$ the-wire · showcase
claude-code-action pins the PR commit a run checks out
By RepoJournal · Filed · About Anthropic · Composed from the cited sources · methodology
The bulk of today's movement is enrollment and version sync, but one behavioral change in claude-code-action alters what a workflow run actually reads.
Pin the PR version a run checks out anthropics/claude-code-action
setupBranch now fetches the PR head by SHA (git checkout -B <headRefName> <headRefOid>) and verifies HEAD matches, instead of checking out the branch tip, and the run is skipped if the branch was updated after the triggering comment. To act on the latest version you mention Claude again; the head commit's push time comes from GET /repos/{owner}/{repo}/activity.
Enrol Bitcoin Core anthropics/oss-scanner
The Bitcoin Core maintainer filed the project.yaml to bring Bitcoin Core under continuous scanning, ticking off maintainer status, terms acceptance, and local validation.
chore: bump Bun to 1.4.4 anthropics/claude-code-action
The action's installed Bun runtime moves from 1.3.14 to 1.4.4, with CI's previously pinned 1.2.12 and the pretier job's floating latest both aligned to 1.4.4 and @types/bun raised to 1.4.3. Dylan Conway notes no lockfile migration is needed: a non-frozen bun install handles it.
Sync from claude-code-action base-action@16f9f71 anthropics/claude-code-base-action
The base-action mirror picked up the claude-code-action sync that bumps Claude Code to 2.1.310 and Agent SDK to 0.3.310; claude-agent-sdk-python separately bumped its bundled CLI to the same 2.1.310.
Enroll WooCommerce PayPal Payments: WooCommerce payment gateway plugin anthropics/oss-scanner
The remaining long tail is enrollment and housekeeping: WooCommerce PayPal Payments and WooPayments were filed by the same maintainer, micronaut-security and OpenHuman were merged into the scan set, and mods, CHANGELOG, and feed updates landed on autopilot.
