Bump the github-actions group across 1 directory with 2 updates

[dependabot]

Bumps the github-actions group with 2 updates in the / directory: azure/login and anthropics/claude-code-action.

Updates azure/login from 3.0.0 to 3.0.1

Release notes

Sourced from azure/login's releases.

Azure Login Action v3.0.1

What's Changed

• Escape single quotes in PowerShell login script inputs by @​MaddyMicrosoft in Azure/login#599

Full Changelog: https://github.com/Azure/login/commits/v3.0.1

Commits

• f5d393a Merge remote-tracking branch 'origin/master' into releases/v3.0.1
• e8cd11f Replacing hardcoded version v2 with v3 (#603)
• 73730b8 prepare release v3.0.1
• f4dcb80 Escape single quotes in PowerShell login script inputs (#599)
• e82415a Add IDE files to .gitignore (#597)
• a842007 Update CODEOWNERS (#598)
• 9dfca58 use the latest auzre/powershell@v3 (#581)
• See full diff in compare view

Updates anthropics/claude-code-action from 1.0.183 to 1.0.190

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.190

Full Changelog: anthropics/claude-code-action@v1...v1.0.190

v1.0.189

Full Changelog: anthropics/claude-code-action@v1...v1.0.189

v1.0.188

What's Changed

• Enforce max-turn limits from claude_args by @​ulofiai in anthropics/claude-code-action#1607
• fix: handle null files field from GraphQL on very large PRs by @​leepokai in anthropics/claude-code-action#1593
• fix: support labeled action for pull_request events in track_progress by @​takakisatojp in anthropics/claude-code-action#1586
• fix: match label_trigger case-insensitively by @​sahilempire in anthropics/claude-code-action#1576
• docs: fix broken Bedrock anchor in cloud-providers.md by @​shoemoney in anthropics/claude-code-action#1579
• docs: replace removed base-action inputs with claude_args and settings by @​fallintoplace in anthropics/claude-code-action#1550
• fix(cache): disable setup-bun cache to avoid 5-retry HTML-error burn by @​necofuryai in anthropics/claude-code-action#1580
• ci: pass base-action tool restrictions through claude_args by @​fallintoplace in anthropics/claude-code-action#1552
• fix(mcp): stop retrying deterministic reference update failures by @​fallintoplace in anthropics/claude-code-action#1551
• fix: expose conclusion as a root action output by @​fallintoplace in anthropics/claude-code-action#1549
• fix(branch): validate generated branch name under commit signing by @​rishavnaskar in anthropics/claude-code-action#1582
• fix(branch): collapse empty path segments in branch_name_template by @​NickNojiri in anthropics/claude-code-action#1539

New Contributors

• @​ulofiai made their first contribution in anthropics/claude-code-action#1607
• @​leepokai made their first contribution in anthropics/claude-code-action#1593
• @​takakisatojp made their first contribution in anthropics/claude-code-action#1586
• @​sahilempire made their first contribution in anthropics/claude-code-action#1576
• @​shoemoney made their first contribution in anthropics/claude-code-action#1579
• @​fallintoplace made their first contribution in anthropics/claude-code-action#1550
• @​necofuryai made their first contribution in anthropics/claude-code-action#1580
• @​rishavnaskar made their first contribution in anthropics/claude-code-action#1582

Full Changelog: anthropics/claude-code-action@v1...v1.0.188

v1.0.187

What's Changed

• Redact common credential patterns from published run output by @​ashwin-ant in anthropics/claude-code-action#1595
• Scope the config snapshot to files inside the working tree by @​ashwin-ant in anthropics/claude-code-action#1596
• Run checkout auth cleanup when API commit signing is enabled by @​ashwin-ant in anthropics/claude-code-action#1597

Full Changelog: anthropics/claude-code-action@v1...v1.0.187

v1.0.186

What's Changed

• Invoke the formatter directly from the format hook by @​ashwin-ant in anthropics/claude-code-action#1594

Full Changelog: anthropics/claude-code-action@v1...v1.0.186

v1.0.185

... (truncated)

Commits

• 5ef2e55 chore: bump Claude Code to 2.1.227 and Agent SDK to 0.3.227
• 6b082c4 chore: bump Claude Code to 2.1.226 and Agent SDK to 0.3.226
• 7ff6806 chore: bump Claude Code to 2.1.225 and Agent SDK to 0.3.225
• 751e003 fix(branch): collapse empty path segments in branch_name_template (#1539)
• b704dd3 fix(branch): validate generated branch name under commit signing (#1582)
• ecf573b fix: expose conclusion output (#1549)
• 7764306 fix: stop retrying deterministic ref updates (#1551)
• 5dd098c ci: pass allowed tools through claude args (#1552)
• 4c4309a fix(cache): disable setup-bun cache to avoid 5-retry HTML-error burn (#1580)
• c4190db docs: update base action inputs (#1550)
• Additional commits viewable in compare view

[potatoqualitee]

@claude a prior commit was supposed to fix this, that if the tokens arent available for dependabot then dont run the test

[claude]

Claude finished @potatoqualitee's task in 4m 6s —— View job

---

Investigated the Azure Migration Tests failure

• Gather context on the request
• Investigate whether a "skip test if tokens unavailable for dependabot" fix exists for this workflow
• Determine why CI is failing for this dependabot PR
• Report findings

What's happening

CI for this PR is 9/10 green — the one failure is Run Azure Migration Tests, failing at the "Authenticate existing Azure CI identity" step (.github/workflows/azure-migration-tests.yml:125-128):

##[error]Login failed with Error: Using auth-type: SERVICE_PRINCIPAL. Not all values are present.
Ensure 'client-id' and 'tenant-id' are supplied.

secrets.VMSS_AZURE_CREDENTIALS came through empty. This is expected: GitHub does not forward repository Actions secrets to workflow runs authored by dependabot[bot] (only secrets explicitly configured as Dependabot secrets are available to it), so any job that needs real Azure credentials will always fail this way on a dependabot push.

This workflow triggers here specifically because its paths: list includes .github/workflows/azure-migration-tests.yml itself (line 20) — and this PR's version bump touches that exact line via the azure/login pin update, so the heavy Azure integration job runs even though nothing test-relevant changed.

About the "prior commit" fix

I checked the current azure-migration-tests.yml and every related workflow (ci-azure.yml, ci-azure-supersede.yml, integration-tests*.yml, gallery.yml, xplat-import.yml) for an actor/secret guard (github.actor != 'dependabot[bot]', empty-secret check, etc.). No such guard exists in any of them today. The fix you're recalling did land in ci-azure.yml (its authorize job governs the self-hosted maintainer/community pool routing — that's why ci-azure [pool:dependabot[bot]] shows green above), but that's a different workflow with different needs; it doesn't touch cloud secrets. azure-migration-tests.yml never received an equivalent guard, so it still hard-fails for dependabot pushes.

Why I haven't pushed a fix

Editing files under .github/workflows/ is outside what my GitHub App permissions allow. The change needed is small — add a job-level condition so the job is skipped (not failed) when the actor is dependabot[bot], consistent with the actor-check style already used in claude-code-review.yml:13 and runner-boost.yml:18:

jobs:
  azure-migration-tests:
    if: github.actor != 'dependabot[bot]'
    env:
      SMODefaultModuleName: dbatools
    runs-on: ubuntu-latest
    timeout-minutes: 75

That one-line addition to .github/workflows/azure-migration-tests.yml (right after the azure-migration-tests: job key, alongside the existing env:/runs-on:/timeout-minutes: lines) would resolve this for future dependabot GitHub Actions bumps. Someone with workflow-write permission will need to apply it directly.