Repository navigation
Conversation
dependabot
Bot
added
dependencies
jrandolf
added a commit
that referenced
this pull request
Sep 24, 2026
## Why Earl's Claude review rejects Dependabot by default. The `claude-review` job on [#138](#138) failed with `Workflow initiated by non-human actor: dependabot`, so the strict gate cannot pass. [Job evidence](https://github.com/mathematic-inc/earl/actions/runs/36037392216/job/107760778956). The gate also ran out of time on [#139](#139), head `c92ae86f17d85fcf79d5175e37815b2bc7e13594`: its final `MSRV (Rust 1.96)` check succeeded at 18:22:28 UTC, two seconds after the gate exited at 18:22:26. [Gate job](https://github.com/mathematic-inc/earl/actions/runs/36037524251/job/107761212597). ## Change - Allow only `dependabot[bot]` to initiate the pinned Claude review action. Reviews still run and can still fail. - Extend the read-only strict gate from 25 to 80 minutes of polling, with a 90-minute job limit. It still checks the unchanged exact PR head and requires every configured and applicable check to pass. Only `.github/workflows/claude-code-review.yml` and `.github/workflows/dependabot-automerge.yml` change. No branch rule or required check is removed. Repository auto-merge remains off pending fresh bot-head checks. ## Local verification All logs and `.exit` files are under `/Volumes/Code/Sources/.dev-storage/mathematic-inc-monitor/2026-09-24T2220Z-full-repair.PvYiXw/logs/`. | Command | Exit | Log | |---|---:|---| | `hk check --all --slow` | 0 | `earl-hk.log` | | `python3 scripts/release/check-state.py` | 0 | `earl-release-state.log` | | `sh scripts/release/test-build-artifact.sh` | 0 | `earl-release-artifact.log` | | `rustup run 1.96.0 cargo check --locked --workspace --all-features --all-targets` | 0 | `earl-msrv.log` | | `cargo test --all-targets --all-features` | 0 | `earl-test.log` | | `cargo package --list --locked --workspace` | 0 | `earl-package.log` | | `pnpm install --frozen-lockfile` | 0 | `earl-pnpm-install.log` | | `pnpm turbo run build` | 0 | `earl-pnpm-build.log` | | `pnpm turbo run types:check` | 0 | `earl-pnpm-types.log` | | `pnpm audit --audit-level high` | 0 | `earl-pnpm-audit.log` | | `git diff --check` | 0 | local check | The first hk attempt failed while two isolated worktrees tried to install the same Rust toolchain into a new cache. I reused the already-installed external-drive toolchain and reran the full command; it passed. No check was waived.
dependabot
Bot
force-pushed
the
dependabot/github_actions/anthropics/claude-code-action-1.0.228
branch
from
September 24, 2026 22:50
c92ae86 to
1958be9
Compare
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/anthropics/claude-code-action-1.0.228
branch
from
September 25, 2026 03:03
1958be9 to
4531920
Compare
Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.210 to 1.0.230. - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@a874e9e...4036a18) --- updated-dependencies: - dependency-name: anthropics/claude-code-action dependency-version: 1.0.228 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/anthropics/claude-code-action-1.0.228
branch
from
September 25, 2026 03:14
4531920 to
93f5064
Compare
…code-action-1.0.228
jrandolf
deleted the
dependabot/github_actions/anthropics/claude-code-action-1.0.228
branch
September 25, 2026 04:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps anthropics/claude-code-action from 1.0.210 to 1.0.230.
Release notes
Sourced from anthropics/claude-code-action's releases.
... (truncated)
Commits
4036a18chore: bump Claude Code to 2.1.277 and Agent SDK to 0.3.277a4f54efchore: bump Claude Code to 2.1.276 and Agent SDK to 0.3.2762261fcfchore: bump Claude Code to 2.1.275 and Agent SDK to 0.3.2753b8197dchore: bump Claude Code to 2.1.274 and Agent SDK to 0.3.2747b0b255chore: bump Claude Code to 2.1.273 and Agent SDK to 0.3.273bf38e86chore: bump Claude Code to 2.1.272 and Agent SDK to 0.3.27251db78achore: bump Claude Code to 2.1.271 and Agent SDK to 0.3.2719cdae7fchore: bump Claude Code to 2.1.270 and Agent SDK to 0.3.27056cf60fchore: bump Claude Code to 2.1.269 and Agent SDK to 0.3.2690a8d3c9chore: bump Claude Code to 2.1.268 and Agent SDK to 0.3.268