v1.2.0

1.2.0 (2026-09-04)

Bug Fixes

• generic: pass github_token in the direct example to skip OIDC App-token minting (6b49270)

Features

• generic: add direct-call example for generic mode (6f8ee76)
• generic: add generic mode with prompt_file input (cd20856)

v1.1.3

1.1.3 (2026-09-04)

Bug Fixes

• delete the progress comment once real output exists, dedupe reposts (886ec7c)
• never adopt an existing progress comment, only ever delete stale ones (ff58947)
• only reuse a terminal-failed progress comment, never a pending one (4b1647c)

v1.1.2

1.1.2 (2026-09-04)

Bug Fixes

• correct the Node version needed for unflagged type stripping (92886b8)
• raise engines.node floor to match lint-staged's own requirement (a27b95a)

Reverts

• Revert "chore: give CI jobs headroom for a slower npm ci under Node 24" (f6c75c4)
• Revert "chore: raise Node baseline to >=23.6" (2f77c3e)

v1.1.1

1.1.1 (2026-09-03)

Bug Fixes

• interactive: check the right actor per event, restore allowed_bots (9f48f86)
• interactive: correct a false safety claim about the deny list (b8f88e2)
• interactive: grant bare Bash instead of an enumerated allowlist (50bf557)
• interactive: skip bot-authored events before the trigger check (4be7e3f)

v1.1.0

1.1.0 (2026-09-03)

Bug Fixes

• lint: exclude the generated CHANGELOG.md from markdown lint (a86559a)
• prompts: exclude gh api from what counts as an issue-creation tool (e69ad48)
• prompts: make the out-of-scope issue-filing instruction mode-aware (4512030)

Features

• prompts: add a closing-keyword pass to the title/description fix (b36b935)
• prompts: add a Conduct section to interactive mode (794ae49)
• prompts: restore hallucinated-API and Streisand-artefact review checks (fd67916)

v1.0.0

1.0.0 (2026-09-03)

Bug Fixes

• action: allow gh api graphql commands in review mode (a8f17c5)
• action: use Claude App token by default for claude[bot] identity (db0bfe7)
• add the missing format-changelog semantic-release plugin (84bf62a)
• address review feedback on upstream-sync workflow (7c6a035)
• allow claude[bot] PRs to be reviewed (18c9049)
• always create PR instead of pushing directly to main (6cde541)
• clone target repo directly instead of using git remote (f150bdc)
• correct pr_number override gaps and triage prompt placeholder syntax (af53260)
• correct this repository's own dogfooding interactive trigger (7c264c0)
• prompts: add concrete gh pr edit example for description updates (6a979ef)
• prompts: avoid redundant PR description updates (f4f05ac)
• prompts: clarify PR description update instruction (ea53c9e)
• prompts: instruct bot to comment on PR when errors block execution (ae02f0f)
• prompts: remove label management and add PR title checking (0969afc)
• prompts: require API verification before flagging hallucinated APIs (0278704)
• prompts: require re-verification of prior technical claims during cleanup (7d6a60a)
• prompts: use dynamic bot identity for comment filtering (e1e7802)
• prompts: use static BOT_NAME instead of GraphQL identity query (7b3eb30)
• push directly to URL instead of using git remote (9b8a38c)
• remove duplicate display_report input and pass-through (09567a4)
• remove unnecessary Bash(date:*) from allowedTools (208c0e4)
• resolve empty mapping value lint error in upstream-sync workflow (c188114)
• restore mode's implicit default and claude_args as a full override (309a4ae)
• run the Dependabot review job from a trusted base-ref checkout (657fe90)
• simplify token handling to use adpeak token directly (5f36efe)
• sync: add workflows write permission (309e4c2)
• sync: correct remote reference in PR creation step (658a0ae)
• sync: improve workflow security and prevent loops (00db966)
• sync: push source/main directly to handle divergence (aa83a73)
• sync: simplify PR creation using gh API (a852eb4)
• sync: use conditional token generation to avoid multi-line output issue (6f96571)
• sync: use dynamic token selection for bidirectional support (1720dfe)
• sync: use gh api for PR creation to enable auto-merge (fbab103)
• sync: use GITHUB_TOKEN for source repo access (f8aaf24)
• sync: use organization mode for GitHub App token retrieval (65186e6)
• sync: use remote fetch instead of worktree for cross-repo sync (bd0a7c5)
• sync: use target org's GitHub App credentials for bidirectional sync (91888d0)
• triage: wire up triage_label and update_issue_body variables (e09400a)
• upstream-sync: allow shell utilities in Claude Code allowed tools (e2609c8)
• upstream-sync: improve upstream reference section in PR template (15756fe)
• upstream-sync: specify release.json field names in prompt (ed46f8d)
• use GraphQL viewer query instead of REST API (09a5d59)
• use unique directory name for target repo clone (dd2a4eb)
• workflow: grant permissions for reusable workflow (8e46213)
• workflow: handle empty directories and error responses in download script (3d8affc)
• workflow: pass APP_ID and APP_PRIVATE_KEY secrets to reusable workflow (006713f)
• workflows: convert space-separated tools to comma-separated (da5b290)
• workflow: scope App token to claude-code-action repo (90bdc7f)
• workflows: correct mode check from code-review to review (f9c4524)
• workflow: try ACTIONS_RUNTIME_TOKEN for cross-repo API access (45250c6)
• workflow: use GitHub API instead of checkout for shared prompts (24a9bff)
• workflow: use secrets: inherit for reusable workflow (9fa6914)

chore

• remove sync tooling superseded by direct consolidation (17025ea)

Features

• action: add upstream v1.0 pass-through inputs (a9971cb)
• action: pass BOT_NAME to prompt templates via envsubst (7e4acf4)
• add bidirectional sync workflow (7a55864)
• add release automation and Turborepo task caching (ba42065)
• add reusable workflows, Dependabot investigate-and-adapt pipeline, and updated examples (a73864c)
• add scheduled upstream sync workflow (529c2e2)
• bring action.yml to full feature parity with t...