From 2eb725a338227eb0652924be7029879a1a030fdb Mon Sep 17 00:00:00 2001 From: Kyle Sexton <153232337+kyle-sexton@users.noreply.github.com> Date: Fri, 17 Jul 2026 11:06:26 -0400 Subject: [PATCH] ci: bump claude-review pin to df54d0e MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Step 3 of standards#159: restores failure-comment visibility (fix(claude-review): surface real review failures instead of a silent green). Upstream diff is otherwise additive-only (optional standards-ref input + two optional App secrets, unused here). The df54d0e runner-input contract is already in the synced runner-policy component. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01K3QehVwmWzkBLpKokNCkkt Co-authored-by: Claude Fable 5 (1M context) --- .github/workflows/claude-review.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index f2d8cb975..b45276263 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -44,7 +44,7 @@ jobs: contents: read # checkout + read the diff pull-requests: write # post review + track_progress tracking comment id-token: write # OIDC — mints the Claude GitHub App token - uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@4dbb0dfcc1fcbaf30e1a5573bf776af54e4e7e1a # 4dbb0df 2026-07-15 + uses: melodic-software/ci-workflows/.github/workflows/claude-review.yml@df54d0e8c899baa7e57344c3633f033129da6632 # df54d0e 2026-07-16 with: runner: ${{ needs.select-review.outputs.runner || 'ubuntu-24.04' }} # Pass only the one named secret (least privilege) rather than `secrets: