chore(deps): update anthropics/claude-code-action action to v1.0.88 by seqeralabs-renovate[bot] · Pull Request #321 · seqeralabs/cx-field-tools-installer

Workflows that configure allowed_non_write_users now automatically get CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1, which makes Claude Code (v2.1.79+) strip Anthropic and cloud provider credentials from the environment of subprocesses it spawns (Bash tool, hooks, MCP stdio servers). The parent Claude process keeps these vars for its own API calls — only child subprocess environments are scrubbed.

Why: Workflows that process untrusted input (issue triage, PR review from non-write users) are exposed to prompt injection. A malicious issue body could trick Claude into running a Bash command that reads $ANTHROPIC_API_KEY via shell expansion and leaks it through an observable side channel. Scrubbing the subprocess environment removes the read primitive entirely.

What's scrubbed: Anthropic auth tokens, cloud provider credentials, GitHub Actions OIDC and runtime tokens, OTEL auth headers.

What's kept: GITHUB_TOKEN / GH_TOKEN — so wrapper scripts can still call the GitHub API.

Opt out: Set CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: "0" at the job or step level if your workflow legitimately needs a subprocess to inherit these credentials.

No action required for most users — if you've configured allowed_non_write_users, scrubbing is now on automatically. If your workflow breaks because a subprocess expected inherited credentials, re-inject them explicitly (e.g., via MCP server env: config) or use the opt-out.

What's Changed

Auto-set subprocess env scrub when allowed_non_write_users is configured by @OctavianGuzu in #1093

Full Changelog: anthropics/claude-code-action@v1.0.76...v1.0.77

`v1.0.76`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.76

`v1.0.75`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.75

`v1.0.74`

Compare Source

What's Changed

Restore .claude/ and .mcp.json from PR base branch before CLI runs by @km-anthropic in #1066
Remove redundant git status/diff/log from tag mode allowlist by @ddworken in #1075

Full Changelog: anthropics/claude-code-action@v1...v1.0.74

`v1.0.73`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.73

`v1.0.72`

Compare Source

What's Changed

Harden tag mode tool permissions against prompt injection by @km-anthropic in #1002

Full Changelog: anthropics/claude-code-action@v1...v1.0.72

`v1.0.71`

Compare Source

What's Changed

docs: warn that allowed_bots can expose the action to external triggers by @an-dustin in #1039
feat(inline-comment): add confirmed param + probe-pattern safety net by @km-anthropic in #1048

New Contributors

@an-dustin made their first contribution in #1039

Full Changelog: anthropics/claude-code-action@v1...v1.0.71

`v1.0.70`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.70

`v1.0.69`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.69

`v1.0.68`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.68

`v1.0.67`

Compare Source

What's Changed

Improve gh.sh wrapper: stricter validation and better error messages by @OctavianGuzu in #996

Full Changelog: anthropics/claude-code-action@v1...v1.0.67

`v1.0.66`

Compare Source

What's Changed

Only expose permission_denials count in sanitized output by @ddworken in #993

Full Changelog: anthropics/claude-code-action@v1...v1.0.66

`v1.0.65`

Compare Source

What's Changed

Change the default display_report option to false to restrict exposed data by @ddworken in #992

Full Changelog: anthropics/claude-code-action@v1...v1.0.65

`v1.0.64`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.64

`v1.0.63`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.63

`v1.0.62`

Compare Source

What's Changed

Add gh.sh wrapper for gh CLI commands in issue triage workflows by @OctavianGuzu in #975

Full Changelog: anthropics/claude-code-action@v1...v1.0.62

`v1.0.61`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.61

`v1.0.60`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.60

`v1.0.59`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.59

`v1.0.58`

Compare Source

What's Changed

Add non-write users check workflow by @OctavianGuzu in #973

Full Changelog: anthropics/claude-code-action@v1...v1.0.58

`v1.0.57`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.57

`v1.0.56`

Compare Source

What's Changed

Use wrapper script for label operations in issue triage by @OctavianGuzu in #968

Full Changelog: anthropics/claude-code-action@v1...v1.0.56

`v1.0.55`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.55

`v1.0.54`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.54

`v1.0.53`

Compare Source

What's Changed

fix: grant write permissions and use @main in claude workflow by @ashwin-ant in #950
feat: add display_report option to disable step summary by @ashwin-ant in #952

Full Changelog: anthropics/claude-code-action@v1...v1.0.53

`v1.0.52`

Compare Source

What's Changed

Fix stale claudeCodeVersion and update bump script to keep run.ts in sync by @ashwin-ant in #943
fix: revert to colon-based wildcard syntax for git permissions by @ashwin-ant in #949

Full Changelog: anthropics/claude-code-action@v1...v1.0.52

`v1.0.51`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.51

`v1.0.50`

Compare Source

What's Changed

revert: undo PR checkout fork support and unique branch naming by @ashwin-ant in #937

Full Changelog: anthropics/claude-code-action@v1...v1.0.50

`v1.0.49`

Compare Source

What's Changed

fix: replace deprecated :* with modern * wildcard in git permissions by @Dave-London in #929
fix: skip CI MCP server installation when actions:read permission is missing by @OctavianGuzu in #933
Fix/PR checkout branch name conflicts by @kirisame-wang in #931

New Contributors

@OctavianGuzu made their first contribution in #933
@kirisame-wang made their first contribution in #931

Full Changelog: anthropics/claude-code-action@v1...v1.0.49

`v1.0.48`

Compare Source

What's Changed

Fix PR checkout to support fork PRs by @Tsuesun in #851

New Contributors

@Tsuesun made their first contribution in #851

Full Changelog: anthropics/claude-code-action@v1...v1.0.48

`v1.0.47`

Compare Source

What's Changed

Update claude-opus-4-5 to claude-opus-4-6 in workflow by @ashwin-ant in #909
fix: skip dev dependencies in CI install step by @Dave-London in #919

New Contributors

@Dave-London made their first contribution in #919

Full Changelog: anthropics/claude-code-action@v1...v1.0.47

`v1.0.46`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.46

`v1.0.45`

Compare Source

What's Changed

fix: use original body from webhook payload for TOCTOU hardening by @ddworken in #904
refactor: simplify mode system by removing Mode interface and registry by @ashwin-ant in #899

Full Changelog: anthropics/claude-code-action@v1...v1.0.45

`v1.0.44`

Compare Source

What's Changed

refactor: unify action into single composite step with run.ts entrypoint by @ashwin-ant in #898

Full Changelog: anthropics/claude-code-action@v1...v1.0.44

`v1.0.43`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.43

`v1.0.42`

Compare Source

What's Changed

fix: pass OpenTelemetry environment variables to Claude Code subprocess by @csy1204 in #886
fix: pass GitHub token to setup-bun to avoid rate limits by @peloyeje in #861

New Contributors

@csy1204 made their first contribution in #886
@peloyeje made their first contribution in #861

Full Changelog: anthropics/claude-code-action@v1...v1.0.42

`v1.0.41`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.41

`v1.0.40`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.40

`v1.0.39`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.39

`v1.0.38`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.38

`v1.0.37`

Compare Source

What's Changed

feat: add actor-based comment filtering to GitHub data fetching by @ranyhb in #812
Revert "Revert "feat: send additional_permissions in token exchange request"" by @ashwin-ant in #866
Revert "chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21" by @ashwin-ant in #869

New Contributors

@ranyhb made their first contribution in #812

Full Changelog: anthropics/claude-code-action@v1...v1.0.37

`v1.0.36`

Compare Source

What's Changed

Revert "feat: send additional_permissions in token exchange request" by @ashwin-ant in #864

Full Changelog: anthropics/claude-code-action@v1...v1.0.36

`v1.0.35`

Compare Source

What's Changed

feat: send additional_permissions in token exchange request by @ashwin-ant in #859
chore: upgrade checkout-action to v6 by @arthur-mountain in #862

New Contributors

@arthur-mountain made their first contribution in #862

Full Changelog: anthropics/claude-code-action@v1...v1.0.35

`v1.0.34`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.34

`v1.0.33`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.33

`v1.0.32`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.32

`v1.0.31`

Compare Source

What's Changed

fix: ensure SSH signing key has trailing newline by @ashwin-ant in #834
Consolidate CI workflows into a single entry point by @ashwin-ant in #836
chore: bump Bun to 1.3.6 and setup-bun action to v2.1.2 by @ashwin-ant in #848
refactor: remove CLI path, use Agent SDK exclusively by @ashwin-ant in #849

Full Changelog: anthropics/claude-code-action@v1...v1.0.31

`v1.0.30`

Compare Source

What's Changed

fix: parse ALL --allowed-tools flags, not just the first one by @AlexanderBartash in #801
docs: clarify that Claude does not auto-create PRs by default by @ashwin-ant in #824
fix: add checkHumanActor to agent mode by @ashwin-ant in #826
chore: comment out release-base-action job in release workflow by @ashwin-ant in #833

New Contributors

@AlexanderBartash made their first contribution in #801

Full Changelog: anthropics/claude-code-action@v1...v1.0.30

`v1.0.29`

Compare Source

What's Changed

[Security] Fix HIGH vulnerability: CVE-2025-66414 by @orbisai0security in #792
fix: use original title from webhook payload instead of fetched title by @ashwin-ant in #793
feat: add path validation for commit_files MCP tool by @ddworken in #796
feat: custom branch name templates by @dylancdavis in #571
fix: add missing import and update tests for branch template feature by @ashwin-ant in #799

New Contributors

@orbisai0security made their first contribution in #792
@dylancdavis made their first contribution in #571

Full Changelog: anthropics/claude-code-action@v1...v1.0.29

`v1.0.28`

Compare Source

What's Changed

fix: update broken link in cloud-providers.md by @ashwin-ant in #758
chore: remove unused ci yaml file by @kiwamizamurai in #763
feat: add instant "Fix this" links to PR code reviews by @aiddun in #773
feat: add ssh_signing_key input for SSH commit signing by @ashwin-ant in #784
feat: send user request as separate content block for slash command support by @ashwin-ant in #785
feat: support local plugin marketplace paths by @gor-st in #761
fix: prevent orphaned installer processes from blocking retries by @ashwin-ant in #790
fix: set CLAUDE_CODE_ENTRYPOINT for SDK path to match CLI path by @ashwin-ant in #791

New Contributors

@kiwamizamurai made their first contribution in #763
@aiddun made their first contribution in #773

Full Changelog: anthropics/claude-code-action@v1...v1.0.28

`v1.0.27`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.27

`v1.0.26`

Compare Source

What's Changed

fix: respect user's --setting-sources in claude_args by @ashwin-ant in #750
fix: set GH_TOKEN alongside GITHUB_TOKEN for gh CLI precedence by @ashwin-ant in #752

Full Changelog: anthropics/claude-code-action@v1...v1.0.26

`v1.0.25`

Compare Source

What's Changed

chore: update model to claude-opus-4-5 in workflow by @ashwin-ant in #747
fix: merge multiple --mcp-config flags and support --allowed-tools parsing by @ashwin-ant in #748

Full Changelog: anthropics/claude-code-action@v1...v1.0.25

`v1.0.24`

Compare Source

What's Changed

Fix command injection vulnerability in branch setup by @bogini in #736
feat: Make Agent SDK the default execution path by @ashwin-ant in #738
feat: add session_id output to enable resuming conversations by @gor-st in #739

New Contributors

@gor-st made their first contribution in #739

Full Changelog: anthropics/claude-code-action@v1...v1.0.24

`v1.0.23`

Compare Source

What's Changed

feat: add Agent SDK support with USE_AGENT_SDK feature flag by @ashwin-ant in #698
fix: commentBody may be null by @plaflamme in #706
feat: add simplified prompt option via USE_SIMPLE_PROMPT env var by @ashwin-ant in #718
fix: accumulate multiple --allowedTools flags for Agent SDK by @ashwin-ant in #719
Fix SDK path: add settingSources and default system prompt by @ashwin-ant in #726
fix: resolve zizmor template injection vulnerabilities by @ant-soumitr in #729

New Contributors

@plaflamme made their first contribution in #706
@ant-soumitr made their first contribution in #729

Full Changelog: anthropics/claude-code-action@v1...v1.0.23

`v1.0.22`

Compare Source

What's Changed

fix: prevent race condition on issue/PR body edits by @ashwin-ant in #710

Full Changelog: anthropics/claude-code-action@v1...v1.0.22

`v1.0.21`

Compare Source

What's Changed

Remove experimental allowed domains feature by @ashwin-ant in #697
fix: use cross-platform timeout for Claude Code installation by @ashwin-ant in #700

Full Changelog: anthropics/claude-code-action@v1...v1.0.21

`v1.0.20`

Compare Source

What's Changed

chore: add retry loop to Claude Code installation by @ashwin-ant in #694

Full Changelog: anthropics/claude-code-action@v1...v1.0.20

`v1.0.19`

Compare Source

What's Changed

update docs re: commit signing no longer default by @altendky in #675
chore: limit PR review workflow to opened events only by @ashwin-ant in #691
feat: add AWS_BEARER_TOKEN_BEDROCK support for Bedrock authentication by @garciajrx in #692
feat: add Microsoft Foundry provider support by @ashwin-ant in #684

New Contributors

@altendky made their first contribution in #675
@garciajrx made their first contribution in #692

Full Changelog: anthropics/claude-code-action@v1...v1.0.19

`v1.0.18`

Compare Source

What's Changed

feat: add structured output support via --json-schema argument by @bogini in #687

Full Changelog: anthropics/claude-code-action@v1...v1.0.18

`v1.0.17`

Compare Source

What's Changed

docs: update action version from @beta to @v1 in docs by @ashwin-ant in #650

Full Changelog: anthropics/claude-code-action@v1...v1.0.17

`v1.0.16`

Compare Source

What's Changed

Add show_full_output option to control output verbosity by @ddworken in #580

Full Changelog: anthropics/claude-code-action@v1...v1.0.16

`v1.0.15`

Compare Source

What's Changed

feat: add plugins input to install Claude Code plugins by @whyuan-cc in #638
Add plugin_marketplaces Input Field by @ashwin-ant in #642
feat(docs): simplify custom GitHub App creation with manifest support by @kriscoleman in #620
feat: change plugins input from comma-separated to newline-separated by @whyuan-cc in #644

New Contributors

@whyuan-cc made their first contribution in #638
@kriscoleman made their first contribution in #620

Full Changelog: anthropics/claude-code-action@v1...v1.0.15

`v1.0.14`

Compare Source

What's Changed

docs: document GitHub App permissions in security guide by @ashwin-ant in #607
chore: upgrade actions/checkout from v4 to v5 by @DaleSeo in #632
Update github-mcp-server to v0.17.1 by @hfm in #613
fix(#626): resolve [View job] links pointing to previous workflow runs after comment updates by @BangDori in #627
Update usage.md with link to claude cli args by @btoo in #600

New Contributors

@DaleSeo made their first contribution in #632
@hfm made their first contribution in #613
@BangDori made their first contribution in #627
@btoo made their first contribution in #600

Full Changelog: anthropics/claude-code-action@v1...v1.0.14

`v1.0.13`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.13

`v1.0.12`

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.12

`v1.0.11`

Compare Source

What's Changed

docs: add prompt injection security note by @ashwin-ant in #604

Full Changelog: anthropics/claude-code-action@v1...v1.0.11

`v1.0.10`

Compare Source

What's Changed

docs: fix the faq doc link by @songhuangcn in #593
fix: update permission test prompts to trigger actual tool usage by @ashwin-ant in #596

New Contributors

@songhuangcn made their first contribution in #593

Full Changelog: anthropics/claude-code-action@v1...v1.0.10

`v1.0.9`

Compare Source

What's Changed

Add support for kebab-case --allowed-tools flag by @leoyvens in #581
fix: Removed deprecated input from usage.md by @marcus-dk in #574
fix: add support for pull_request_target event by @vibhor1997a in #579

New Contributors

@leoyvens made their first contribution in #581
@marcus-dk made their first contribution in #574
@vibhor1997a made their first contribution in #579

Full Changelog: anthropics/claude-code-action@v1...v1.0.9

`v1.0.8`

Compare Source

What's Changed

fix(tag): no such tool available mcp__github_* by @BlackHole1 in #556
Delete .github/workflows/claude-test.yml by @km-anthropic in #573

New Contributors

@BlackHole1 made their first contribution in #556

Full Changelog: anthropics/claude-code-action@v1...v1.0.8

`v1.0.7`

Compare Source

What's Changed

feat: Add ANTHROPIC_CUSTOM_HEADERS environment variable support by @jimutt in #561
Add PostToolUse hook for automatic formatting by @ashwin-ant in #563
docs: add documentation for custom executable inputs by @ashwin-ant in #562
chore: consolidate duplicate test directories by @benny123tw in #565
fix: update test workflow reference in test-local.sh by @benny123tw in #564

New Contributors

@jimutt made their first contribution in #561
@benny123tw made their first contribution in #565

Full Changelog: anthropics/claude-code-action@v1...v1.0.7

`v1.0.6`

Compare Source

What's Changed

fix: remove OIDC id-token permission and add github_token input by @ashwin-ant in #545
feat: add repository_dispatch event support by @bogini in #546
fix: use agent mode for issues events with explicit prompts by @km-anthropic in #530
fix: remove unnecessary GitHub comment server inclusion in agent mode by @ashwin-ant in #549
feat: add allowed_non_write_users input to bypass permission checks by @ashwin-ant in #550
feat: update claude-review workflow to use slash command by @ashwin-ant in #554
fix: add missing githubContext by @EurFelux in #547
enable track_progress for comments, fix mcp config by @ashwin-ant in #558

New Contributors

[@&

Configuration

📅 Schedule: (UTC)

Branch creation
- "before 6am on Monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

seqeralabs-renovate · 2026-04-02T17:39:15Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

seqeralabs-renovate bot added the renovate-actions label Apr 2, 2026

seqeralabs-renovate bot force-pushed the renovate-autodiscover/anthropics-claude-code-action-1.x branch from 10822cf to a7be766 Compare April 7, 2026 15:49

seqeralabs-renovate bot changed the title ~~chore: Update anthropics/claude-code-action action to v1.0.81~~ chore(deps): update anthropics/claude-code-action action to v1.0.85 Apr 7, 2026

seqeralabs-renovate bot force-pushed the renovate-autodiscover/anthropics-claude-code-action-1.x branch from a7be766 to ccab0e2 Compare April 8, 2026 04:58

seqeralabs-renovate bot changed the title ~~chore(deps): update anthropics/claude-code-action action to v1.0.85~~ chore(deps): update anthropics/claude-code-action action to v1.0.87 Apr 8, 2026

chore(deps): update anthropics/claude-code-action action to v1.0.88

f16ff06

seqeralabs-renovate bot force-pushed the renovate-autodiscover/anthropics-claude-code-action-1.x branch from ccab0e2 to f16ff06 Compare April 9, 2026 05:50

seqeralabs-renovate bot changed the title ~~chore(deps): update anthropics/claude-code-action action to v1.0.87~~ chore(deps): update anthropics/claude-code-action action to v1.0.88 Apr 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update anthropics/claude-code-action action to v1.0.88#321

chore(deps): update anthropics/claude-code-action action to v1.0.88#321
seqeralabs-renovate[bot] wants to merge 1 commit intomasterfrom
renovate-autodiscover/anthropics-claude-code-action-1.x

seqeralabs-renovate bot commented Apr 2, 2026 •

edited

Loading

Uh oh!

seqeralabs-renovate bot commented Apr 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

seqeralabs-renovate bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

Subprocess environment scrubbing for untrusted-input workflows

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

seqeralabs-renovate bot commented Apr 2, 2026 •

edited

Loading