ci: detect Dependabot PRs via PR author, not github.actor#70
Conversation
前回の `if: github.actor != 'dependabot[bot]'` は意図どおり動かなかった。 github.actor は「実行を引き起こしたユーザー」を指すため、別 PR をマージして Dependabot PR が自動 rebase された際、実行が人間(マージした本人)に帰属し スキップされなかった。PR 作成者を見る pull_request.user.login で判定すれば、 誰が再実行を誘発しても Dependabot PR を安定して識別できる。 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
Note Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
📝 WalkthroughWalkthroughGitHub Actions ワークフロー内でDependabot由来のプルリクエストをスキップするための条件が、 ChangesDependabot PR検出条件の更新
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
🚀 Performance Benchmark ResultsBenchmark executed on merge to Configuration
Results📊 Detailed Benchmark Results (click to expand)BCMath Performance Benchmark Results
Summary🤖 Generated automatically by GitHub Actions |
Summary
Fix the Dependabot skip condition on the
claude-reviewjob. The previous condition added in #69 —if: github.actor != 'dependabot[bot]'— did not actually skip the job on Dependabot PRs.Why the previous fix did not work
Observed on PR #67: after #69 was merged, the
claude-reviewrun still failed instead of being skipped.github.actoris whoever triggered the run, not the PR author. Merging #69 intomaincaused Dependabot to automatically rebase #67, which fired asynchronizeevent — but because that rebase was triggered by the human merge, GitHub attributed the run'sgithub.actor/triggering_actortonanasess, notdependabot[bot]. So'nanasess' != 'dependabot[bot]'evaluated totrue, the job ran (not skipped), and failed the workflow-file validation with 401 as before.Fix
Use the PR author, which stays
dependabot[bot]regardless of who triggers the run:A comment explaining the
github.actorpitfall is included so it is not "fixed back" later.🤖 Generated with Claude Code
Summary by CodeRabbit