chore(deps): bump anthropics/claude-code-action from 1.0.145 to 1.0.166

[dependabot]

Bumps anthropics/claude-code-action from 1.0.145 to 1.0.166.

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.166

What's Changed

• Drop buffered inline comment when it is posted live (#1405) by @​archievi in anthropics/claude-code-action#1412
• Use modern noreply email for co-author trailers by @​tarunag10 in anthropics/claude-code-action#1369
• fix(restore): handle symlinked CLAUDE.md paths during config snapshot by @​syf2211 in anthropics/claude-code-action#1441
• fix: preserve repeated add-dir flags in claude args by @​Jerry2003826 in anthropics/claude-code-action#1256
• fix: propagate curl failures in install pipeline by @​akhilesharora in anthropics/claude-code-action#1241
• chore: fix prettier formatting by @​ashwin-ant in anthropics/claude-code-action#1463

New Contributors

• @​archievi made their first contribution in anthropics/claude-code-action#1412
• @​syf2211 made their first contribution in anthropics/claude-code-action#1441
• @​akhilesharora made their first contribution in anthropics/claude-code-action#1241

Full Changelog: anthropics/claude-code-action@v1...v1.0.166

v1.0.165

Full Changelog: anthropics/claude-code-action@v1...v1.0.165

v1.0.164

Full Changelog: anthropics/claude-code-action@v1...v1.0.164

v1.0.163

Full Changelog: anthropics/claude-code-action@v1...v1.0.163

v1.0.162

What's Changed

• Add agent-approval-check composite action by @​km-anthropic in anthropics/claude-code-action#1429

Full Changelog: anthropics/claude-code-action@v1...v1.0.162

v1.0.161

Full Changelog: anthropics/claude-code-action@v1...v1.0.161

v1.0.160

Full Changelog: anthropics/claude-code-action@v1...v1.0.160

v1.0.159

What's Changed

• fix: bound app token revocation cleanup by @​tarunag10 in anthropics/claude-code-action#1437

New Contributors

• @​tarunag10 made their first contribution in anthropics/claude-code-action#1437

Full Changelog: anthropics/claude-code-action@v1...v1.0.159

v1.0.158

Full Changelog: anthropics/claude-code-action@v1...v1.0.158

... (truncated)

Commits

• f87768c chore: bump Claude Code to 2.1.202 and Agent SDK to 0.3.202
• 58a2944 chore: fix prettier formatting (#1463)
• beb753e fix: propagate curl failures in install pipeline (#1241)
• 235b39b fix: preserve repeated add-dir flags in claude args (#1256)
• d060ddc fix(restore): handle symlinked CLAUDE.md paths during config snapshot (#1441)
• 0f07aee Use modern noreply email for co-author trailers (#1369)
• a221ad2 Drop buffered inline comment when it is posted live (#1405) (#1412)
• 558b1d6 chore: bump Claude Code to 2.1.201 and Agent SDK to 0.3.201
• 01872cc chore: bump Claude Code to 2.1.200 and Agent SDK to 0.3.200
• 769e3bd chore: bump Claude Code to 2.1.199 and Agent SDK to 0.3.199
• Additional commits viewable in compare view

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: This is a routine Dependabot bump of the pinned anthropics/claude-code-action GitHub Action from v1.0.145 to v1.0.163 in .github/workflows/claude-code-review.yml. All three reviewers independently approved: the change is a single SHA pin update with a matching version comment, no local code, contracts, or workflow inputs change. No blocking findings.

Findings (none — all reviewers approved)

The Verifier confirmed the diff is a single-line commit SHA pin bump (ebcdfe6… → 769e3bd…) with no logic, path, or contract changes. Pattern Matcher found no security/perf/idiom concerns, and the Architect confirmed the workflow's inputs (anthropic_api_key, additional_permissions) are unchanged. Nothing to block or fix.

---

Suggestions (1)

• As a supply-chain sanity check, confirm the pinned SHA 769e3bdff9bb7ecfb51bad4c9cba23d6f5fc5ea5 actually corresponds to the intended v1.0.163 release (Dependabot normally handles this correctly, so this is optional). Flagged independently by the Pattern Matcher and Architect.

---

Generated by Operon Ensemble Code Review.

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: Routine Dependabot bump of the pinned anthropics/claude-code-action GitHub Action from v1.0.145 to v1.0.166 in .github/workflows/claude-code-review.yml. All three reviewers approved: the Verifier confirmed the diff is a single SHA-pin update (ebcdfe6… → f87768c6…) with a matching version comment and no changes to logic, inputs, or contracts. No blocking findings.

Findings (none — all reviewers approved)

The Verifier grounded the change: a single-line SHA pin bump with a version comment consistent with the PR title (v1.0.166), no logic/path/contract/input changes, and no other references to the old SHA in the repo. Pattern Matcher found no security/perf/idiom concerns. The Architect noted upstream behavioral changes (curl install-failure propagation, symlinked CLAUDE.md handling) but these are third-party changes outside this repo with no contract break here — not a blocking finding.

---

Suggestions (2)

• As a supply-chain sanity check, confirm the pinned SHA f87768c6d25f92ae6efa7175e223ef77d4cbf97f corresponds to the intended official v1.0.166 release (Dependabot normally handles this; optional). Flagged by the Verifier, Pattern Matcher, and Architect.
• Traceability nit: the branch name references v1.0.163 while the pinned SHA and comment reference v1.0.166 — likely Dependabot rebasing onto a newer release. No action needed. Flagged by the Verifier.

---

Generated by Operon Ensemble Code Review.