From 4c0b6fd6bf4480a5a5daa13500a9f4b72cc143e4 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Mon, 16 Feb 2026 09:45:12 +0000 Subject: [PATCH 1/5] chore: sync with upstream anthropics/claude-code-action Co-Authored-By: Claude Sonnet 4.5 --- README.md | 3 ++- action.yml | 7 ++++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 23940aa..4d5c4c9 100644 --- a/README.md +++ b/README.md @@ -150,6 +150,7 @@ Variables substituted via `envsubst` at runtime: | `path_to_bun_executable` | Optional path to custom Bun executable. WARNING: May cause issues if incompatible | - | | `display_report` | Whether to display the Claude Code Report in GitHub Step Summary. Set to 'false' to disable when using custom formatting solutions. | `true` | | `show_full_output` | Show full JSON output. WARNING: May expose secrets in public logs | `false` | +| `display_report` | Display Claude Code Report in GitHub Step Summary (set to 'false' to disable when using custom formatting) | `true` | \*Either `claude_code_oauth_token` or `anthropic_api_key` is required. @@ -162,7 +163,7 @@ Variables substituted via `envsubst` at runtime: | `execution_file` | Path to Claude Code execution output | | `branch_name` | The branch created by Claude Code for this execution | | `github_token` | The GitHub token used by the action (Claude App token if available). **Sensitive** — do not log or upload as an artifact. | -| `structured_output` | JSON output when using `--json-schema` | +| `structured_output` | JSON string containing all structured output fields when `--json-schema` is provided in `claude_args`. Use `fromJSON()` to parse | | `session_id` | Claude Code session ID that can be used with --resume | ## Examples diff --git a/action.yml b/action.yml index 4baa712..05d72c7 100644 --- a/action.yml +++ b/action.yml @@ -152,6 +152,10 @@ inputs: description: "Show full JSON output from Claude Code. WARNING: This outputs ALL Claude messages including tool execution results which may contain secrets, API keys, or other sensitive information. These logs are publicly visible in GitHub Actions. Only enable for debugging in non-sensitive environments." required: false default: "false" + display_report: + description: "Display Claude Code Report in GitHub Step Summary (set to 'false' to disable when using custom formatting)" + required: false + default: "true" outputs: execution_file: @@ -164,7 +168,7 @@ outputs: description: "The GitHub token used by the action (Claude App token if available)" value: ${{ steps.claude.outputs.github_token }} structured_output: - description: "JSON output when using --json-schema" + description: "JSON string containing all structured output fields when --json-schema is provided in claude_args. Use fromJSON() to parse: fromJSON(steps.id.outputs.structured_output).field_name" value: ${{ steps.claude.outputs.structured_output }} session_id: description: "The Claude Code session ID that can be used with --resume to continue this conversation" @@ -279,3 +283,4 @@ runs: path_to_bun_executable: ${{ inputs.path_to_bun_executable }} display_report: ${{ inputs.display_report }} show_full_output: ${{ inputs.show_full_output }} + display_report: ${{ inputs.display_report }} From bcf045952cf011b162dff7ce91ef5293732a7c5e Mon Sep 17 00:00:00 2001 From: Joseph Mearman Date: Mon, 16 Feb 2026 13:21:23 +0000 Subject: [PATCH 2/5] ci: add lint workflow for PRs and main branch --- .github/workflows/ci.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/ci.yml diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml new file mode 100644 index 0000000..561e258 --- /dev/null +++ b/.github/workflows/ci.yml @@ -0,0 +1,24 @@ +name: CI + +on: + push: + branches: [main] + pull_request: + types: [opened, synchronize, reopened] + +permissions: + contents: read + +jobs: + lint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v6 + + - uses: actions/setup-node@v4 + with: + node-version: 22 + cache: npm + + - run: npm ci + - run: npm run lint From 18b47b85934cbeb2f4c4afb73493715d5b128485 Mon Sep 17 00:00:00 2001 From: Joseph Mearman Date: Mon, 16 Feb 2026 13:21:30 +0000 Subject: [PATCH 3/5] fix: remove duplicate display_report input and pass-through --- action.yml | 5 ----- 1 file changed, 5 deletions(-) diff --git a/action.yml b/action.yml index 05d72c7..7293814 100644 --- a/action.yml +++ b/action.yml @@ -152,10 +152,6 @@ inputs: description: "Show full JSON output from Claude Code. WARNING: This outputs ALL Claude messages including tool execution results which may contain secrets, API keys, or other sensitive information. These logs are publicly visible in GitHub Actions. Only enable for debugging in non-sensitive environments." required: false default: "false" - display_report: - description: "Display Claude Code Report in GitHub Step Summary (set to 'false' to disable when using custom formatting)" - required: false - default: "true" outputs: execution_file: @@ -283,4 +279,3 @@ runs: path_to_bun_executable: ${{ inputs.path_to_bun_executable }} display_report: ${{ inputs.display_report }} show_full_output: ${{ inputs.show_full_output }} - display_report: ${{ inputs.display_report }} From 0080badb01255440c53ff9eafb514eb1cbcb1acd Mon Sep 17 00:00:00 2001 From: Joseph Mearman Date: Mon, 16 Feb 2026 13:21:36 +0000 Subject: [PATCH 4/5] style: fix markdown table formatting and escape label references --- README.md | 87 +++++++++++++++++++++++++++---------------------------- 1 file changed, 43 insertions(+), 44 deletions(-) diff --git a/README.md b/README.md index 4d5c4c9..4d821e3 100644 --- a/README.md +++ b/README.md @@ -113,44 +113,43 @@ Variables substituted via `envsubst` at runtime:
Full input reference -| Input | Description | Default | -| ------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- | -| `mode` | `interactive` or `review` | `interactive` | -| `pr_number` | PR number (required for review mode) | `''` | -| `prompt_dir` | Override prompt directory | `interactive` / `review` | -| `claude_args` | Override claude args | Auto-generated based on mode | -| `claude_code_oauth_token` | Claude Code OAuth token | Required\* | -| `anthropic_api_key` | Anthropic API key (alternative to OAuth) | - | -| `github_token` | GitHub token | Uses `github.token` | -| `track_progress` | Enable progress tracking with checkboxes | `false` | -| `include_fix_links` | Include 'Fix this' links in PR feedback | `true` | -| `use_sticky_comment` | Use single sticky comment for PR feedback | `false` | -| `trigger_phrase` | Custom trigger phrase | `@claude` | -| `assignee_trigger` | Assignee that triggers on issue assignment | - | -| `label_trigger` | Label that triggers when applied to issue | `claude` | -| `base_branch` | Branch to use as base when creating new branches | Repository default | -| `branch_prefix` | Prefix for Claude branches | `claude/` | -| `branch_name_template` | Template for branch naming (supports {{prefix}}, {{entityType}}, {{entityNumber}}, {{timestamp}}, {{sha}}, {{label}}, {{description}}) | Default format | -| `additional_permissions` | Extra permissions (e.g., `actions: read`) | - | -| `allowed_bots` | Comma-separated allowed bot usernames, or '\*' to allow all | No bots allowed | -| `allowed_non_write_users` | Comma-separated usernames to allow without write permissions. WARNING: Use with extreme caution | - | -| `include_comments_by_actor` | Comma-separated list to INCLUDE in comments. Supports wildcards like '\*[bot]' | All actors included | -| `exclude_comments_by_actor` | Comma-separated list to EXCLUDE from comments. Supports wildcards like '\*[bot]'. Exclusion takes priority | None excluded | -| `use_commit_signing` | Enable commit signing via GitHub API | `false` | -| `ssh_signing_key` | SSH private key for signing commits | - | -| `bot_id` | GitHub user ID for git operations | `41898282` | -| `bot_name` | GitHub username for git operations | `claude[bot]` | -| `settings` | Claude Code settings (JSON or file path) | - | -| `plugins` | Newline-separated plugins to install | - | -| `plugin_marketplaces` | Newline-separated marketplace Git URLs | - | -| `use_bedrock` | Use Amazon Bedrock with OIDC | `false` | -| `use_vertex` | Use Google Vertex AI with OIDC | `false` | -| `use_foundry` | Use Microsoft Foundry with OIDC | `false` | -| `path_to_claude_code_executable` | Optional path to custom Claude Code executable. WARNING: May cause issues if outdated | - | -| `path_to_bun_executable` | Optional path to custom Bun executable. WARNING: May cause issues if incompatible | - | -| `display_report` | Whether to display the Claude Code Report in GitHub Step Summary. Set to 'false' to disable when using custom formatting solutions. | `true` | -| `show_full_output` | Show full JSON output. WARNING: May expose secrets in public logs | `false` | -| `display_report` | Display Claude Code Report in GitHub Step Summary (set to 'false' to disable when using custom formatting) | `true` | +| Input | Description | Default | +| -------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------- | +| `mode` | `interactive` or `review` | `interactive` | +| `pr_number` | PR number (required for review mode) | `''` | +| `prompt_dir` | Override prompt directory | `interactive` / `review` | +| `claude_args` | Override claude args | Auto-generated based on mode | +| `claude_code_oauth_token` | Claude Code OAuth token | Required\* | +| `anthropic_api_key` | Anthropic API key (alternative to OAuth) | - | +| `github_token` | GitHub token | Uses `github.token` | +| `track_progress` | Enable progress tracking with checkboxes | `false` | +| `include_fix_links` | Include 'Fix this' links in PR feedback | `true` | +| `use_sticky_comment` | Use single sticky comment for PR feedback | `false` | +| `trigger_phrase` | Custom trigger phrase | `@claude` | +| `assignee_trigger` | Assignee that triggers on issue assignment | - | +| `label_trigger` | Label that triggers when applied to issue | `claude` | +| `base_branch` | Branch to use as base when creating new branches | Repository default | +| `branch_prefix` | Prefix for Claude branches | `claude/` | +| `branch_name_template` | Template for branch naming (supports {{prefix}}, {{entityType}}, {{entityNumber}}, {{timestamp}}, {{sha}}, {{label}}, {{description}}) | Default format | +| `additional_permissions` | Extra permissions (e.g., `actions: read`) | - | +| `allowed_bots` | Comma-separated allowed bot usernames, or '\*' to allow all | No bots allowed | +| `allowed_non_write_users` | Comma-separated usernames to allow without write permissions. WARNING: Use with extreme caution | - | +| `include_comments_by_actor` | Comma-separated list to INCLUDE in comments. Supports wildcards like '\*\[bot\]' | All actors included | +| `exclude_comments_by_actor` | Comma-separated list to EXCLUDE from comments. Supports wildcards like '\*\[bot\]'. Exclusion takes priority | None excluded | +| `use_commit_signing` | Enable commit signing via GitHub API | `false` | +| `ssh_signing_key` | SSH private key for signing commits | - | +| `bot_id` | GitHub user ID for git operations | `41898282` | +| `bot_name` | GitHub username for git operations | `claude[bot]` | +| `settings` | Claude Code settings (JSON or file path) | - | +| `plugins` | Newline-separated plugins to install | - | +| `plugin_marketplaces` | Newline-separated marketplace Git URLs | - | +| `use_bedrock` | Use Amazon Bedrock with OIDC | `false` | +| `use_vertex` | Use Google Vertex AI with OIDC | `false` | +| `use_foundry` | Use Microsoft Foundry with OIDC | `false` | +| `path_to_claude_code_executable` | Optional path to custom Claude Code executable. WARNING: May cause issues if outdated | - | +| `path_to_bun_executable` | Optional path to custom Bun executable. WARNING: May cause issues if incompatible | - | +| `display_report` | Whether to display the Claude Code Report in GitHub Step Summary. Set to 'false' to disable when using custom formatting solutions. | `true` | +| `show_full_output` | Show full JSON output. WARNING: May expose secrets in public logs | `false` | \*Either `claude_code_oauth_token` or `anthropic_api_key` is required. @@ -158,13 +157,13 @@ Variables substituted via `envsubst` at runtime: ### Action Outputs -| Output | Description | -| ------------------- | ---------------------------------------------------------------- | -| `execution_file` | Path to Claude Code execution output | -| `branch_name` | The branch created by Claude Code for this execution | -| `github_token` | The GitHub token used by the action (Claude App token if available). **Sensitive** — do not log or upload as an artifact. | +| Output | Description | +| ------------------- | -------------------------------------------------------------------------------------------------------------------------------- | +| `execution_file` | Path to Claude Code execution output | +| `branch_name` | The branch created by Claude Code for this execution | +| `github_token` | The GitHub token used by the action (Claude App token if available). **Sensitive** — do not log or upload as an artifact. | | `structured_output` | JSON string containing all structured output fields when `--json-schema` is provided in `claude_args`. Use `fromJSON()` to parse | -| `session_id` | Claude Code session ID that can be used with --resume | +| `session_id` | Claude Code session ID that can be used with --resume | ## Examples From 9b128ae4c56144a3045f66389f0c741ab0973ae5 Mon Sep 17 00:00:00 2001 From: Joseph Mearman Date: Mon, 16 Feb 2026 13:21:42 +0000 Subject: [PATCH 5/5] fix: resolve empty mapping value lint error in upstream-sync workflow --- .github/workflows/upstream-sync.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/upstream-sync.yml b/.github/workflows/upstream-sync.yml index 443c398..a48458a 100644 --- a/.github/workflows/upstream-sync.yml +++ b/.github/workflows/upstream-sync.yml @@ -5,6 +5,7 @@ on: # Every Monday at 9 AM UTC - cron: "0 9 * * 1" workflow_dispatch: + inputs: {} permissions: contents: write