Skip to content

Fix Claude review steps in ClauDependabot workflow #22

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
danielorbach merged 3 commits into from
Mar 17, 2026
Merged

Fix Claude review steps in ClauDependabot workflow #22

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
557c16c
github: allow Claude to read checked-out files in review steps
danielorbach Mar 12, 2026
7001f34
github: enable display_report for Claude review steps
danielorbach Mar 12, 2026
cd5a35e
github: skip duplicate Claude reviews on re-runs
danielorbach Mar 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/workflows/claudependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,6 +73,7 @@ jobs:
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
allowed_bots: dependabot
display_report: true
prompt: |
This is a Dependabot PR for a minor version update.

Expand All @@ -83,6 +84,11 @@ jobs:

Use `gh pr diff` and `gh pr view` to review the changes.

Before reviewing, check whether you have already reviewed this PR
by running `gh pr view --json reviews`. If a prior approval from
you exists and the diff has not materially changed, skip the review
and exit early.

Minor updates should be backwards-compatible. However, for v0.x
dependencies, minor bumps may contain breaking changes per semver.
Review those with extra caution.
Expand All @@ -92,6 +98,7 @@ jobs:

Use: gh pr review --approve --body "your message"
claude_args: |
--allowedTools "Read,Glob,Grep"
--allowedTools "Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr review:*)"
--allowedTools "Bash(gh issue:*),Bash(gh search:*),Bash(gh run:*),Bash(gh workflow:*),Bash(gh release:*)"
--allowedTools "Bash(go:*),WebFetch,WebSearch"
Expand All @@ -103,6 +110,7 @@ jobs:
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
allowed_bots: dependabot
display_report: true
prompt: |
This is a Dependabot PR for a MAJOR version update.

Expand All @@ -113,6 +121,12 @@ jobs:

Use `gh pr diff` and `gh pr view` to review the changes.

Before reviewing, check whether you have already reviewed this PR
by running `gh pr view --json reviews`. If a prior review comment
from you exists, compare your new analysis against it. If the
conclusions are substantially the same, skip posting and exit early.
Only post a new review if your analysis has materially changed.

Major updates may have breaking changes. Please:

1. Fetch the dependency's release page and CHANGELOG to understand what changed
Expand All @@ -128,6 +142,7 @@ jobs:
Use `gh pr review --comment` to post your analysis and any suggested code changes.
IMPORTANT: Place all parameters AFTER --comment (e.g., `gh pr review --comment --body "..." <PR_URL>`).
claude_args: |
--allowedTools "Read,Glob,Grep"
--allowedTools "Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr review --comment:*),Bash(gh pr review -c:*)"
--allowedTools "Bash(gh issue:*),Bash(gh search:*),Bash(gh run:*),Bash(gh workflow:*),Bash(gh release:*)"
--allowedTools "Bash(go:*),WebFetch,WebSearch"
Expand Down
Loading