Skip to content

ci: let Claude review approve Dependabot PRs + skip SonarCloud on bot PRs - #222

Merged
thomasluizon merged 1 commit into
mainfrom
fix/dependabot-ci-guards
Jun 23, 2026
Merged

ci: let Claude review approve Dependabot PRs + skip SonarCloud on bot PRs#222
thomasluizon merged 1 commit into
mainfrom
fix/dependabot-ci-guards

Conversation

@thomasluizon

@thomasluizon thomasluizon commented Jun 23, 2026

Copy link
Copy Markdown
Owner

Problem

main requires 1 approving review (only Build + Unit Tests are required checks). On Dependabot PRs the Claude review action errors — Workflow initiated by non-human actor: dependabot — so the bump never gets an approving review and stays BLOCKED. SonarCloud also fails (Dependabot PRs have no SONAR_TOKEN), though it's non-required.

Fix

  • claude-review.yml — add allowed_bots: "dependabot[bot]" so the bot reviews and approves Dependabot PRs, satisfying the required review.
  • sonarcloud.yml — skip the scan on dependabot[bot] (it can't read the token); non-required, so this only removes the red X.

Note on merging this PR

Because this PR edits claude-review.yml, the Claude action self-skips on it (GitHub requires the review workflow to match the default branch), so it can't self-approve. It needs an admin merge (enforce_admins is off). Once on main, future Dependabot PRs that don't touch claude-review.yml are auto-approved by the bot.

Paired with the identical fix in orbit-ui-mobile.

🤖 Generated with Claude Code

… PRs

main requires 1 approving review (only Build + Unit Tests are required checks). The Claude review action errored on Dependabot PRs ('non-human actor: dependabot'), so bumps never got an approval and stayed BLOCKED. Add allowed_bots: dependabot[bot] so the bot reviews and approves bot PRs, satisfying the required review.

Also guard the SonarCloud job with if: github.actor != 'dependabot[bot]' — Dependabot PRs run without SONAR_TOKEN so the scan fails; SonarCloud is non-required, so this just removes the red X.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@thomasluizon
thomasluizon force-pushed the fix/dependabot-ci-guards branch from 81e7e69 to ede2b94 Compare June 23, 2026 19:04
@thomasluizon thomasluizon changed the title ci: skip Claude review + SonarCloud on Dependabot PRs ci: let Claude review approve Dependabot PRs + skip SonarCloud on bot PRs Jun 23, 2026
@sonarqubecloud

Copy link
Copy Markdown

@thomasluizon
thomasluizon merged commit f96aaa2 into main Jun 23, 2026
7 checks passed
@thomasluizon
thomasluizon deleted the fix/dependabot-ci-guards branch June 23, 2026 19:12
thomasluizon added a commit that referenced this pull request Jun 26, 2026
…ggestion (#222)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
thomasluizon added a commit that referenced this pull request Jun 26, 2026
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
thomasluizon added a commit that referenced this pull request Jun 26, 2026
…onflicts (#222)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
thomasluizon added a commit that referenced this pull request Jun 26, 2026
* feat(api): AI reschedule suggestion for overdue habits (#222)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(api): add query validator + lowercase cache key for reschedule suggestion (#222)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(api): resolve reschedule userToday via IUserDateService (#222)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant