Update GitHub Action Versions

[morisil]

GitHub Actions Version Updates

• anthropics/claude-code-action published a new release v1.0.153 on 2026-06-20T21:01:12Z

[claude]

Code Review

Overview

This PR updates anthropics/claude-code-action from v1.0.152 to v1.0.153 in two workflow files:

• .github/workflows/claude-code.yml
• .github/workflows/claude-code-review.yml

Analysis

Code Quality & Correctness ✅

• Both workflow files are updated consistently — no version drift between them.
• The change is minimal and surgical: only the action version line is touched.

Security Considerations ⚠️

• Pinning to a mutable tag (v1.0.153) rather than an immutable commit SHA means a tag could theoretically be force-pushed to point at different code. For security-sensitive workflows (especially ones with write permissions to contents, PRs, and issues like these), consider whether pinning to a full commit SHA (e.g. anthropics/claude-code-action@<sha>) is preferable. This is a general supply-chain hygiene note — not a blocker for a minor patch bump from a trusted upstream.
• These workflows already use CLAUDE_CODE_OAUTH_TOKEN from secrets, which is appropriate.

Process ✅

• The PR body correctly references the upstream release date and tag, giving a clear audit trail.
• The update is timely (released 2026-06-20, PR opened the same day).

Verdict

This is a routine, low-risk dependency bump with no logic changes. Safe to merge.