chore(deps): update github-actions non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anthropics/claude-code-action	action	patch	v1.0.183 → v1.0.189	v1.0.193 (+3)
crate-ci/typos	action	minor	v1.48.0 → v1.49.0
github/codeql-action	action	patch	v4.37.4 → v4.37.6	v4.37.7

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.189

Compare Source

v1.0.188

Compare Source

v1.0.187

Compare Source

What's Changed

• Redact common credential patterns from published run output by @​ashwin-ant in #​1595
• Scope the config snapshot to files inside the working tree by @​ashwin-ant in #​1596
• Run checkout auth cleanup when API commit signing is enabled by @​ashwin-ant in #​1597

Full Changelog: anthropics/claude-code-action@v1...v1.0.187

v1.0.186

Compare Source

v1.0.185

Compare Source

What's Changed

• Derive trigger timestamps for issues and pull_request events by @​ashwin-ant in #​1592
• Pin bun config for MCP server processes by @​ashwin-ant in #​1589
• Match downloaded images to their source URLs by asset identifier by @​ashwin-ant in #​1588
• Check collaborator permissions for workflow_run events by @​ashwin-ant in #​1590

Full Changelog: anthropics/claude-code-action@v1...v1.0.185

v1.0.184

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.184

crate-ci/typos (crate-ci/typos)

v1.49.0

Compare Source

[1.49.0] - 2026-08-03

Features

• Updated the dictionary with the July 2026 changes

github/codeql-action (github/codeql-action)

v4.37.6

Compare Source

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070

v4.37.5

Compare Source

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #​4061

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "on saturday,before 1pm on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

⚡ Performance Benchmark

Latest commit:	80b7f14 chore(deps): update github-actions non-major dependencies
Status:	✅ Benchmark complete!
Ubuntu:	0.85s (±0.02s) → 0.85s (±0.03s) · -0.01s (-0.7%)
macOS:	0.69s (±0.14s) → 0.66s (±0.16s) · -0.03s (-3.6%)
Windows:	1.04s (±0.01s) → 1.04s (±0.02s) · -0.00s (-0.3%)

Details

• Packing the repomix repository with node bin/repomix.cjs
• Warmup: 2 runs (discarded), interleaved execution
• Measurement: 20 runs / 30 on macOS (median ± IQR)
• Workflow run

History

5af6fe7 chore(deps): update github-actions non-major dependencies

Ubuntu:	0.83s (±0.02s) → 0.84s (±0.02s) · +0.00s (+0.2%)
macOS:	0.50s (±0.05s) → 0.49s (±0.06s) · -0.01s (-1.4%)
Windows:	1.16s (±0.02s) → 1.15s (±0.02s) · -0.01s (-0.4%)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.87%. Comparing base (e3b15a4) to head (80b7f14).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1802   +/-   ##
=======================================
  Coverage   91.87%   91.87%           
=======================================
  Files         133      133           
  Lines        5574     5574           
  Branches     1365     1365           
=======================================
  Hits         5121     5121           
  Misses        453      453           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[yamadashy]

Non-major bot dependency update. Commits GitHub-verified, diff confined to dependency files, supply-chain scan clean, release past cooldown (Renovate minimumReleaseAge: 7 days), CI green. 🤖