Skip to content

chore(deps): bump the github-actions group with 4 updates#203

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-bd087f7001
Open

chore(deps): bump the github-actions group with 4 updates#203
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-bd087f7001

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates: actions/checkout, actions/setup-node, anthropics/claude-code-action and shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml.

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Commits

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.163 to 1.0.176

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.176

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.176

v1.0.175

Full Changelog: anthropics/claude-code-action@v1...v1.0.175

v1.0.174

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.174

v1.0.173

Full Changelog: anthropics/claude-code-action@v1...v1.0.173

v1.0.172

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.172

v1.0.171

Full Changelog: anthropics/claude-code-action@v1...v1.0.171

v1.0.170

Full Changelog: anthropics/claude-code-action@v1...v1.0.170

... (truncated)

Commits
  • 700e7f8 chore: bump Claude Code to 2.1.212 and Agent SDK to 0.3.212
  • 3e807ec fix: handle null comment/review author from deleted accounts (#1490)
  • 2988cbe docs: map custom_instructions to --append-system-prompt (#1480) (#1484)
  • a1c0599 fix(format): filter out thinking_tokens system messages from step summary (#1...
  • 5bfa96a fix: allow leading underscore in branch names (valid per git-check-ref-format...
  • 214a706 fix: map claude_args model to SDK options (#1474)
  • 5f509a1 fix(sanitizer): strip alt text from reference-style markdown images (#1488)
  • e64308f fix: sanitize {{label}} in branch name templates (#1492)
  • 58dc33d test: cover prepareContext validation error branches (#1460)
  • ae650f8 docs: fix dead example links in custom-automations.md (#1513)
  • Additional commits viewable in compare view

Updates shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml from 613c6c2a251a782328b26d68e7f23daa9b677497 to 4d6a3bd6047057675f70949a9e50c395dd54b353

Changelog

Sourced from shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml's changelog.

Change Log

All notable changes to this project's source code will be documented in this file. Items under Unreleased is upcoming features that will be out in the next version.

This is the unified changelog for both React on Rails (open source) and React on Rails Pro. Pro-specific changes are tagged inline with [Pro]. For pre-monorepo Pro history (versions 4.0.0-rc.15 and earlier), see the archived Pro CHANGELOG.

Migration instructions for the major updates can be found here. Some smaller migration information can be found here.

Want to Save Time Updating?

If you need help upgrading react_on_rails, webpacker to shakapacker, or JS packages, contact justin@shakacode.com. We can upgrade your project and improve your development and customer experiences, allowing you to focus on building new features or fixing bugs instead.

For an overview of working with us, see our Client Engagement Model article and how we bill for time.

If you think ShakaCode can help your project, click here to book a call with Justin Gordon, the creator of React on Rails and Shakapacker.

Contributors

Please follow the recommendations outlined at keepachangelog.com. Please use the existing headings and styling as a guide. After a release, run /update-changelog in Claude Code to analyze commits, write entries, and create a PR. Alternatively, run bundle exec rake update_changelog to add version headers only (you must write entries manually).

Versions

[Unreleased]

Breaking Changes

  • [Pro] Removed the undocumented ReactOnRailsPro::Cache.fetch_react_component class API: Pro apps should use the supported cached helper APIs (cached_react_component, cached_react_component_hash, and related helpers) instead of calling the low-level cache class directly. The helper cache path still preserves generated-pack loading on cache hits, tag registration, and expires_at handling internally. Fixes Issue 4497. PR 4541 by justin808.

Fixed

  • Stopped replacing Shakapacker-owned watch binstubs during installation: React on Rails no longer ships its own bin/shakapacker-watch template. Generated Procfiles use Shakapacker's optional watch binstub when it is present and fall back to bin/shakapacker --watch for older supported Shakapacker installations. Existing Shakapacker-provided or customized watch binstubs remain untouched, including under --force. Fixes Issue 4617. PR 4715 by ihabadham.

  • Server rendering no longer crashes on or corrupts lone UTF-16 surrogates: When the JavaScript renderer emits a string containing a lone surrogate (commonly from truncating text mid-emoji, e.g. an excerpt cut with slice/substring), JSON.stringify serializes it as a \uXXXX escape that Ruby's

... (truncated)

Commits
  • 4d6a3bd Agents: ignore synthetic workflow rows in fleet health (#4760)
  • 723b6e4 Add CacheSection component and section caching infrastructure (experimental) ...
  • 6552f3e Delegate watch binstub ownership to Shakapacker (#4715)
  • bf037be CI: exclude unreliable gem badge from link checks (#4758)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml](https://github.com/shakacode/react_on_rails).


Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v6.0.2...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `anthropics/claude-code-action` from 1.0.163 to 1.0.176
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@v1.0.163...v1.0.176)

Updates `shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml` from 613c6c2a251a782328b26d68e7f23daa9b677497 to 4d6a3bd6047057675f70949a9e50c395dd54b353
- [Release notes](https://github.com/shakacode/react_on_rails/releases)
- [Changelog](https://github.com/shakacode/react_on_rails/blob/main/CHANGELOG.md)
- [Commits](shakacode/react_on_rails@613c6c2...4d6a3bd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.176
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: shakacode/react_on_rails/.github/workflows/demo-fleet-smoke.yml
  dependency-version: 4d6a3bd6047057675f70949a9e50c395dd54b353
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 20, 2026
@github-actions

Copy link
Copy Markdown

🚀 Quick Review App Commands

Welcome! Here are the commands you can use in this PR:
They require the repository to have cpflow review apps configured, including the CPLN_TOKEN_STAGING secret.

+review-app-deploy

Deploy your PR branch for testing.

+review-app-delete

Remove the review app when done.

+review-app-help

Show detailed instructions, environment setup, and configuration options.

Comment +review-app-help for full setup details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants