chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
• maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch
• artifact-cache/ (1 files): Restores, discovers, and caches workflow artifacts by daily, weekly, or run window

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: e8936e39e81572b9da4ccd6cd4fd9e92622f10e6
Template hash: cddea6f9d964
Sync branch: sync/workflows-cddea6f9d964
Consumer repo: stranske/Collab-Admin
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

• Chores
  • Updated pinned versions for a few automation steps used in GitHub workflows.
  • Refreshed cache and code review action references to newer approved revisions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 38f65c54-7020-41ee-98a0-0c71473640c1

📥 Commits

Reviewing files that changed from the base of the PR and between ba20e6f and 21babdf.

📒 Files selected for processing (3)

• .github/actions/artifact-cache/action.yml
• .github/workflows/agents-auto-pilot.yml
• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)
• stranske/Template (auto-detected) → reviewed against open PR #878 sync/workflows-cddea6f9d964 instead of the default branch

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: Resolve review target

🧰 Additional context used

📓 Path-based instructions (6)

{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

{pyproject.toml,.github/workflows/*.{yml,yaml}}: Ensure coverage thresholds in pyproject.toml ([tool.coverage.report] fail_under) match the coverage-min settings in CI workflow files to avoid threshold conflicts
The Manager-Database repository has a coverage threshold of 75%

Files:

• .github/workflows/agents-auto-pilot.yml
• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

When a GitHub Actions workflow fails with startup_failure, check for invalid YAML syntax, top-level permissions: blocks on workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-auto-pilot.yml
• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main to match first-party consumer defaults, unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/agents-auto-pilot.yml
• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/agents-*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Synced workflows (agents-*.yml, autofix.yml) should be fixed in stranske/Workflows, not locally in the consumer repo.

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/agents-auto-pilot.yml
• .github/workflows/maint-76-claude-code-review.yml

{.github/workflows/agents-*.yml,.github/workflows/autofix.yml,.github/codex/**/*.{md,txt,prompt},**/*.sync.*}

📄 CodeRabbit inference engine (AGENTS.md)

Synced workflow files, agent prompts, scripts, and consumer docs should be fixed in stranske/Workflows through the sync manifest, not edited locally.

Files:

• .github/workflows/agents-auto-pilot.yml

🔀 Multi-repo context

Linked repositories findings

stranske/Workflows (inspected on current checked-out ref)

• tests/workflows/test_workflow_selftest_consolidation.py:479-505 — verifies the shared ./.github/actions/artifact-cache action is used by the self-test report cache. This confirms the cache action is consumed internally by workflow tests.
• docs/workflow-updates/README.md:5-20 and docs/workflow-updates/agents-auto-pilot-changes.yml:1 — document that agents-auto-pilot.yml should use the shared cache/install steps, so the action pin change sits in a documented shared workflow path.
• tests/workflows/test_workflow_agents_consolidation.py:182-220 — reads agents-auto-pilot.yml as a canonical workflow/template source, indicating this workflow is treated as a shared contract in-repo.

stranske/Template (inspected on refs/pull/878/head)

• tools/requirements-llm.txt:1 and docs/LABELS.md:220-274,585 — reference agents-auto-pilot.yml as the workflow that consumes the LLM dependency pins and label lifecycle docs.
• WORKFLOW_USER_GUIDE.md:1377-1378 — maps the template source for agents-auto-pilot.yml into consumer repos, confirming the workflow is synced downstream from this template branch.

🔇 Additional comments (3)

.github/actions/artifact-cache/action.yml (1)

62-62: LGTM!

.github/workflows/agents-auto-pilot.yml (1)

225-225: LGTM!

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

---

📝 Walkthrough

Walkthrough

The PR updates pinned GitHub Actions commit references in one reusable action and two workflows, changing the SHA for actions/cache@v6 and anthropics/claude-code-action.

Changes

CI action pins

Layer / File(s)	Summary
Cache action pins .github/actions/artifact-cache/action.yml, .github/workflows/agents-auto-pilot.yml	The Restore artifact cache and Cache pip (LLM requirements) steps update pinned actions/cache@v6 commit references.
Claude review action pin .github/workflows/maint-76-claude-code-review.yml	The claude-review step updates the pinned anthropics/claude-code-action commit reference.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Collab-Admin#896: Updates the same maint-76-claude-code-review.yml claude-review action pin.
• stranske/Collab-Admin#894: Also changes the pinned anthropics/claude-code-action reference in maint-76-claude-code-review.yml.
• stranske/Collab-Admin#843: Updates the same workflow action pin in maint-76-claude-code-review.yml.

Suggested labels

dependencies

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the automated sync of workflow templates and matches the workflow-only changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sync/workflows-cddea6f9d964

---

_{Comment @coderabbitai help to get the list of available commands.}