[robot-rosey]

This PR contains the following updates:

Package	Type	Update	Change
anthropics/claude-code-action	action	patch	v1.0.275 → v1.0.276

---

Release Notes

anthropics/claude-code-action

v1.0.276

Compare Source

Full Changelog: anthropics/claude-code-action@v1.0.275...v1.0.276

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[clanker-claude]

anthropics/claude-code-action: v1.0.275 → v1.0.276

Verdict: Safe to merge

The action's own code is unchanged in this release. The tag contains a single commit that only bumps two pinned versions it bundles: the Claude Code CLI (2.1.323 → 2.1.325) and @anthropic-ai/claude-agent-sdk (0.3.323 → 0.3.325). No action inputs, outputs, or defaults changed, so .github/workflows/renovate-review.yaml needs no edits.

The inner releases were reviewed separately (Claude Code 2.1.325; Agent SDK 0.3.324 is a parity-only release and 0.3.325 carries the SDK-side API changes). Both were mapped against how this repository actually uses the action.

Breaking changes: None affecting this repository.
Deprecations: None affecting this repository.

New features worth adopting:

• Sessions on third-party gateways no longer fail with a context-length error on every turn instead of compacting — Claude Code 2.1.325. Directly relevant: the review job and the chezmoi-managed local Claude Code config both talk to a gateway rather than the Anthropic API directly, so this is the most relevant fix in the range for this repo.
• Security fix for how zstd-compressed responses are decoded — Claude Code 2.1.325. The CI job inherits it with this bump. The locally installed CLI is still pinned at 2.1.323 in home/dot_config/mise/private_config.toml and talks to the same gateway; PR #444 already bumps it to 2.1.325. Merging both keeps the local CLI and the bundled one on the same version.
• Worth knowing (behavior tightening, not a blocker): Bash permission checks no longer let some compound commands run without asking. This workflow grants a narrow explicit allow list and the action registers no interactive permission callback, so a chained command that includes a non-allow-listed step would be refused instead of run. The final gh pr review call is a single command and stays inside the allow list.

Checked — not applicable to this repo:

• Bash sandbox changes (sandbox.autoAllowBashIfSandboxed now required for auto-approval; the sandbox refusing writes to .claude settings): this repo never sets sandbox.enabled, so the sandbox stays off. The workflow's explicit --allowedTools rules would keep working either way.
• "Read-only git commands ask first in a repository that isn't the project's or a trusted one": git log runs inside the checked-out project directory, so it stays on the working-directory path.
• "Self-hosted runners refuse a session whose session folder or repository path is a symbolic link": this entry covers the claude self-hosted-runner product mode (Claude Code cloud sessions on self-hosted infrastructure), not the CLI running inside a GitHub Actions self-hosted runner such as the one this workflow uses. For completeness, the runner's checkout path and session directory both resolve to themselves on the current runner, so neither is a symlink.
• Agent SDK applyFlagSettings() now rejects values that would discard a settings layer: the action writes the settings input to ~/.claude/settings.json (a settings-file layer) and passes the model as a direct SDK option, so the flag-settings path is not used here.
• CLAUDE_CODE_MAX_CONTEXT_TOKENS now also applies to unrecognized claude-* model IDs: the variable is not set, and the workflow uses a gateway-served model id.
• pluginDigests is deprecated and ignored: it only applies to managed settings that declare plugins via prependPlugins/appendPlugins; this repo declares no Claude Code plugins or marketplaces.
• The worktree/submodule trust rule for .claude/settings.local.json, the plugin bundle unpack location, marketplace ref handling, and the VS Code / Desktop / cloud / Remote Control entries do not apply to this repo's usage.

Sources consulted:

• Action v1.0.275…v1.0.276 diff
• Action v1.0.276 release notes
• Claude Code CHANGELOG (2.1.325)
• Claude Agent SDK CHANGELOG (0.3.324, 0.3.325)
• Claude Code: customize sessions in self-hosted environments