chore(deps): update github-actions non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
Homebrew/actions (changelog)	action	digest	ac93e64 → 6eaeff8
anthropics/claude-code-action	action	patch	v1.0.119 → v1.0.123	v1.0.133 (+9)
crate-ci/typos	action	patch	v1.46.1 → v1.46.2	v1.46.3
github/codeql-action	action	patch	v4.35.4 → v4.35.5	v4.36.0
zizmorcore/zizmor-action	action	patch	v0.5.3 → v0.5.6

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.123

Compare Source

What's Changed

• fix: allow , in branch names by @​bugbubug in #​1310
• fix: dereference symlinks when snapshotting sensitive paths to .claude-pr/ by @​matanbaruch in #​1186
• fix: exclude .claude-pr snapshot from git staging by @​cvan20191 in #​1277
• fix: write execution file when SDK throws by @​Jerry2003826 in #​1255
• fix: handle non-user actors (e.g. Copilot) in permission and actor checks by @​krislavten in #​1144
• chore: bump pinned Bun to 1.3.14 by @​ashwin-ant in #​1312

New Contributors

• @​bugbubug made their first contribution in #​1310
• @​matanbaruch made their first contribution in #​1186
• @​cvan20191 made their first contribution in #​1277
• @​Jerry2003826 made their first contribution in #​1255
• @​krislavten made their first contribution in #​1144

Full Changelog: anthropics/claude-code-action@v1...v1.0.123

v1.0.122

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.122

v1.0.121

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.121

v1.0.120

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.120

crate-ci/typos (crate-ci/typos)

v1.46.2

Compare Source

[1.46.2] - 2026-05-16

Fixes

• Don't correct to criterias
• Don't correct to replaceables

github/codeql-action (github/codeql-action)

v4.35.5

Compare Source

• We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
• For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
• If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
• Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

Compare Source

• 1.25.2 is now available via the action
• 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

• 1.25.0 is now available via the action
• 1.25.0 is now the default version of zizmor used by the action

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

⚡ Performance Benchmark

Latest commit:	3eb4f77 chore(deps): update github-actions non-major dependencies
Status:	✅ Benchmark complete!
Ubuntu:	0.66s (±0.01s) → 0.66s (±0.02s) · +0.00s (+0.2%)
macOS:	0.65s (±0.24s) → 0.64s (±0.24s) · -0.01s (-1.2%)
Windows:	0.89s (±0.02s) → 0.88s (±0.02s) · -0.00s (-0.5%)

Details

• Packing the repomix repository with node bin/repomix.cjs
• Warmup: 2 runs (discarded), interleaved execution
• Measurement: 20 runs / 30 on macOS (median ± IQR)
• Workflow run

History

c94f50b chore(deps): update github-actions non-major dependencies

Ubuntu:	0.69s (±0.02s) → 0.69s (±0.01s) · +0.00s (+0.0%)
macOS:	0.37s (±0.02s) → 0.37s (±0.02s) · -0.00s (-0.3%)
Windows:	0.96s (±0.01s) → 0.96s (±0.02s) · +0.00s (+0.0%)

[cloudflare-workers-and-pages]

Deploying repomix with    Cloudflare Pages

Latest commit:	3eb4f77
Status:	✅  Deploy successful!
Preview URL:	https://82c0a358.repomix.pages.dev
Branch Preview URL:	https://renovate-github-actions-non.repomix.pages.dev

View logs

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.86%. Comparing base (746d0fd) to head (3eb4f77).
⚠️ Report is 11 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1591   +/-   ##
=======================================
  Coverage   90.86%   90.86%           
=======================================
  Files         121      121           
  Lines        4683     4683           
  Branches     1088     1088           
=======================================
  Hits         4255     4255           
  Misses        428      428           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.