From d596a00c86a9234acd073d1c844a0caf238443f2 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sun, 24 May 2026 14:44:23 +0000
Subject: [PATCH 1/2] chore(deps): update github actions

---
 .github/actions/build-upstream/action.yml | 2 +-
 .github/workflows/upgrade-deps.yml        | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/actions/build-upstream/action.yml b/.github/actions/build-upstream/action.yml
index c26e6f5c8c..a2dcab8ca0 100644
--- a/.github/actions/build-upstream/action.yml
+++ b/.github/actions/build-upstream/action.yml
@@ -83,7 +83,7 @@ runs:
 
     - name: Install cargo-zigbuild (musl)
       if: steps.cache-restore.outputs.cache-hit != 'true' && contains(inputs.target, 'musl')
-      uses: taiki-e/install-action@e1c4cd42111751368541a7cb5db3522bd1f846a4 # v2.78.0
+      uses: taiki-e/install-action@65851e10cd6c377f11a60e600abc07cb08643468 # v2.79.3
       with:
         tool: cargo-zigbuild
 
diff --git a/.github/workflows/upgrade-deps.yml b/.github/workflows/upgrade-deps.yml
index 590f709c42..8a9508fe1f 100644
--- a/.github/workflows/upgrade-deps.yml
+++ b/.github/workflows/upgrade-deps.yml
@@ -63,7 +63,7 @@ jobs:
       - name: Check upgrade dependencies
         id: check-upgrade-dependencies
         timeout-minutes: 180
-        uses: anthropics/claude-code-action@51ea8ea73a139f2a74ff649e3092c25a904aed7e # v1.0.123
+        uses: anthropics/claude-code-action@20c8abf165d5f85ab3fc970db9498436377dc9d1 # v1.0.128
         env:
           RELEASE_BUILD: 'true'
         with:
@@ -174,7 +174,7 @@ jobs:
       - name: Enhance PR description with Claude
         id: enhance-pr-description
         continue-on-error: true
-        uses: anthropics/claude-code-action@51ea8ea73a139f2a74ff649e3092c25a904aed7e # v1.0.123
+        uses: anthropics/claude-code-action@20c8abf165d5f85ab3fc970db9498436377dc9d1 # v1.0.128
         with:
           claude_code_oauth_token: ${{ secrets.ANTHROPIC_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}

From 0bd08417f44c27f7cf23b887ec04346b9e8cf1ac Mon Sep 17 00:00:00 2001
From: Boshen <boshenc@gmail.com>
Date: Sun, 24 May 2026 23:13:13 +0800
Subject: [PATCH 2/2] chore(deps): bump oxc-project/security-action to v1.0.6

---
 .github/workflows/security.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 1923ee8ebb..9e6b0c0c63 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -45,4 +45,4 @@ jobs:
         shell: bash
         run: git remote remove origin
 
-      - uses: oxc-project/security-action@77e230508eccbb400b23746dab6c573a8ea7483e # v1.0.5
+      - uses: oxc-project/security-action@585c068c5601ae7fff88ff839d2cd0d2c742bf28 # v1.0.6