CI: stop a failing Claude review from blocking Dependabot bumps - #1228
Open
JeanMarcMilletScality wants to merge 1 commit into
Open
JeanMarcMilletScality wants to merge 1 commit into
JeanMarcMilletScality wants to merge 1 commit into
Conversation
Contributor
Hello jeanmarcmilletscality,My role is to assist you with the merge of this Available options
Available commands
Status report is not available. |
Contributor
Waiting for approvalThe following approvals are needed before I can proceed with the merge:
Peer approvals must include at least 1 approval from the following list: |
Dependabot's pull_request events run against the Dependabot secret store rather than the Actions one, so `secrets: inherit` supplies nothing and the reusable workflow call is rejected before any step runs. The resulting red check left approved dependency bumps unmergeable behind Bert-E's build gate. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
JeanMarcMilletScality
force-pushed
the
improvement/skip-code-review-on-dependabot
branch
from
September 21, 2026 15:40
55387b2 to
a1226eb
Compare
JeanMarcMilletScality
marked this pull request as ready for review
September 21, 2026 15:43
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
TL;DR — Every Dependabot pull request carried a
review / claude-reviewcheck that failed before it ran, leaving approved dependency bumps unmergeable; the job is now skipped on them.Context / Why
Four Dependabot bumps are open against
development/1.0and none can merge — #1203 is approved and still held at the build gate. The only red check on each isreview / claude-review, which fails in two seconds while the reusable workflow call is evaluated:GitHub runs Dependabot's
pull_requestevents against the Dependabot secret store rather than the Actions one, sosecrets: inherithands over nothing. Nothing about the bump itself is wrong, and retrying cannot clear it.Skipping the job emits no check at all rather than a green one. That is safe here: #1092 merged in May with no
review / claude-reviewcheck run on its commit.🔍 Review focus
.github/workflows/review.yml› theif:expression — inverted or misspelled, it silently drops review from every pull request. This one is the test: it is human-authored, andreview / claude-reviewpassed on it.🧪 How to test
Once merged, comment
@dependabot rebaseon one of the open bumps, then confirm thereviewjob is skipped and noreview / claude-reviewcheck appears on it.Follow-up
/bypass_build_statusto merge as they stand.🤖 Generated with Claude Code