chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 8ee41928ebaeffa75539e5e3ee0b6fa11b313398
Template hash: 2c33f158db7e
Sync branch: sync/workflows-2c33f158db7e
Consumer repo: stranske/Collab-Admin
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

• Chores
  • Updated the pinned version of the automated code review workflow to a newer release.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: a52ae448-d320-4c7b-9699-f50f752100e2

📥 Commits

Reviewing files that changed from the base of the PR and between efc3db6 and 9ba48d0.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)
• stranske/Template (auto-detected)

📜 Recent review details

⏰ Context from checks skipped due to timeout. (4)

• GitHub Check: check
• GitHub Check: check
• GitHub Check: Validate time logs
• GitHub Check: Validate config YAML files

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

{pyproject.toml,.github/workflows/*.{yml,yaml}}: Ensure coverage thresholds in pyproject.toml ([tool.coverage.report] fail_under) match the coverage-min settings in CI workflow files to avoid threshold conflicts
The Manager-Database repository has a coverage threshold of 75%

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

When a GitHub Actions workflow fails with startup_failure, check for invalid YAML syntax, top-level permissions: blocks on workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main to match first-party consumer defaults, unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows, stranske/Template

Linked repositories findings

stranske/Workflows

• .github/sync-manifest.yml:122-126 lists .github/workflows/maint-76-claude-code-review.yml as a synced template source with description “Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch.” This confirms the updated workflow is template-driven and part of the sync boundary. [::stranske/Workflows::]

stranske/Template

• .github/workflows/maint-76-claude-code-review.yml:188-194 uses anthropics/claude-code-action@74eedf1a1892082d619c3edb66b9402da6520e7f # v1 in the Run Claude Code Review step. This is the direct consumer pinned by the sync and the exact line affected by the SHA bump. [::stranske/Template::]

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: 🔒 Security & Privacy

Valid v1 pin; no action needed.

---

📝 Walkthrough

Walkthrough

The workflow updates the pinned anthropics/claude-code-action SHA used by the claude-review job. No other workflow logic, inputs, conditions, or outputs change.

Changes

Claude Code Review workflow pin

Layer / File(s)	Summary
Pinned action SHA update .github/workflows/maint-76-claude-code-review.yml	The claude-review job now references a newer pinned anthropics/claude-code-action commit SHA.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Collab-Admin#829: Updates the same workflow by changing the pinned anthropics/claude-code-action commit SHA.
• stranske/Collab-Admin#843: Also changes the pinned anthropics/claude-code-action SHA in .github/workflows/maint-76-claude-code-review.yml.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the automated sync of GitHub workflow templates and matches the main change in the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sync/workflows-2c33f158db7e

---

_{Comment @coderabbitai help to get the list of available commands.}