the auto-commit by @​GautamSharma99 in anthropics/claude-code-action#1677
• fix(mcp): recognize mcp__github aggregate selector for GitHub MCP server initialization by @​anishesg in anthropics/claude-code-action#1657
• Document 1M gateway models and surface resolved limits by @​ulofiai in anthropics/claude-code-action#1608
• fix: teach claude_args --allowedTools in the signed prompt by @​WeAreResilience in anthropics/claude-code-action#1704

New Contributors

• @​rover0811 made their first contribution in anthropics/claude-code-action#1575
• @​GautamSharma99 made their first contribution in anthropics/claude-code-action#1677
• @​WeAreResilience made their first contribution in anthropics/claude-code-action#1704

Full Changelog: anthropics/claude-code-action@v1.0.198...v1.0.199

v1.0.198

Full Changelog: anthropics/claude-code-action@v1.0.197...v1.0.198

v1.0.197

What's Changed

• fix: neutralize the checkout credential under actions/checkout v6+ include layout (#1510) by @​TemRevil in anthropics/claude-code-action#1526

New Contributors

• @​TemRevil made their first contribution in anthropics/claude-code-action#1526

Full Changelog: anthropics/claude-code-action@v1.0.196...v1.0.197

v1.0.196

What's Changed

• fix(security): unify secret redaction in public comment outputs by @​Juwan-Hwang in anthropics/claude-code-action#1693
• fix: strip unused ALL_INPUTS environment variable from Claude subprocess env by @​Juwan-Hwang in anthropics/claude-code-action#1692
• fix(github): match bot actors in comment filters using GraphQL __typename by @​Neal006 in anthropics/claude-code-action#1616

New Contributors

• @​Juwan-Hwang made their first contribution in anthropics/claude-code-action#1693

Full Changelog: anthropics/claude-code-action@v1.0.195...v1.0.196

v1.0.195

Full Changelog: anthropics/claude-code-action@v1.0.194...v1.0.195

... (truncated)

Commits

• e5ad3c7 chore: bump Claude Code to 2.1.243 and Agent SDK to 0.3.243
• c81e3bc chore: bump Claude Code to 2.1.241 and Agent SDK to 0.3.241
• 24dcd50 chore: bump Claude Code to 2.1.240 and Agent SDK to 0.3.240
• dcb5774 chore: bump Claude Code to 2.1.239 and Agent SDK to 0.3.239
• 492d2d7 fix: teach claude_args --allowedTools in the signed prompt (#1704)
• 2ca5fb4 fix: surface resolved model limits (#1608)
• f3f2789 fix(mcp): recognize mcp__github aggregate selector for GitHub MCP server init...
• 6a5f1d8 fix(cleanup): keep the base-branch config revert out of the auto-commit (#1677)
• 39ad3c8 fix(github): honor GITHUB_GRAPHQL_URL for the GraphQL client (#1575)
• 3f854a8 chore: bump Claude Code to 2.1.238 and Agent SDK to 0.3.238
• Additional commits viewable in compare view

[jth-nw]

@dependabot rebase

[github-actions]

Code Review

No correctness issues found. This is a clean Dependabot pin bump of anthropics/claude-code-action — no products.js, docusaurus.config.js, sidebar, or KB-script changes, so build and routing are untouched.

Verified

SHA is genuine and correct. The new pin e5ad3c7725bc2459721893f88879fef9dbcf97b0 dereferences exactly from the upstream annotated tag v1.0.202 in anthropics/claude-code-action (commit: chore: bump Claude Code to 2.1.243 and Agent SDK to 0.3.243, 2026-08-24). The action stays SHA-pinned rather than tag-pinned, so the supply-chain posture is unchanged.

Bump is complete and consistent. All 11 call sites across the 5 workflows were updated to the same SHA, and no reference to the old 9d7150bc… pin remains anywhere in the repo.

No secret or permission changes. Every step keeps its existing anthropic_api_key / github_token / GH_TOKEN wiring and its job-level permissions block. No new secrets are introduced or exposed.

Behavior change worth knowing about (not a defect here)

Upstream #1526 (landed in v1.0.197, so newly picked up by this bump) fixes a bug where the action's attempt to strip the actions/checkout-persisted credential was a silent no-op under the actions/checkout v6+ include.path layout. This repo pins actions/checkout@v7.0.1 everywhere, so it is affected: the checkout token's http.extraheader will now actually be removed before Claude runs, where previously it stayed usable for the rest of the job.

I traced this against every workflow and it is safe as configured:

• vale-autofix.yml — the only post-action git network operation. The Push all fixes step (line 277) already explicitly re-points origin at VALE_TOKEN before pushing, so the push still authenticates as VALE_TOKEN and continues to trigger downstream workflows as intended. If anything, the existing comment at lines 275–276 is now more reliably true.
• claude-issue-labeler.yml content-fix jobs (lines 213/343) — the branch push happens inside the action, which sets origin to https://x-access-token:<github_token>@…. Both jobs grant contents: write, so GITHUB_TOKEN can push. The follow-up Create PR and comment on issue step uses ISSUE_TOKEN via gh, so PR-open events still fire downstream workflows.
• claude-issue-labeler.yml triage steps (lines 27/58/82) — these set allowed_non_write_users: '*', which routes the action down its credential-helper path, and the job is contents: read with no pushes. No impact.
• claude-code-followup.yml — its git fetch (line 70) runs before the action step, so it still has the checkout credential.
• claude-code-review.yml, claude-doc-pr.yml — no git network operations after the action step.

Other release-note items checked and found not applicable

• #1616 (bot-actor matching) only affects exclude_comments_by_actor / include_comments_by_actor; neither input is used here.
• #1704 (claude_args --allowedTools in the signed prompt) is a prompt-wording fix only — all 11 steps pass --allowedTools via claude_args, which remains the supported surface.
• #1575 (GITHUB_GRAPHQL_URL) is GHES-only; not used here.
• #1693 (unified secret redaction in public comment output) is a strict security improvement for the workflows that post comments.

Minor note: the branch is named …-1.0.199 while the PR delivers 1.0.202 — a normal Dependabot rebase artifact, no action needed.