chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch

Files Skipped

• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: f329dbdf3612922fab25b8d002b802c5f3ef7186
Template hash: 2dc5f6ceac12
Sync branch: sync/workflows-2dc5f6ceac12
Consumer repo: stranske/Template
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

• Chores
  • Updated code review automation tool configuration in the CI/CD pipeline.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 885f1f0c-31d5-459b-928f-d746fc3d87cd

📥 Commits

Reviewing files that changed from the base of the PR and between aef81de and 4d162e3.

📒 Files selected for processing (1)

• .github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

• GitHub Check: guard

🧰 Additional context used

📓 Path-based instructions (3)

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

.github/workflows/**/*.{yml,yaml}: Ensure coverage threshold settings in GitHub Actions workflow files for coverage-min match the [tool.coverage.report] fail_under setting in pyproject.toml, as the lower value will be the effective threshold
For startup_failure in GitHub Actions workflows with zero jobs, check for invalid YAML syntax, top-level permissions: blocks in workflow_call reusable workflows (which conflicts with caller permissions), invalid permission scopes, or circular workflow references

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context stranske/Workflows

Perfect! I now have enough information to provide a comprehensive research summary. Let me compile the findings.

Linked repositories findings

stranske/Workflows

Workflow File Location and Context:
The workflow being synced is defined at templates/consumer-repo/.github/workflows/maint-76-claude-code-review.yml in the source Workflows repository. [::stranske/Workflows::]

Sync Configuration:
The workflow is declared in .github/sync-manifest.yml (line 122-123) as a consumer-synced workflow with the description: "Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch". [::stranske/Workflows::]

Action Update Details:
The change updates the anthropics/claude-code-action pin in the claude-review job (line 189-202) from a previous commit to 80b31826338489861333dc17217865dfe8085cdc marked as # v1. The action inputs remain unchanged:

• claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
• allowed_bots: '*'
• claude_args: --max-turns 8
• plugin_marketplaces: https://github.com/anthropics/claude-code.git
• plugins: code-review@claude-code-plugins
• prompt: /code-review:code-review ... [::stranske/Workflows::]

Associated Commit:
The update is tracked in commit f329dbd (chore: update Claude review action digest #2523) with the message indicating automated Codex Automation co-authorship. [::stranske/Workflows::]

Sync Impact:
The workflow is synced to consumer repositories without a create_only restriction in the sync manifest, meaning this update will propagate to all existing consumer repositories that have adopted this workflow. No repository-specific customizations or special sync modes (like overwrite restrictions) apply to this workflow. [::stranske/Workflows::]

No Breaking Changes:

• The workflow logic, job structure, and trigger conditions remain unchanged
• No modifications to action inputs or configuration
• The v1 version tag indicates stable release compatibility
• Multiple related PRs in the Template repository show this pattern of updates is routine and non-breaking [::stranske/Workflows::]

🔇 Additional comments (1)

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

---

📝 Walkthrough

Walkthrough

The workflow file .github/workflows/maint-76-claude-code-review.yml updates the pinned commit hash for the anthropics/claude-code-action action in the claude-review job from 30544b to 80b318. No other inputs or logic are changed.

Changes

Claude Code Action Pin Update

Layer / File(s)	Summary
Update claude-code-action commit hash .github/workflows/maint-76-claude-code-review.yml	The uses: reference for anthropics/claude-code-action in the claude-review job is updated to a newer pinned commit hash; all step inputs remain unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• stranske/Template#805: Updates the same claude-review job step in the same workflow file by changing the anthropics/claude-code-action pinned commit hash with no other modifications.
• stranske/Template#823: Changes the identical uses: SHA for anthropics/claude-code-action in .github/workflows/maint-76-claude-code-review.yml without altering any step logic.
• stranske/Template#850: Updates the same Run Claude Code Review step to pin anthropics/claude-code-action to a different commit hash, matching this PR's change pattern exactly.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: sync workflow templates' accurately describes the main change - this is an automated workflow synchronization PR that updates workflow files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sync/workflows-2dc5f6ceac12

---

_{Comment @coderabbitai help to get the list of available commands.}

[stranske-keepalive]

Automated Status Summary

Head SHA: 132b9ee
Latest Runs: ⏳ pending — Gate
Required: core tests (3.12): ⏳ pending, core tests (3.13): ⏳ pending, docker smoke: ⏳ pending, gate: ⏳ pending

Workflow / Job	Result	Logs
(no jobs reported)	⏳ pending	—

Coverage Overview

• Coverage history entries: 0

Updated automatically; will refresh on subsequent CI/Docker completions.

---

Keepalive checklist

Scope

No scope information available

Tasks

• No tasks defined

Acceptance criteria

• No acceptance criteria defined