fix(claude): sync inlined workflow with org standard

[don-petry]

Problem

The inlined claude.yml in this repo was diverged from claude-code-reusable.yml in 4 ways, causing missing functionality and the bot-comment trigger bug reported in issue context.

Changes

1. 🐛 Bot allow list for pull_request_review_comment (bug fix)

Bots have author_association: "NONE" so they were silently skipped. Added the same allow list the reusable already has:

coderabbitai[bot], Copilot, copilot-pull-request-reviewer[bot], gemini-code-assist[bot]

2. ✨ check_run trigger + claude-ci-fix job (new feature)

Ports the CI auto-fix feature: when any non-Claude check fails on a PR, Claude diagnoses and fixes it. Uses DON_PETRY_BOT_GH_PAT (this repo's secret name, adapted from GH_PAT_WORKFLOWS in the reusable).

3. ⬆️ claude-code-action SHA bump

Job	Before	After
claude	6e2bd52 (v1.0.89)	476e359 (v1.0.119)
claude-issue	6e2bd52 (v1.0.89)	476e359 (v1.0.119)

4. 🛡️ paths-ignore on pull_request trigger

Prevents Claude from running on PRs that only change claude.yml itself, avoiding the Anthropic OIDC validation failure (the workflow file must be byte-for-byte identical to the default branch at token exchange time).

Summary by CodeRabbit

• Chores
  • Enhanced CI/CD automation to improve pull request processing and expedite feedback on continuous integration failures.
  • Optimized workflow configuration to prevent redundant triggers and improve overall automation efficiency.
  • Updated automated tooling integrations for more reliable development workflows.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[coderabbitai]

📝 Walkthrough

Walkthrough

The Claude Code GitHub Actions workflow is extended to prevent recursive triggers, broaden bot account trust authorization, add explicit permission grants, introduce a new automated CI-fix job for failed checks, and align all three jobs to a newer action version.

Changes

Claude Code Automation Workflow

Layer / File(s)	Summary
Trigger Configuration .github/workflows/claude.yml	pull_request trigger adds paths-ignore rule to exclude .github/workflows/claude.yml from triggering workflow runs.
Trust Gating & Bot Support .github/workflows/claude.yml	claude job's if condition extends bot account allowance to include coderabbitai[bot], Copilot, copilot-pull-request-reviewer[bot], and gemini-code-assist[bot] alongside existing owner/member/collaborator checks.
Permissions & Action Update .github/workflows/claude.yml	claude job's anthropic/claude-code-action step receives pinned version bump (new SHA) and explicit additional_permissions block granting actions: read and checks: read.
CI Failure Remediation .github/workflows/claude.yml	New claude-ci-fix job triggers on check_run failure events. Resolves target PR (event data with gh api fallback), skips forks, applies per-SHA concurrency, conditionally checks out repo, and invokes anthropic/claude-code-action with CI diagnosis and minimal fix prompt and tool permissions.
Issue Job Version Alignment .github/workflows/claude.yml	claude-issue job's anthropic/claude-code-action is updated to the newer pinned SHA while preserving all job inputs and prompt structure.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the main change: syncing the inlined Claude workflow with organization standards, which is the primary objective of the PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/sync-claude-with-org-standard

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR updates the repository’s inlined .github/workflows/claude.yml to re-align with the org-standard Claude workflow behavior, restoring missing triggers/conditions and adding CI auto-fix support.

Changes:

• Add paths-ignore to avoid running the pull_request trigger when only claude.yml changes.
• Expand the pull_request_review_comment allow-list to include specific bot identities.
• Add check_run trigger and a new claude-ci-fix job to diagnose/fix failing PR checks; bump anthropics/claude-code-action SHA to v1.0.119.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/claude.yml:
- Around line 11-12: This PR modifies the exempt workflow that contains the
paths-ignore entry and the OIDC invariant comment; revert any edits to that
exempt workflow (the block containing paths-ignore and the "OIDC invariant —
changing this file breaks token exchange" comment) and instead move your
intended changes into the approved upstream/human-maintained workflow path (do
not land agent-authored edits in the exempt workflow file), updating the
human-owned workflow with the same logic and leaving the exempt file unchanged.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 95d9f57a-db34-41ba-8a4a-fd04b9df9c26

📥 Commits

Reviewing files that changed from the base of the PR and between b370003 and 0b1168d.

📒 Files selected for processing (1)

• .github/workflows/claude.yml

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud