From b5f7fc446c043a15427732a83e8468f55f32b2ef Mon Sep 17 00:00:00 2001 From: Nick Tindle Date: Sun, 8 Feb 2026 17:01:28 -0600 Subject: [PATCH] fix(ci): allow dependabot[bot] in Claude dependabot review workflow The Claude Code Action rejects bot actors by default. Adding dependabot[bot] to allowed_bots so the automated dependency review can run on Dependabot PRs. --- .github/workflows/claude-dependabot.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/claude-dependabot.yml b/.github/workflows/claude-dependabot.yml index ff6935dc2d..6fb052e8f3 100644 --- a/.github/workflows/claude-dependabot.yml +++ b/.github/workflows/claude-dependabot.yml @@ -309,6 +309,7 @@ jobs: uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + allowed_bots: "dependabot[bot]" claude_args: | --allowedTools "Bash(npm:*),Bash(pnpm:*),Bash(poetry:*),Bash(git:*),Edit,Replace,NotebookEditCell,mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*), Bash(gh pr diff:*), Bash(gh pr view:*)" prompt: |