chore: sync workflow templates by stranske · Pull Request #385 · stranske/learning-management-system

stranske · 2026-06-26T02:34:14Z

Sync Summary

Files Updated

agents-guard.yml: Agents guard - enforces agents workflow protections (Health 45)
maint-76-claude-code-review.yml: Claude Code review (opt-in) - runs only on labeled PRs or manual dispatch

Files Skipped

pr-00-gate.yml: File exists and sync_mode is create_only
ci.yml: File exists and sync_mode is create_only
renovate.json: File exists and sync_mode is create_only
cross-repo-smoke.yml: File exists and sync_mode is create_only
llm_slots.json: None

Review Checklist

CI passes with updated workflows
No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: cd5687d7ae00a31b9cb6ddbf94cfb94c0e4fdf69
Template hash: 57b9e3dbcb23
Sync branch: sync/workflows-57b9e3dbcb23
Consumer repo: stranske/learning-management-system
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

Chores
- Updated pinned versions used by automated workflow steps.
- Kept workflow behavior unchanged while refreshing the underlying action revisions for more reliable runs.

Automated sync from stranske/Workflows Template hash: 57b9e3dbcb23 Changes synced from sync-manifest.yml

coderabbitai · 2026-06-26T02:34:31Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: c38ccaf6-656f-4a16-8aed-73ed8c5ad79c

📥 Commits

Reviewing files that changed from the base of the PR and between 3c3cd5e and 1042c40.

📒 Files selected for processing (2)

.github/workflows/agents-guard.yml
.github/workflows/maint-76-claude-code-review.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

stranske/Workflows (auto-detected)
stranske/Template (auto-detected) → reviewed against open PR #874 sync/workflows-57b9e3dbcb23 instead of the default branch

📜 Recent review details

⏰ Context from checks skipped due to timeout. (1)

GitHub Check: Resolve review target

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

Ensure coverage threshold values in pyproject.toml '[tool.coverage.report] fail_under' match the 'coverage-min' settings in workflow files; the lower threshold value will be the effective limit

Files:

.github/workflows/agents-guard.yml
.github/workflows/maint-76-claude-code-review.yml

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows with @main to match first-party consumer defaults, unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

.github/workflows/agents-guard.yml
.github/workflows/maint-76-claude-code-review.yml

.github/workflows/agents-*.{yml,yaml}

📄 CodeRabbit inference engine (CLAUDE.md)

Edit agents-*.yml files in stranske/Workflows instead of locally

Files:

.github/workflows/agents-guard.yml

**/.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

Reference reusable workflows from stranske/Workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

.github/workflows/agents-guard.yml
.github/workflows/maint-76-claude-code-review.yml

🔀 Multi-repo context

Linked repositories findings

stranske/Workflows

.github/actions/setup-api-client is treated as a pinned, cross-repo dependency in validation/tests: scripts/validate_workflow_yaml.py:20, tests/scripts/test_check_workflow_action_pins.py:83, and tests/workflows/test_setup_api_client_contract.py:7,29.
agents-guard.yml is covered by workflow policy/docs and tests: tests/workflows/test_agents_guard.py:662, docs/AGENTS_POLICY.md:13,37,68, docs/WORKFLOW_GUIDE.md:106, and docs/ci/WORKFLOW_SYSTEM.md:178,255.
The repo docs explicitly describe agents-guard.yml as relying on the shared API client/token balancer rather than a bespoke App-token mint (docs/WORKFLOW_GUIDE.md:106, docs/workflow-updates/workflow-checklist.md:24), so pin updates to setup-api-client affect a workflow with documented shared-contract expectations.

stranske/Template (inspected at `refs/pull/874/head`)

I did not find direct workflow/action file references for setup-api-client or claude-code-action in the checked-out branch files via search.
The branch only shows docs/guide references to agents-guard.yml and agents:allow-change (WORKFLOW_USER_GUIDE.md:168, docs/LABELS.md:131,201,622), which indicates the template still documents the guard workflow behavior but doesn’t expose a direct consumer reference to the pinned actions in the searched files.
config/template-drift-allowlist.txt:87-91 says the root and consumer guard workflows intentionally diverge and that consumer setup-api-client pins were refreshed to the Workflows a525e6e digest; that’s directly relevant context for any sync of agents-guard.yml-related pins.

🔇 Additional comments (2)

.github/workflows/agents-guard.yml (1)

114-114: LGTM!

Also applies to: 183-183

.github/workflows/maint-76-claude-code-review.yml (1)

192-192: LGTM!

📝 Walkthrough

Walkthrough

This PR updates pinned GitHub Action revisions in two workflow files: the agents guard fallback setup step and the Claude Code Review step.

Changes

Workflow pin updates

Layer / File(s)	Summary
Agents guard fallback pins `.github/workflows/agents-guard.yml`	The fallback API client setup step updates its pinned `stranske/Workflows/.github/actions/setup-api-client` revision in both `pull_request_target` and `pull_request` paths.
Claude Code Review pin `.github/workflows/maint-76-claude-code-review.yml`	The Run Claude Code Review step updates its pinned `anthropics/claude-code-action` revision.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

stranske/learning-management-system#347: Updates the same stranske/Workflows/.github/actions/setup-api-client pin in .github/workflows/agents-guard.yml.
stranske/learning-management-system#371: Updates the same anthropics/claude-code-action pin in .github/workflows/maint-76-claude-code-review.yml.
stranske/learning-management-system#381: Also changes the pinned anthropics/claude-code-action revision in the Claude Code Review workflow step.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: syncing workflow templates in the repository.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch sync/workflows-57b9e3dbcb23

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-06-26T02:35:21Z

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

github-actions · 2026-06-26T02:36:40Z

Workflow state fingerprint for Agents Gate Followups. Do not edit.

chore: sync workflow templates from Workflows repo

1042c40

Automated sync from stranske/Workflows Template hash: 57b9e3dbcb23 Changes synced from sync-manifest.yml

stranske added sync Automated sync from Workflows automated Automated sync from Workflows labels Jun 26, 2026

stranske temporarily deployed to agent-standard June 26, 2026 02:34 — with GitHub Actions Inactive

stranske had a problem deploying to agent-standard June 26, 2026 02:35 — with GitHub Actions Failure

stranske temporarily deployed to agent-standard June 26, 2026 02:35 — with GitHub Actions Inactive

stranske mentioned this pull request Jun 26, 2026

chore(deps): update stranske/workflows digest to a525e6e #368

Closed

1 task

stranske merged commit f4eb33f into main Jun 26, 2026
78 of 85 checks passed

stranske deleted the sync/workflows-57b9e3dbcb23 branch June 26, 2026 04:34

Navigation Menu

chore: sync workflow templates - #385

chore: sync workflow templates#385
stranske merged 1 commit into
mainfrom
sync/workflows-57b9e3dbcb23

stranske commented Jun 26, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jun 26, 2026 •

edited

Loading

Linked repositories findings

stranske/Workflows

stranske/Template (inspected at `refs/pull/874/head`)

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Uh oh!

github-actions Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 26, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

stranske commented Jun 26, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Sync Summary

Files Updated

Files Skipped

Review Checklist

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Linked repositories findings

stranske/Workflows

stranske/Template (inspected at refs/pull/874/head)

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Uh oh!

github-actions Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

stranske commented Jun 26, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 26, 2026 •

edited

Loading

stranske/Template (inspected at `refs/pull/874/head`)

github-actions Bot commented Jun 26, 2026 •

edited

Loading

github-actions Bot commented Jun 26, 2026 •

edited

Loading