build(deps): bump the github-actions group across 1 directory with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates in the / directory: anthropics/claude-code-action, aws-actions/configure-aws-credentials, astral-sh/setup-uv and actions/deploy-pages.

Updates anthropics/claude-code-action from 1.0.189 to 1.0.216

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.216

Full Changelog: anthropics/claude-code-action@v1.0.215...v1.0.216

v1.0.215

Full Changelog: anthropics/claude-code-action@v1.0.214...v1.0.215

v1.0.214

Full Changelog: anthropics/claude-code-action@v1.0.213...v1.0.214

v1.0.213

Full Changelog: anthropics/claude-code-action@v1.0.212...v1.0.213

v1.0.212

Full Changelog: anthropics/claude-code-action@v1.0.211...v1.0.212

v1.0.211

Full Changelog: anthropics/claude-code-action@v1.0.210...v1.0.211

v1.0.210

Full Changelog: anthropics/claude-code-action@v1.0.209...v1.0.210

v1.0.209

Full Changelog: anthropics/claude-code-action@v1.0.208...v1.0.209

v1.0.208

Full Changelog: anthropics/claude-code-action@v1.0.207...v1.0.208

v1.0.207

Full Changelog: anthropics/claude-code-action@v1.0.206...v1.0.207

v1.0.206

What's Changed

• chore: add .gitattributes to normalize line endings by @​MohammedAlkindi in anthropics/claude-code-action#1708
• fix: use paths in delete_files prompt example by @​WeAreResilience in anthropics/claude-code-action#1702
• fix: allow parentheses in valid branch names by @​YauheniPo in anthropics/claude-code-action#1710
• fix: bound download_job_log against a stalled log fetch by @​shoemoney in anthropics/claude-code-action#1719
• fix: encode branch names in GitHub links by @​Abdullah-Builds in anthropics/claude-code-action#1713

New Contributors

• @​MohammedAlkindi made their first contribution in anthropics/claude-code-action#1708
• @​YauheniPo made their first contribution in anthropics/claude-code-action#1710
• @​Abdullah-Builds made their first contribution in anthropics/claude-code-action#1713

Full Changelog: anthropics/claude-code-action@v1.0.205...v1.0.206

v1.0.205

Full Changelog: anthropics/claude-code-action@v1.0.203...v1.0.205

v1.0.204

Full Changelog: anthropics/claude-code-action@v1.0.202...v1.0.204

... (truncated)

Commits

• d75b94d chore: bump Claude Code to 2.1.261 and Agent SDK to 0.3.261
• ef8bb1e chore: bump Claude Code to 2.1.260 and Agent SDK to 0.3.260
• fa2b266 chore: bump Claude Code to 2.1.259 and Agent SDK to 0.3.259
• 8251c10 chore: bump Claude Code to 2.1.258 and Agent SDK to 0.3.258
• 781d62e chore: bump Claude Code to 2.1.257 and Agent SDK to 0.3.257
• 833fb0f chore: bump Claude Code to 2.1.252 and Agent SDK to 0.3.252
• a874e9e chore: bump Claude Code to 2.1.251 and Agent SDK to 0.3.251
• a60f3e1 chore: bump Claude Code to 2.1.250 and Agent SDK to 0.3.250
• e8c2d7c chore: bump Claude Code to 2.1.248 and Agent SDK to 0.3.248
• 70fec18 chore: bump Claude Code to 2.1.247 and Agent SDK to 0.3.247
• Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

• attach git credentials before Tag Major Version push (#1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

• release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

... (truncated)

Commits

• cbe3b39 chore(main): release 6.2.4 (#1942)
• 58065db chore(deps): bump js-yaml (#1944)
• 609df23 chore: Update dist
• aa65264 fix: account-ids handling, mask proxy as secret in logs (#1943)
• 7fdbbb8 chore: Update dist
• 3852440 fix: skip backoff sleep after the final retryAndBackoff attempt (#1937)
• c16f89b mention renamed repos use the new immutable identifiers (#1941)
• 9c362ee chore: Update dist
• d5f8da8 chore(deps): bump @​aws-sdk/client-sts from 3.1111.0 to 3.1116.0 (#1935)
• 2db2497 chore: Update dist
• Additional commits viewable in compare view

Updates astral-sh/setup-uv from 9.0.0 to 10.0.1

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

• Tolerate transient manifest timeouts @​arguile- (#1016)

🧰 Maintenance

• chore: update known checksums for 0.12.4 @github-actions[bot] (#1017)

📚 Documentation

• docs: update version references to v10.0.0 @github-actions[bot] (#1014)

v10.0.0 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

• pull_request_target
• workflow_run
• release

You can read the full reasoning in astral-sh/setup-uv#984

version: latest-known

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"
</tr></table> 

... (truncated)

Commits

• 20cfd1b chore: update known checksums for 0.12.4 (#1017)
• d73a0ca Tolerate transient manifest timeouts (#1016)
• ae3b92d docs: update version references to v10.0.0 (#1014)
• ae62891 chore(deps): roll up Dependabot updates (#1013)
• f9cdb47 Reject paths in .tool-versions (#1007)
• 4f6036f Require pull requests for Dependabot rollups (#1005)
• 8d6402c chore(deps): roll up Dependabot updates (#1004)
• 46f427b Read Python version from .tool-versions (#996)
• 8ed89c5 ci: pin Alpine container image (#995)
• 8473c7f chore(deps): roll up Dependabot updates (#994)
• Additional commits viewable in compare view

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog

• Add backoff and jitter to deployment polling @​yoannchaudet (#444)
• Improve deployment request test coverage @​adwitiyagoyal (#440)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits

• 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
• 7e97763 Validate deployment polling intervals
• 0143e11 Add backoff and jitter to deployment polling
• 5e98f10 Merge pull request #440 from actions/user/adwitiya
• 8b0625a Improve deployment request test coverage
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions