chore(deps): bump anthropics/claude-code-action from 1.0.189 to 1.0.193

[dependabot]

Summary

• Dependabot bump for anthropics/claude-code-action from 1.0.189 to 1.0.193.
• Scope is one pinned SHA in .github/workflows/claude.yml.
• Rebased onto current main during operational PR-board cleanup on 2026-08-24.

Validation

• pnpm lint — covered by CI
• pnpm typecheck — covered by CI
• pnpm test — covered by CI
• Additional validation run: E2E Smoke passed on rebased head 6fbc440; full CI rerun is required before merge.
• Candidate selection note: N/A, no sweep, cron, alarm, or candidate-selection logic changed.

Staging Verification (REQUIRED for all code changes — merge-blocking)

• N/A: no runtime application code changes. This PR changes only a GitHub Actions workflow action pin.

Staging Verification Evidence

N/A: no runtime application code changes. Staging is also explicitly out of scope for the 2026-08-24 PR-board cleanup task.

UI Compliance Checklist (Required for UI changes)

N/A: no UI files changed.

End-to-End Verification (Required for multi-component changes)

N/A: single GitHub Actions workflow dependency pin.

Data Flow Trace

N/A: no application data flow changed.

Untested Gaps

N/A: full relevant validation is GitHub CI for the workflow dependency update.

Post-Mortem (Required for bug fix PRs)

N/A: not a bug fix.

Specialist Review Evidence (Required for agent-authored PRs)

N/A: Dependabot-authored PR. No local specialist subagents were used because no application code was changed.

Exceptions (If any)

• Scope: Dependabot-authored workflow dependency update.
• Rationale: The preflight block was added after Dependabot opened the PR, before any merge decision or agent-authored code changes.
• Expiration: This PR only.

Agent Preflight (Required)

• Preflight completed before code changes

Classification

• external-api-change
• cross-component-change
• business-logic-change
• public-surface-change
• docs-sync-change
• security-sensitive-change
• ui-change
• infra-change

External References

Official documentation and release notes for anthropics/claude-code-action: https://github.com/anthropics/claude-code-action/releases

Codebase Impact Analysis

Scope is .github/workflows/claude.yml only. The change updates the pinned action SHA for the Claude workflow and does not affect app runtime code.

Documentation & Specs

N/A: no public docs or specs need updates for a GitHub Actions dependency pin.

Constitution & Risk Check

Checked Principle XI for hardcoded values. The pinned action SHA is intentional supply-chain pinning in a workflow file. Main risk is workflow behavior drift in the external action, covered by fresh CI before merge.

[codspeed-hq]

Merging this PR will not alter performance

✅ 6 untouched benchmarks

---

_{Comparing dependabot/github_actions/anthropics/claude-code-action-1.0.193 (6fbc440) with main (e8fa428)}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[simple-agent-manager]

Superseded by #1909 (claude-code-action 1.0.189→1.0.200, which includes the changes from this PR's 1.0.189→1.0.193 bump).

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.