From 129e862d004f391a5dd2124c693fbf9d99893804 Mon Sep 17 00:00:00 2001 From: DJ Date: Tue, 31 Mar 2026 19:27:13 -0700 Subject: [PATCH 1/2] ci: skip Claude Code reviewer on Dependabot PRs The claude workflow fails on Dependabot PRs because secrets (CLAUDE_CODE_OAUTH_TOKEN) are not available to the dependabot actor. This blocks the dependabot auto-merge automation when claude is a required status check. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/claude.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index dbee527f..65480622 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -15,7 +15,8 @@ jobs: claude: if: >- (github.event_name == 'pull_request' && - github.event.pull_request.head.repo.full_name == github.repository) || + github.event.pull_request.head.repo.full_name == github.repository && + github.actor != 'dependabot[bot]') || (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@claude') && contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) || From 2ff1a97f0910b35e672f6c51fe4de63319b35396 Mon Sep 17 00:00:00 2001 From: DJ Date: Tue, 31 Mar 2026 19:52:38 -0700 Subject: [PATCH 2/2] ci: use PR author login instead of github.actor for Dependabot check github.actor reflects who triggered the workflow run (e.g. a maintainer reopening), not the PR author. Use github.event.pull_request.user.login for reliable Dependabot detection, consistent with dependabot-automerge.yml. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/claude.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 65480622..446e83e7 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -16,7 +16,7 @@ jobs: if: >- (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && - github.actor != 'dependabot[bot]') || + github.event.pull_request.user.login != 'dependabot[bot]') || (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@claude') && contains(fromJson('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association)) ||