Skip to content

Conversation

@trieloff
Copy link
Contributor

@trieloff trieloff commented Nov 3, 2025

Summary

This PR adds a GitHub Actions workflow that uses Claude Code to automatically fix common issues in Renovate dependency update PRs.

What it does

The workflow triggers on Renovate PRs (opened and synchronize events) and automatically:

  1. Fixes package-lock.json issues - Renovate often fails to correctly regenerate package-lock.json files. Claude will run npm install in both the root directory and packages/browser-injectables to ensure lock files are properly updated.

  2. Fixes small API changes - When tests fail due to minor API changes (≤5 lines of code), Claude will detect and fix them automatically.

  3. Performs security review - Checks dependency changes for known security issues and flags any concerns in a comment.

Example PRs with issues

Configuration

The workflow:

  • Uses CLAUDE_CODE_OAUTH_TOKEN from repository secrets (already configured)
  • Uses ADOBE_BOT_GITHUB_TOKEN for GitHub operations
  • Only runs on PRs from renovate[bot]
  • Has write permissions to fix issues and push commits

Testing

This workflow will activate on the next Renovate PR. Claude will analyze the PR, fix any issues, and commit the changes directly to the PR branch.

🤖 Generated with Claude Code

@github-actions
Copy link

github-actions bot commented Nov 3, 2025

This PR will trigger a minor release when merged.

trieloff and others added 6 commits November 5, 2025 15:54
This workflow automatically runs on Renovate PRs to:
- Regenerate package-lock.json files correctly
- Fix small API changes (≤5 lines of code)
- Perform security reviews of dependency updates

The workflow triggers on PR open and synchronize events, and only
runs when the PR author is renovate[bot].

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Signed-off-by: Lars Trieloff <[email protected]>
Keeping only the Renovate PR fixer workflow for now.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Signed-off-by: Lars Trieloff <[email protected]>
- Added claude_args to restrict tools to: npm, git, gh pr commands, Read, Edit, Write, Grep, Glob
- Added actions: read permission to allow Claude to check CI results
- Added additional_permissions parameter for Claude Code Action

This ensures Claude has the necessary tools to:
- Run npm install and npm test
- Make git commits with fixes
- Query PR information via gh CLI
- Read/edit/write files for code fixes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Signed-off-by: Lars Trieloff <[email protected]>
Added Bash access for:
- gh:* (all GitHub CLI commands, not just pr)
- ls:* (for directory navigation)
- cat:* (for viewing files)
- cd:* (for changing directories)

This allows Claude to:
- Run git commit and git push to apply fixes
- Navigate the repository structure
- View file contents when needed

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Signed-off-by: Lars Trieloff <[email protected]>
@trieloff trieloff force-pushed the add-claude-github-actions-1762200704851 branch from 874e478 to 5959673 Compare November 5, 2025 14:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants