Skip to content

deps: bump tokio from 1.52.1 to 1.52.2 in /crates/tlsn-server #153

deps: bump tokio from 1.52.1 to 1.52.2 in /crates/tlsn-server

deps: bump tokio from 1.52.1 to 1.52.2 in /crates/tlsn-server #153

name: Claude Code Review
on:
pull_request:
types: [opened, synchronize, ready_for_review, reopened]
# Optional: Only run on specific file changes
# paths:
# - "src/**/*.ts"
# - "src/**/*.tsx"
# - "src/**/*.js"
# - "src/**/*.jsx"
jobs:
claude-review:
# Skip on Dependabot PRs: secrets are not exposed to dependabot-triggered
# workflows by default, so claude_code_oauth_token would be empty and the
# action would fail. Dependabot bumps are mechanical (version strings /
# digests) and don't need code review; for the rare case where review
# is wanted, comment "@claude review" on the PR to trigger claude.yml.
if: github.actor != 'dependabot[bot]'
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: read
issues: read
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
fetch-depth: 1
- name: Run Claude Code Review
id: claude-review
uses: anthropics/claude-code-action@fefa07e9c665b7320f08c3b525980457f22f58aa # v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
plugins: 'code-review@claude-code-plugins'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options