claude-code-action

History

Close remaining gaps in .mcp.json change protection

When mcpJsonChanged is true, delete enableAllProjectMcpServers from the
merged settings object so user-provided INPUT_SETTINGS cannot re-enable
it and bypass the check. Also fix the stale positional arg in the
standalone base-action call site and add test coverage for the bypass case.

2026-03-17 12:24:27 -07:00

mcp-test

fix: resolve high vulnerability CVE-2025-66414 (#792 )

2026-01-07 12:53:45 +05:30

install-plugins.test.ts

feat: support local plugin marketplace paths (#761 )

2026-01-05 16:13:32 +05:30

parse-sdk-options.test.ts

fix: pass OpenTelemetry environment variables to Claude Code subprocess (#886 )

2026-02-01 14:01:29 -08:00

parse-shell-args.test.ts

feat: implement Claude Code GitHub Action v1.0 with auto-detection and slash commands (#421 )