78:T3fa5,Bumps the github-actions-minor-patch group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `actions/checkout` from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

Full Changelog: https://github.com/actions/checkout/compare/v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

Escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Various dependency updates

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

... (truncated)

Commits

3d3c42e prep v7.0.1 release (#2531)
2880268 escape values passed to --unset (#2530)
12cd223 trim only ascii whitespace for branch (#2521)
62661c4 skip running unsafe pr check if input is default (#2518)
e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
631c942 eslint 9 (#2474)
4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
ba09753 Bump actions/checkout from 6 to 7 (#2488)
b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
Additional commits viewable in compare view

Updates `anthropics/claude-code-action` from 1.0.192 to 1.0.261

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.261

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.260...v1.0.261

v1.0.260

What's Changed

Pin the PR version a run checks out by @OctavianGuzu in anthropics/claude-code-action#1915

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.259...v1.0.260

v1.0.259

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.258...v1.0.259

v1.0.258

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.257...v1.0.258

v1.0.257

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.256...v1.0.257

v1.0.256

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.255...v1.0.256

v1.0.255

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.254...v1.0.255

v1.0.254

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.253...v1.0.254

v1.0.253

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.252...v1.0.253

v1.0.252

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.251...v1.0.252

v1.0.251

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.250...v1.0.251

v1.0.250

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.249...v1.0.250

v1.0.249

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.248...v1.0.249

v1.0.248

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.247...v1.0.248

v1.0.247

Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1.0.246...v1.0.247

v1.0.246

... (truncated)

Commits

16f9f71 chore: bump Claude Code to 2.1.310 and Agent SDK to 0.3.310
8d70a0d Pin the PR version a run checks out (#1915)
ae68417 chore: bump Claude Code to 2.1.309 and Agent SDK to 0.3.309
6b6870e chore: bump Claude Code to 2.1.308 and Agent SDK to 0.3.308
aa8a773 chore: bump Claude Code to 2.1.307 and Agent SDK to 0.3.307
a5a423f chore: bump Claude Code to 2.1.306 and Agent SDK to 0.3.306
e4a6faa chore: bump Claude Code to 2.1.305 and Agent SDK to 0.3.305
db77d4d chore: bump Claude Code to 2.1.304 and Agent SDK to 0.3.304
5eb090f chore: bump Claude Code to 2.1.303 and Agent SDK to 0.3.303
f27be6b chore: bump Claude Code to 2.1.302 and Agent SDK to 0.3.302
Additional commits viewable in compare view

> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. 79:T599,

Confidence Score: 5/5

The PR appears safe to merge because it consistently applies SHA-pinned patch updates without changing workflow configuration or established security controls. No concrete compatibility, authentication, permission, or checkout regression is established by the changes.

Important Files Changed

| Filename | Overview | |----------|----------| | .github/workflows/ci-secure-check.yml | Updates two checkout pins without changing scan behavior or credential handling. | | .github/workflows/ci.yml | Updates checkout pins while retaining full-history and credential-isolation settings. | | .github/workflows/claude.yml | Updates checkout and Claude action pins while preserving the documented permissions and authentication configuration. | | .github/workflows/python-floor.yml | Updates the checkout pin without changing the Python compatibility job. | | .github/workflows/registry-scan.yml | Updates the checkout pin without changing registry scanning behavior. | | .github/workflows/skill-evals.yml | Updates the checkout pin while preserving credential isolation for evaluation jobs. | _{Reviews (1): Last reviewed commit: ["chore(deps): bump the github-actions-min..."](https://github.com/starslingdev/skills/commit/cd8f4401f1c0348373c725937fcab7266d3842ee) | [Re-trigger Greptile](https://app.greptile.com/api/retrigger?id=61844935)}7a:T587,chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates Bumps the github-actions-minor-patch group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `anthropics/claude-code-action` from 1.0.192 to 1.0.261 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/e63208cb983318a44e3f945e959ef894b707dcfa...16f9f71ab9c490faf367f94dd294897edc25be33) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-patch - dependency-name: anthropics/claude-code-action dependency-version: 1.0.216 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-patch ... Signed-off-by: dependabot[bot] 62:["$","$L75",null,{"entries":[{"key":["platform",{"userId":"anon"},"pulls","page",{"owner":"skills","repo":"starslingdev-skills","pullNumber":91}],"data":{"repositoryId":"5370","detail":{"author":{"avatarUrl":"https://cdn.trylle.com/media/images/ee9ce3e41ccd83d0d82b44c3a379d115?key=ATdRna3MzMw8Hlfnq4en2QfWXAbcWt7Gs%2B6LJIK5idPcU0A%2BKMm36g5Tn87RFkNzLx0sTBQTbDz6ZwuI50wQwsUFZKKL3VMmSNfiwnzZKqg8A54YBKUuHI2wXCpWkb7sqOYvytoTlV%2FbmplzTzLHxkMr5yQlXx9xXA5X3EIK7cL6DdayqPfO1B6%2B0g%3D%3D","externalProvider":"github","login":"dependabot[bot]","type":"Bot","url":"https://github.com/apps/dependabot"},"authorId":"49699333","baseRefName":"main","closedAt":null,"comments":2,"createdAt":"2026-09-08T22:39:48Z","headRefName":"dependabot/github_actions/github-actions-minor-patch-47838f5445","id":"4958031","isDraft":false,"labels":[{"color":"0366d6","description":"Pull requests that update a dependency file","name":"dependencies"},{"color":"000000","description":"Pull requests that update GitHub Actions code","name":"github_actions"}],"number":91,"repository":{"name":"starslingdev-skills","owner":"skills","provider":"forgejo"},"state":"open","title":"chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates","updatedAt":"2026-10-29T05:19:43Z","url":"https://trylle.com/skills/starslingdev-skills/pulls/91","body":"$78","additions":10,"deletions":10,"changedFiles":6,"commits":1,"reviewComments":1,"headSha":"564c32e5dfd5dbf15715a8f3f939e76c96afac42","baseSha":"92761526c04c0212b6cd5bf97ecf6f9efc614f68","headRepoOwner":"skills","headRepoName":"starslingdev-skills","isMerged":false,"mergeCommitSha":null,"mergedBy":null,"mergeable":true,"mergeableState":"clean","conflictingFiles":null,"requestedTeams":[],"requestedReviewers":[],"graphqlId":"issue:91","reactions":{"counts":{"+1":1},"viewerReacted":null,"userLoginsByContent":{"+1":["greptile-apps[bot](github)"]}}},"comments":[{"id":27025176,"graphqlId":"27025176","body":"$79","createdAt":"2026-09-08T22:41:59Z","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d5fdefbe765e9f429d38a31328621291?key=Acl0%2BlhblDOxCrSlqfonNDhgrt1LwjH88FRgEld3W8TJMWD14w5hVMk945%2FUo6%2F4SXM8sWkkR1IS3%2FPkJicqQw3Nzkwzis1r900F6Ii81AW%2B6%2FgoEHT7u6ClQhGHk5zI5yHvly2ZTjc6HDW38z1iK%2FBzByCTQdN9niTDbBlKfNdTv6bYqay%2Boc9at4A%3D","externalProvider":"github","login":"greptile-apps[bot]","type":"Bot","url":"https://github.com/apps/greptile-apps"}}],"commits":[{"sha":"564c32e5dfd5dbf15715a8f3f939e76c96afac42","message":"$7a","createdAt":"2026-10-26T07:46:34Z","author":{"avatarUrl":"","login":"","name":"dependabot[bot]","type":"User","url":""},"verification":{"verified":false,"reason":"gpg.error.no_gpg_keys_found"}}],"events":[],"reviews":[{"id":3637154,"state":"REQUEST_REVIEW","author":{"avatarUrl":"https://cdn.trylle.com/media/images/d3ca344be561aba8d638fb69a8cff725?key=ARy9R4vZMggxp1eazbSEJsCTa%2BRt22KAJU%2B5c4j1VKzS4SUBV38XoUBDVyx1RR60qNIBIJVbAw4lTOz4g1SuCMEiOymbPi%2F1j28BXNg1ySnXf1cOE%2FlJESyC9pw9vfYlR2B%2FSy1vQWA4qSg%2FoGJTILweY9ojwWFCZl5rxLhMDjCvi1xtSevMGFyY","externalProvider":"github","login":"yonasb","type":"User","url":"https://github.com/yonasb"},"submittedAt":"2026-09-08T22:39:48Z","official":false}],"stackEvents":[],"commentPagination":{"totalCount":2,"perPage":30,"loadedPages":[1]},"eventPagination":{"loadedPages":[1],"hasMore":false},"headRefDeleted":false},"fetchedAt":1793412838050}],"children":"$L7b"}] 64:null 6b:[["$","title","0",{"children":"Commits · chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates · skills/starslingdev-skills | Trylle"}],["$","meta","1",{"name":"description","content":"Commits on chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates (#91) in skills/starslingdev-skills."}],["$","meta","2",{"name":"application-name","content":"Trylle"}],["$","link","3",{"rel":"manifest","href":"/manifest.json","crossOrigin":"$undefined"}],["$","meta","4",{"name":"keywords","content":"Commits · chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates · skills/starslingdev-skills, skills/starslingdev-skills, skills/starslingdev-skills repository, starslingdev-skills, Python repository, source code, trylle, agent-native git platform, git platform for agents and humans, git platform for ai agents, coding agent pull requests, ai code review, repository automation, stacked pull requests, two-way github sync, github-compatible actions, try cli"}],["$","meta","5",{"name":"robots","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","6",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","7",{"name":"googlebot","content":"index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1"}],["$","meta","8",{"name":"twitter:domain","content":"trylle.com"}],["$","meta","9",{"name":"twitter:url","content":"https://trylle.com/skills/starslingdev-skills/pulls/91/commits"}],["$","link","10",{"rel":"canonical","href":"https://trylle.com/skills/starslingdev-skills/pulls/91/commits"}],["$","meta","11",{"name":"format-detection","content":"telephone=no"}],["$","meta","12",{"name":"mobile-web-app-capable","content":"yes"}],["$","meta","13",{"name":"apple-mobile-web-app-title","content":"Trylle"}],["$","meta","14",{"name":"apple-mobile-web-app-status-bar-style","content":"black-translucent"}],["$","meta","15",{"property":"og:title","content":"Commits · chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates · skills/starslingdev-skills | Trylle"}],["$","meta","16",{"property":"og:description","content":"Commits on chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates (#91) in skills/starslingdev-skills."}],["$","meta","17",{"property":"og:url","content":"https://trylle.com/skills/starslingdev-skills/pulls/91/commits"}],["$","meta","18",{"property":"og:site_name","content":"Trylle"}],["$","meta","19",{"property":"og:locale","content":"en_US"}],["$","meta","20",{"property":"og:image","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],["$","meta","21",{"property":"og:image:secure_url","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],["$","meta","22",{"property":"og:image:type","content":"image/png"}],["$","meta","23",{"property":"og:image:width","content":"1200"}],["$","meta","24",{"property":"og:image:height","content":"630"}],["$","meta","25",{"property":"og:image:alt","content":"skills/starslingdev-skills repository preview on Trylle"}],["$","meta","26",{"property":"og:type","content":"website"}],["$","meta","27",{"name":"twitter:card","content":"summary_large_image"}],["$","meta","28",{"name":"twitter:site","content":"@trylle"}],["$","meta","29",{"name":"twitter:title","content":"Commits · chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates · skills/starslingdev-skills | Trylle"}],["$","meta","30",{"name":"twitter:description","content":"Commits on chore(deps): bump the github-actions-minor-patch group across 1 directory with 2 updates (#91) in skills/starslingdev-skills."}],["$","meta","31",{"name":"twitter:image","content":"https://trylle.com/api/og.png?kind=repo&owner=skills&repo=starslingdev-skills"}],"$L7c","$L7d","$L7e","$L7f","$L80"]

Commits on Mon, Oct 26, 2026