From f15d2e4f0277b35059411fa8d37b76e2c1941da0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 11:41:40 +0000 Subject: [PATCH 1/2] chore(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action), [openai/codex-action](https://github.com/openai/codex-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [actions/ai-inference](https://github.com/actions/ai-inference). Updates `anthropics/claude-code-action` from 1.0.193 to 1.0.199 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/9d7150bc8a3dae8149739a88019d192b579ad90c...dcb57747bfceeaa1fa72638cae52295d1d853d4a) Updates `openai/codex-action` from 1.11 to 1.12 - [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/openai/codex-action/compare/52fe01ec70a42f454c9d2ebd47598f9fd6893d56...86365089eb2b84e0a8fb0717b304f8bdcb13b20e) Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e) Updates `actions/ai-inference` from 2.1.1 to 3 - [Release notes](https://github.com/actions/ai-inference/releases) - [Commits](https://github.com/actions/ai-inference/compare/a7805884c80886efc241e94a5351df715968a0ad...2c43c91ae16266ca159d311430343c67a5ffa222) --- updated-dependencies: - dependency-name: actions/ai-inference dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.199 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: openai/codex-action dependency-version: '1.12' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/claude.yml | 2 +- .github/workflows/codex-run-pr-operator.yml | 2 +- .github/workflows/docker-image.yml | 2 +- .github/workflows/summary.yml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 2e81f269a6..79e32aa769 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -64,7 +64,7 @@ jobs: fetch-depth: 1 - name: Run Claude Code if: ${{ env.CLAUDE_CODE_OAUTH_TOKEN != '' }} - uses: anthropics/claude-code-action@9d7150bc8a3dae8149739a88019d192b579ad90c # v1.0.193 + uses: anthropics/claude-code-action@dcb57747bfceeaa1fa72638cae52295d1d853d4a # v1.0.199 with: # The action's default trigger phrase is "@claude"; it reads the # triggering comment/review and acts on the current PR head. diff --git a/.github/workflows/codex-run-pr-operator.yml b/.github/workflows/codex-run-pr-operator.yml index 117a891a97..7e01787e5b 100644 --- a/.github/workflows/codex-run-pr-operator.yml +++ b/.github/workflows/codex-run-pr-operator.yml @@ -492,7 +492,7 @@ jobs: - name: Run official Codex repair action id: codex - uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1 + uses: openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1 with: openai-api-key: ${{ secrets.OPENAI_API_KEY }} prompt-file: ${{ runner.temp }}/codex-run-pr-trusted/prompt.md diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 611bc543f0..5be6d1d10a 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -40,7 +40,7 @@ jobs: persist-credentials: false - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 - name: Build app image (load, no push) uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7 diff --git a/.github/workflows/summary.yml b/.github/workflows/summary.yml index b7d910c0a4..2b473e0cc6 100644 --- a/.github/workflows/summary.yml +++ b/.github/workflows/summary.yml @@ -39,7 +39,7 @@ jobs: - name: Run AI inference id: inference - uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # v2 + uses: actions/ai-inference@2c43c91ae16266ca159d311430343c67a5ffa222 # v3 with: prompt: | You are summarizing a GitHub issue. From b41957ce29f79c6d8881607b00233e2c035f5fa6 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 24 Aug 2026 14:40:20 +0000 Subject: [PATCH 2/2] fix(ci): update reviewed action pins and test for Dependabot bump PR #2325 bumped anthropics/claude-code-action, openai/codex-action, docker/setup-buildx-action, and actions/ai-inference to new pinned commit SHAs. Add the reviewed-pin allowlist entries (with release-note summaries, matching the existing convention) so check:github-actions passes, and update the hardcoded expected SHA in tests/codex-run-pr-operator-workflow.test.ts to match the new openai/codex-action pin. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01C4RHy24AtgPobEQQwrj7u1 --- scripts/github-action-pins.mjs | 55 ++++++++++++++++++-- tests/codex-run-pr-operator-workflow.test.ts | 2 +- 2 files changed, 53 insertions(+), 4 deletions(-) diff --git a/scripts/github-action-pins.mjs b/scripts/github-action-pins.mjs index 924cebf89c..6381777992 100644 --- a/scripts/github-action-pins.mjs +++ b/scripts/github-action-pins.mjs @@ -34,13 +34,38 @@ const reviewedActionPins = new Map([ // and setup-bun cache tuning — no change to permissions, secrets // handling, or the action's trust boundary. ["9d7150bc8a3dae8149739a88019d192b579ad90c", "v1.0.193"], + // Reviewed 2026-08-24 for PR #2325 (Dependabot github-actions group): + // annotated tag v1.0.199 peels to this commit. Release notes for + // v1.0.194-v1.0.199 cover GraphQL client URL handling, keeping a + // base-branch config revert out of the auto-commit, MCP GitHub + // aggregate-selector recognition, delete_files path hardening, + // shallow-checkout fetch-depth limiting, base-action PATH fix, + // --allowedTools signed-prompt handling, secret-redaction unification, + // ALL_INPUTS env stripping, and a shell-quote CVE bump — no change to + // permissions, secrets handling, or the action's trust boundary. + ["dcb57747bfceeaa1fa72638cae52295d1d853d4a", "v1.0.199"], ]), ], // Reviewed 2026-08-13 for the credential-isolated Run PR operator: annotated // tag v1 peels to this commit. The action keeps OPENAI_API_KEY behind its // local proxy and runs the repair as an unprivileged user; GitHub mutation // credentials remain confined to later clean jobs. - ["openai/codex-action", new Map([["52fe01ec70a42f454c9d2ebd47598f9fd6893d56", "v1"]])], + [ + "openai/codex-action", + new Map([ + ["52fe01ec70a42f454c9d2ebd47598f9fd6893d56", "v1"], + // Reviewed 2026-08-24 for PR #2325 (Dependabot github-actions group): + // annotated tag v1 now peels to this commit (v1.12). Changelog for + // v1.11-v1.12 covers Linux runner privilege isolation and Responses + // API proxy credential handling, rejecting Codex arguments/config + // overrides that conflict with protected execution settings, + // requiring unprivileged user namespaces for drop-sudo, and + // documentation of runner/permission-profile requirements — hardening + // in the same direction this repo already relies on, no relaxation of + // the credential-isolation contract. + ["86365089eb2b84e0a8fb0717b304f8bdcb13b20e", "v1"], + ]), + ], ["actions/cache", new Map([["55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "v6"]])], ["actions/cache/restore", new Map([["55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "v6"]])], ["actions/cache/save", new Map([["55cc8345863c7cc4c66a329aec7e433d2d1c52a9", "v6"]])], @@ -49,9 +74,33 @@ const reviewedActionPins = new Map([ ["denoland/setup-deno", new Map([["22d081ff2d3a40755e97629de92e3bcbfa7cf2ed", "v2.0.5"]])], ["supabase/setup-cli", new Map([["46f7f98c7f948ad727d22c1e67fab04c223a0520", "v3"]])], ["gitleaks/gitleaks-action", new Map([["e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e", "v3"]])], - ["actions/ai-inference", new Map([["a7805884c80886efc241e94a5351df715968a0ad", "v2"]])], + [ + "actions/ai-inference", + new Map([ + ["a7805884c80886efc241e94a5351df715968a0ad", "v2"], + // Reviewed 2026-08-24 for PR #2325 (Dependabot github-actions group): + // annotated tag v3 peels to this commit. v3 removes github-models + // support and makes Copilot the only inference provider, plus routine + // dependency bumps (js-yaml, hono, vite, rollup plugin, tmp, + // actions/setup-node, actions/upload-artifact) — no change to the + // action's own permissions or secrets handling; this workflow already + // only used the Copilot-backed default provider. + ["2c43c91ae16266ca159d311430343c67a5ffa222", "v3"], + ]), + ], ["peter-evans/create-or-update-comment", new Map([["e8674b075228eee787fea43ef493e45ece1004c9", "v5"]])], - ["docker/setup-buildx-action", new Map([["bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", "v4"]])], + [ + "docker/setup-buildx-action", + new Map([ + ["bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", "v4"], + // Reviewed 2026-08-24 for PR #2325 (Dependabot github-actions group): + // annotated tag v4.3.0 peels to this commit. Release notes cover only + // internal dependency bumps (@docker/actions-toolkit, brace-expansion, + // js-yaml, postcss, undici) — no change to the action's own + // permissions or secrets handling. + ["37fe631027851001ddb9b187196cc803df7f5f0e", "v4"], + ]), + ], ["docker/build-push-action", new Map([["53b7df96c91f9c12dcc8a07bcb9ccacbed38856a", "v7"]])], // Reviewed 2026-07-31: official autofix.ci action; tag v1.3.4 / moving v1 both // resolve to this immutable commit (node24 runtime). Used only after local diff --git a/tests/codex-run-pr-operator-workflow.test.ts b/tests/codex-run-pr-operator-workflow.test.ts index 9123c7b65f..dfe1047fcd 100644 --- a/tests/codex-run-pr-operator-workflow.test.ts +++ b/tests/codex-run-pr-operator-workflow.test.ts @@ -220,7 +220,7 @@ describe("Codex Run PR operator workflow", () => { }); it("keeps GitHub credentials out of the unprivileged Codex repair job", () => { - expect(repair).toContain("openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1"); + expect(repair).toContain("openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1"); expect(repair).toContain("safety-strategy: unprivileged-user"); expect(repair).toContain("persist-credentials: false"); expect(repair).toContain("npm ci --ignore-scripts");