Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
anthropics/claude-code-action	action	patch	v1.0.119 → v1.0.123	v1.0.133 (+9)
bun (source)	uses-with	patch	1.3.13 → 1.3.14
github/codeql-action	action	patch	v4.35.2 → v4.35.5	v4.36.0
trufflesecurity/trufflehog	action	patch	v3.95.2 → v3.95.3

---

Release Notes

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.123

Compare Source

What's Changed

• fix: allow , in branch names by @​bugbubug in #​1310
• fix: dereference symlinks when snapshotting sensitive paths to .claude-pr/ by @​matanbaruch in #​1186
• fix: exclude .claude-pr snapshot from git staging by @​cvan20191 in #​1277
• fix: write execution file when SDK throws by @​Jerry2003826 in #​1255
• fix: handle non-user actors (e.g. Copilot) in permission and actor checks by @​krislavten in #​1144
• chore: bump pinned Bun to 1.3.14 by @​ashwin-ant in #​1312

New Contributors

• @​bugbubug made their first contribution in #​1310
• @​matanbaruch made their first contribution in #​1186
• @​cvan20191 made their first contribution in #​1277
• @​Jerry2003826 made their first contribution in #​1255
• @​krislavten made their first contribution in #​1144

Full Changelog: anthropics/claude-code-action@v1...v1.0.123

v1.0.122

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.122

v1.0.121

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.121

v1.0.120

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.120

oven-sh/bun (bun)

v1.3.14: Bun v1.3.14

Compare Source

To install Bun v1.3.14

curl -fsSL https://bun.sh/install | bash

# or you can use npm
# npm install -g bun

Windows:

powershell -c "irm bun.sh/install.ps1|iex"

To upgrade to Bun v1.3.14:

bun upgrade

Read Bun v1.3.14's release notes on Bun's blog

Thanks to 11 contributors!

• @​190n
• @​alii
• @​carlsmedstad
• @​cirospaciari
• @​coleleavitt
• @​djs5008
• @​dylan-conway
• @​ig-ant
• @​Jarred-Sumner
• @​robobun
• @​sosukesuzuki

github/codeql-action (github/codeql-action)

v4.35.5

Compare Source

• We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #​3899
• For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #​3791
• If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #​3892
• Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #​3880

v4.35.4

Compare Source

• Update default CodeQL bundle version to 2.25.4. #​3881

v4.35.3

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
• Update default CodeQL bundle version to 2.25.3. #​3865

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.95.3

Compare Source

What's Changed

• Renamed AnypointOAuth2 detector's AnalysisInfo keys to make it consistent with its Analyzer by @​MuneebUllahKhan222 in #​4906
• Rename AnalysisInfo field to SecretParts on detectors.Result by @​mcastorina in #​4911
• Document SecretParts contract in detector-authoring docs by @​mcastorina in #​4912
• Add a static check for detectors that don't set SecretParts by @​mcastorina in #​4913
• Populate SecretParts on all detectors by @​mcastorina in #​4919
• Make checksecretparts required in CI by @​mcastorina in #​4921
• Deduplicate concurrent credential verification requests via singleflight by @​kashifkhan0771 in #​4314
• log non-critical chunk errors at V(2).Info instead of Error by @​johnelliott in #​4928
• [INS-320] Cloudinary detector by @​MuneebUllahKhan222 in #​4747
• ci: bump JS actions to Node 24 majors (incl. CodeQL v4 + WIF auth v3) by @​bryanbeverly in #​4933
• chore: bump golangci-lint-action v7 → v9 (Node 24) by @​bryanbeverly in #​4936
• Add default Content-Type: application/json header for custom detector verification request by @​MuneebUllahKhan222 in #​4947
• Make detector Result.SecretParts initialization stricter by @​mcastorina in #​4948
• Add Pinecone API key detector by @​dylanTruffle in #​4917
• adding customizable successRanges and rotatedRanges to customDetector by @​jordanTunstill in #​4892

Full Changelog: trufflesecurity/trufflehog@v3.95.2...v3.95.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vortex	Ready	Preview, Comment	May 29, 2026 2:35pm

[github-actions]

🔦 Lighthouse audit

URL	Perf	A11y	Best practices	SEO	Report
/	🟢 92	🟢 100	🟢 96	🟢 100	report
/blog	🟢 100	🟢 100	🟢 96	🟢 100	report
/blog/btrblocks-compressor	🟢 100	🟢 96	🟢 96	🟢 100	report

Run 26643406592 · 2026-05-29 14:36 UTC