731 Commits
Author SHA1 Message Date
GitHub Actions 273fe82540 chore: bump Claude Code to 2.1.59 and Agent SDK to 0.2.59 v1.0.62 2026-02-26 01:05:07 +00:00
Octavian GuzuandGitHub e750645f1b Add gh.sh wrapper for gh CLI commands in workflows (#975) 2026-02-25 20:42:29 +00:00
GitHub Actions cd4b150a2a chore: bump Claude Code to 2.1.58 and Agent SDK to 0.2.58 v1.0.61 2026-02-25 20:04:44 +00:00
GitHub Actions ade221fd1c chore: bump Claude Code to 2.1.56 and Agent SDK to 0.2.56 v1.0.60 2026-02-25 06:37:46 +00:00
GitHub Actions 48fe7dd592 chore: bump Claude Code to 2.1.55 and Agent SDK to 0.2.55 v1.0.59 2026-02-25 03:21:10 +00:00
GitHub Actions 6ae1b29ba2 chore: bump Claude Code to 2.1.53 and Agent SDK to 0.2.53 v1.0.58 2026-02-25 00:18:46 +00:00
Octavian GuzuandGitHub 7af3506741 Add non-write users check workflow (#973) 2026-02-24 19:47:33 +00:00
GitHub Actions 35a9e0292d chore: bump Claude Code to 2.1.52 and Agent SDK to 0.2.52 v1.0.57 2026-02-24 06:44:55 +00:00
GitHub Actions fa3312a107 chore: bump Claude Code to 2.1.51 and Agent SDK to 0.2.51 v1.0.56 2026-02-24 01:47:14 +00:00
Octavian GuzuandGitHub dd8541688d Use wrapper script for label operations in issue triage (#968)
* Use wrapper script for label operations in issue triage

Updates /label-issue command and examples to use a dedicated
edit-issue-labels.sh script for label operations instead of raw
gh issue edit. The script validates labels against the repo's existing
labels before applying them. Also tightens gh search permission to
gh search issues.

* Show multiple --add-label flags in label-issue example
2026-02-23 17:16:07 +00:00
GitHub Actions edd85d6153 chore: bump Claude Code to 2.1.49 and Agent SDK to 0.2.49 v1.0.55 2026-02-19 23:33:09 +00:00
GitHub Actions 0cf5eeec4f chore: bump Claude Code to 2.1.47 and Agent SDK to 0.2.47 v1.0.54 2026-02-18 21:44:15 +00:00
GitHub Actions e6cb7a7ce3 chore: bump Claude Code to 2.1.45 and Agent SDK to 0.2.45 2026-02-17 18:58:59 +00:00
GitHub Actions 2f8ba26a21 chore: bump Claude Code to 2.1.44 and Agent SDK to 0.2.44 v1.0.53 2026-02-16 21:40:14 +00:00
Ashwin BhatGitHubclaude[bot] <41898282+claude[bot]@users.noreply.github.com>Ashwin Bhat
cc5ef44546 feat: add display_report option to disable step summary (#952)
Add a `display_report` input parameter (default: "true") that controls
whether the Claude Code Report is written to the GitHub Step Summary.
Setting it to "false" allows users with custom formatting solutions to
avoid duplicate output in the step summary.

Closes #206

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: Ashwin Bhat <ashwin-ant@users.noreply.github.com>
2026-02-15 15:49:49 -08:00
Ashwin BhatandGitHub f6a1c4c1b4 fix: grant write permissions and use @main in claude workflow (#950)
Give the workflow contents/pull-requests/issues write permissions so
the OIDC app token can push. Also point to @main instead of @v1.
2026-02-15 15:13:59 -08:00
Ashwin BhatandGitHub 68cfeead18 Revert "fix: replace deprecated :* with modern * wildcard in git permissions (#929)" (#949)
This reverts commit 1bb0e7464b.
v1.0.52
2026-02-15 14:39:25 -08:00
Ashwin BhatandGitHub f5088835af Fix stale claudeCodeVersion in run.ts and update bump automation (#943) 2026-02-13 15:12:56 -08:00
GitHub Actions ea36d6abde chore: bump Claude Code to 2.1.42 and Agent SDK to 0.2.42 v1.0.51 2026-02-13 19:55:13 +00:00
c22f7c3f9d revert: undo PR checkout fork support and unique branch naming (#937)
Reverts the following commits:
- f669191 fix: use unique local branch names for PR checkout to avoid conflicts (#931)
- 21e3fe0 Fix PR checkout to support fork PRs (#851)

Simplifies PR branch checkout back to using headRefName directly instead
of the pr-{number} local branch naming scheme introduced in #931 and the
GitHub pull ref fetch approach introduced in #851.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
v1.0.50
2026-02-12 09:45:01 -08:00
f669191d7d fix: use unique local branch names for PR checkout to avoid conflicts (#931)
The previous implementation used the PR's original branch name when
fetching, which could conflict with existing local or remote branches
of the same name. This caused checkout failures for PRs with common
branch names like 'main' or 'feature/xyz'.

Changes:
- Use 'pr-{number}' format for local branch names (e.g., pr-385)
- Preserve original branch name for logging purposes
- Add detailed logging showing original -> local branch mapping

This ensures uniqueness since PR numbers are unique per repository,
while maintaining support for both same-repo and fork PRs via
GitHub's pull/{number}/head refs.

Fixes the issue introduced in #851 where fork PR support was added.

Co-authored-by: Yi-Cheng Wang <yicheng.wang@heph-ai.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
v1.0.49
2026-02-11 19:30:25 -08:00
Octavian GuzuandGitHub 8c383c5de3 fix: skip CI MCP server installation when actions:read permission is missing (#933) 2026-02-11 11:02:49 -08:00
1bb0e7464b fix: replace deprecated :* with modern * wildcard in git permissions (#929)
Replace `Bash(git add:*)` syntax with `Bash(git add *)` in default
tool permissions for tag mode and create-prompt. The colon-prefixed
wildcard syntax is deprecated and causes SDK validation errors.

Closes #856

Co-authored-by: Dave-London <hello@os4us.org>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-10 21:26:10 -08:00
GitHub Actions 23ed4cb53d chore: bump Claude Code to 2.1.39 and Agent SDK to 0.2.39 v1.0.48 2026-02-10 23:10:22 +00:00
Sol RedfernandGitHub 21e3fe0542 Fix PR checkout to support fork PRs (#851)
Use GitHub's PR refs (pull/NUMBER/head) instead of fetching branch
by name. This works for both same-repo and fork PRs because GitHub
automatically creates these refs in the base repository for all PRs.

The branch name doesn't exist on origin for fork PRs, causing:
  fatal: couldn't find remote ref <branch-name>

Using pull/${entityNumber}/head:${branchName} fetches the PR head
and creates a local branch with the correct name.

Fixes issues with tag mode failing on fork PRs.
2026-02-10 08:52:32 -08:00
GitHub Actions b433f16b30 chore: bump Claude Code to 2.1.38 and Agent SDK to 0.2.38 v1.0.47 2026-02-10 00:52:13 +00:00
7695f7866a fix: skip dev dependencies in CI install step (#919)
Use `bun install --production` instead of `bun install` in both
action.yml and base-action/action.yml to skip installing devDependencies
(@types/*, prettier, typescript) that are not needed at runtime.

Bun runs TypeScript natively without needing the typescript compiler
or type definition packages. This reduces installed packages from 151
to 135 and speeds up the install step.

Fixes #895

Co-authored-by: Dave-London <hello@os4us.org>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-09 10:09:41 -08:00
d5b01b6843 Update claude-opus-4-5 to claude-opus-4-6 in workflow (#909)
* Update claude-opus-4-5 to claude-opus-4-6 in workflow

* Fix whitespace formatting in docs and commands

* Fix whitespace formatting in docs and commands

* Add claude-opus-4-6 model to PR review workflow

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-02-07 14:18:08 -08:00
GitHub Actions 6c61301d8e chore: bump Claude Code to 2.1.37 and Agent SDK to 0.2.37 v1.0.46 2026-02-07 19:08:42 +00:00
GitHub Actions db388438c1 chore: bump Claude Code to 2.1.36 and Agent SDK to 0.2.36 2026-02-07 18:00:59 +00:00
GitHub Actions b113f49a56 chore: bump Claude Code to 2.1.33 and Agent SDK to 0.2.33 v1.0.45 2026-02-06 01:46:07 +00:00
Ashwin BhatandGitHub 7057f3318b refactor: simplify mode system by removing Mode interface and registry (#899)
Replace the over-engineered Mode interface/registry/detector pattern with
straightforward inline logic. There are only 2 modes (tag and agent) and
the complexity wasn't justified.

- Delete Mode interface, registry, and prepare pass-through modules
- Export prepareTagMode() and prepareAgentMode() as standalone functions
- Inline trigger checking and mode dispatch in run.ts/prepare.ts
- Change generatePrompt/createPrompt to take modeName string instead of Mode
- Remove dead code (extractGitHubContext, unused detector helpers)
- Update CLAUDE.md to reflect new architecture
2026-02-05 17:22:30 -08:00
David DworkenandGitHub f09dc9a6a3 fix: use original body from webhook payload for TOCTOU hardening (#904)
* fix: use original body from webhook payload for TOCTOU hardening

* test: add null originalBody + edited GraphQL body TOCTOU scenario
2026-02-05 10:54:51 -08:00
GitHub Actions 006aaf2935 chore: bump Claude Code to 2.1.32 and Agent SDK to 0.2.32 v1.0.44 2026-02-05 17:46:38 +00:00
Ashwin BhatandGitHub 9a3c761f54 refactor: unify action into single composite step with run.ts entrypoint (#898)
* refactor: unify action into single composite step with run.ts entrypoint

Consolidate the prepare and base-action phases into a single composite
step that runs src/entrypoints/run.ts. This simplifies the action.yml
from multiple steps to one execution step, while keeping the same
behavior.

Key changes:
- Add src/entrypoints/run.ts as unified entrypoint
- Simplify action.yml to single 'Run Claude Code Action' step
- Pass all inputs via environment variables
- Update base-action to accept inputs via env vars
- Support agent mode auto-detection from prompt input

* refactor: keep SSH signing cleanup and token revocation as separate action steps

Move SSH signing key cleanup and app token revocation back to separate
composite action steps in action.yml with always() conditions, rather
than handling them inside run.ts. This keeps these cleanup concerns
as independently visible steps in the workflow.

* fix: address PR review feedback

- Use path.dirname() instead of manual string slicing for executable path
- Differentiate prepare vs execution errors in catch block so tracking
  comment accurately reflects which phase failed
- Update CLAUDE.md architecture docs to reflect unified run.ts entrypoint
  and four-phase design

* fix: address PR review feedback

- Use path.dirname() instead of manual string slicing for executable path
- Differentiate prepare vs execution errors in catch block so tracking
  comment accurately reflects which phase failed
- Rewrite CLAUDE.md to focus on mental model, key concepts, and gotchas
  instead of exhaustive file listings
2026-02-03 20:09:43 -08:00
GitHub Actions 6867bb3ab0 chore: bump Claude Code to 2.1.31 and Agent SDK to 0.2.31 v1.0.43 2026-02-04 00:42:58 +00:00
GitHub Actions 98af40b63c chore: bump Claude Code to 2.1.30 and Agent SDK to 0.2.30 v1.0.42 2026-02-03 18:04:51 +00:00
4ce5f178c2 fix: pass GitHub token to setup-bun to avoid rate limits (#861)
Co-authored-by: Jean-Eudes Peloye <jean-eudes.peloye@adevinta.com>
2026-02-01 14:09:41 -08:00
Sangyeon ChoGitHubClaude Opus 4.5조상연[플레이스 AI] <sang-yeon.cho@navercorp.com>
fab4258c6e fix: pass OpenTelemetry environment variables to Claude Code subprocess (#886)
* fix: pass OpenTelemetry environment variables to Claude Code subprocess

Environment variables set in workflow's step `env:` block were not being
passed to the Claude Code subprocess because composite actions only forward
explicitly referenced environment variables.

This fix adds references for telemetry-related environment variables:
- CLAUDE_CODE_ENABLE_TELEMETRY
- OTEL_METRICS_EXPORTER
- OTEL_LOGS_EXPORTER
- OTEL_EXPORTER_OTLP_PROTOCOL
- OTEL_EXPORTER_OTLP_ENDPOINT
- OTEL_METRIC_EXPORT_INTERVAL
- OTEL_LOGS_EXPORT_INTERVAL
- OTEL_RESOURCE_ATTRIBUTES

Co-Authored-By: 조상연[플레이스 AI] <sang-yeon.cho@navercorp.com>
Co-Authored-By: csy1204 <josang1204@gmail.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* test: add tests for OTEL environment variables passthrough

Verify that telemetry-related environment variables are correctly
passed through to sdkOptions.env when set in process.env.

Co-Authored-By: 조상연[플레이스 AI] <sang-yeon.cho@navercorp.com>
Co-Authored-By: csy1204 <josang1204@gmail.com>
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: add missing OTEL_EXPORTER_OTLP_HEADERS environment variable

Add OTEL_EXPORTER_OTLP_HEADERS to the list of OpenTelemetry environment
variables passed through to the Claude Code subprocess. This variable is
needed for authentication when connecting to OTLP endpoints that require
bearer tokens or other credentials.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: 조상연[플레이스 AI] <sang-yeon.cho@navercorp.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 14:01:29 -08:00
GitHub Actions 70e16deb18 chore: bump Claude Code to 2.1.29 and Agent SDK to 0.2.29 v1.0.41 2026-01-31 23:36:46 +00:00
GitHub Actions 0ed5eeaa54 chore: bump Claude Code to 2.1.27 and Agent SDK to 0.2.27 v1.0.40 2026-01-30 20:37:50 +00:00
GitHub Actions 01e756b34e chore: bump Claude Code to 2.1.25 and Agent SDK to 0.2.25 v1.0.39 2026-01-29 21:12:19 +00:00
GitHub Actions ff34ce0ff0 chore: bump Claude Code to 2.1.23 and Agent SDK to 0.2.23 v1.0.38 2026-01-29 01:08:45 +00:00
GitHub Actions 2817c54db8 chore: bump Claude Code to 2.1.22 and Agent SDK to 0.2.22 v1.0.37 2026-01-28 06:58:50 +00:00
Ashwin BhatandGitHub d01eedd981 Revert "chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21" (#869)
This reverts commit 49046e0709.
2026-01-27 20:44:28 -08:00
GitHub Actions 49046e0709 chore: bump Claude Code to 2.1.21 and Agent SDK to 0.2.21 2026-01-28 02:24:23 +00:00
Ashwin BhatandGitHub 32ac7269f2 Revert "Revert "feat: send additional_permissions in token exchange request (…" (#866)
This reverts commit 231bd75b71.
2026-01-27 14:35:18 -08:00
Rani HalabiandGitHub fe72061e16 feat: add actor-based comment filtering to GitHub data fetching (#812)
- Introduced `include_comments_by_actor` and `exclude_comments_by_actor` inputs in action.yml to allow filtering of comments based on actor usernames.
- Updated context parsing to handle new input fields.
- Implemented `filterCommentsByActor` function to filter comments according to specified inclusion and exclusion patterns.
- Modified `fetchGitHubData` to apply actor filters when retrieving comments from pull requests and issues.
- Added comprehensive tests for the new filtering functionality.

This enhancement provides more control over which comments are processed based on the actor, improving the flexibility of the workflow.
2026-01-27 07:48:10 -08:00
Ashwin BhatandGitHub 231bd75b71 Revert "feat: send additional_permissions in token exchange request (#859)" (#864)
This reverts commit 0c704179b5.
v1.0.36
2026-01-26 21:40:04 -08:00
GitHub Actions 4126f9d975 chore: bump Claude Code to 2.1.20 and Agent SDK to 0.2.20 v1.0.35 2026-01-27 01:34:26 +00:00