Skip to content

chore(deps): bump the go-dependencies group with 10 updates #3607

chore(deps): bump the go-dependencies group with 10 updates

chore(deps): bump the go-dependencies group with 10 updates #3607

Workflow file for this run

name: Claude Code Review
on:
pull_request:
types: [opened, synchronize, reopened]
# Cancel in-progress reviews when new commits are pushed
# This prevents multiple reviews on the same PR and saves API costs
concurrency:
group: claude-code-review-${{ github.repository }}-${{ github.event.pull_request.number }}
cancel-in-progress: true
jobs:
claude-review:
# Skip Dependabot PRs (automated dependency updates)
if: github.actor != 'dependabot[bot]'
runs-on: ubuntu-latest
timeout-minutes: 15
permissions:
contents: read
pull-requests: write
issues: write
id-token: write
actions: read
checks: read
statuses: read
steps:
# SECURITY: Checkout the default branch, NOT the PR's head_sha
# This prevents malicious PRs from executing untrusted code
# Claude Code reviews the PR diff via gh CLI commands
- name: Checkout repository (default branch)
uses: actions/checkout@v6
with:
ref: ${{ github.event.repository.default_branch }}
fetch-depth: 1
persist-credentials: false
- name: Get current date
id: date
run: echo "current_date=$(date -u '+%Y-%m-%d')" >> $GITHUB_OUTPUT
- name: Run Claude Code Review
id: claude-review
continue-on-error: true
uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
prompt: |
Read `.github/claude-review-instructions.md` for your complete review guidelines.
Substitute these values wherever you see {PLACEHOLDER} references in those instructions:
- REPO: ${{ github.repository }}
- PR_NUMBER: ${{ github.event.pull_request.number }}
- HEAD_SHA: ${{ github.event.pull_request.head.sha }}
- REPO_OWNER: ${{ github.repository_owner }}
- REPO_NAME: ${{ github.event.repository.name }}
- CURRENT_DATE: ${{ steps.date.outputs.current_date }}
Context:
- Go 1.25+ is the current stable release - don't flag version references
- CI may still be running - check with `gh pr checks ${{ github.event.pull_request.number }}`
# Using Opus 4.6 for highest quality code reviews
claude_args: '--model claude-opus-4-6 --allowed-tools "Bash(gh api:*),Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr checks:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
- name: Report Final Status
if: always()
run: |
echo "## Claude Code Review Summary" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
echo "- **PR:** #${{ github.event.pull_request.number }}" >> $GITHUB_STEP_SUMMARY
echo "" >> $GITHUB_STEP_SUMMARY
if [ "${{ steps.claude-review.outcome }}" == "success" ]; then
echo "### Result: Success" >> $GITHUB_STEP_SUMMARY
echo "Claude Code review completed successfully." >> $GITHUB_STEP_SUMMARY
echo "::notice::Claude Code review completed successfully for PR #${{ github.event.pull_request.number }}"
elif [ "${{ steps.claude-review.outcome }}" == "failure" ]; then
echo "### Result: Failed" >> $GITHUB_STEP_SUMMARY
echo "Claude Code review failed - this is non-blocking." >> $GITHUB_STEP_SUMMARY
echo "::warning::Claude Code review failed for PR #${{ github.event.pull_request.number }} - this is non-blocking"
elif [ "${{ steps.claude-review.outcome }}" == "cancelled" ]; then
echo "### Result: Cancelled" >> $GITHUB_STEP_SUMMARY
echo "Claude Code review was cancelled." >> $GITHUB_STEP_SUMMARY
echo "::warning::Claude Code review was cancelled for PR #${{ github.event.pull_request.number }}"
elif [ "${{ steps.claude-review.outcome }}" == "skipped" ]; then
echo "### Result: Skipped" >> $GITHUB_STEP_SUMMARY
echo "Claude Code review was skipped." >> $GITHUB_STEP_SUMMARY
fi
exit 0