fix(ci): allow dependabot[bot] in Claude dependabot review workflow

The Claude Code Action rejects bot actors by default. Adding dependabot[bot] to allowed_bots so the automated dependency review can run on Dependabot PRs.
2026-02-08 22:05:08 -05:00 · 2026-02-08 17:01:28 -06:00
1 changed files with 1 additions and 0 deletions
--- a/.github/workflows/claude-dependabot.yml
+++ b/.github/workflows/claude-dependabot.yml
@@ -309,6 +309,7 @@ jobs:
        uses: anthropics/claude-code-action@v1
        with:
          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          allowed_bots: "dependabot[bot]"
          claude_args: |
            --allowedTools "Bash(npm:*),Bash(pnpm:*),Bash(poetry:*),Bash(git:*),Edit,Replace,NotebookEditCell,mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*), Bash(gh pr diff:*), Bash(gh pr view:*)"
          prompt: |