Skip to content

CI: bump Actions pins, add track_progress, add claude-debug label toggle - #15

Open
jnasbyupgrade wants to merge 1 commit into
Postgres-Extensions:masterfrom
jnasbyupgrade:ci/workflow-improvements
Open

CI: bump Actions pins, add track_progress, add claude-debug label toggle#15
jnasbyupgrade wants to merge 1 commit into
Postgres-Extensions:masterfrom
jnasbyupgrade:ci/workflow-improvements

Conversation

@jnasbyupgrade

@jnasbyupgrade jnasbyupgrade commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Summary

Three small fixes to claude-code-review.yml/claude.yml:

  1. Bump actions/checkout@v4 -> @v7 in both files, clearing the Node.js 20 deprecation warning it triggers on every run. Supersedes CI: bump GitHub Actions to latest versions #13 and the ci/bump-actions-versions branch (same change) — close CI: bump GitHub Actions to latest versions #13 once this merges.
  2. Add track_progress: true to the claude-code-action step, so it posts a live, updating checklist comment instead of staying silent until the whole run finishes.
  3. Add a claude-debug PR label: applying it skips the cost-gate wait and turns on full transcript output, with no workflow edit/push needed per debug iteration. The label is checked live via gh pr view rather than the cached event payload, so it also works on a re-run.

Since this workflow runs on pull_request_target (see the file's own top-of-file comment on why), GitHub sources the whole file from master, not this PR's branch — so none of these three changes are exercised by this PR's own claude-review check. Verification happens on the next PR after this merges.

Also found, not fixed here

claude-review currently fails at checkout for every PR from this fork (actions/checkout's "pwn request" refusal on a pull_request_target workflow). Pre-existing, unrelated to this PR. Fixing it (allow-unsafe-pr-checkout: true) is a security-tradeoff decision, left for you.

🤖 Generated with Claude Code

Combines three related CI-workflow improvements into one PR (touching only
claude-code-review.yml and claude.yml):

- Bump actions/checkout@v4 -> @v7 (current latest major) to clear the
  Node.js-20-deprecation warning it triggers on every run. Supersedes/
  incorporates upstream PR Postgres-Extensions#13 and fork branch ci/bump-actions-versions,
  which made the same v4->v7 bump to the same two lines.
  anthropics/claude-code-action@v1 is still current (a floating v1 tag
  exists at v1.0.185) so it is left as-is.

- Add track_progress: true to the claude-code-action step in
  claude-code-review.yml so it posts a live, updating checklist comment
  as it works instead of staying silent until the whole run finishes --
  which, combined with this workflow's cost gate, could leave a PR dark
  for the better part of an hour. Disabled specifically for
  labeled-triggered runs (see below): the action's own track_progress
  validation only accepts opened/synchronize/reopened/ready_for_review
  for pull_request(_target) events and throws for any other action.

- Add a claude-debug PR-label toggle so a maintainer can skip the cost
  gate and turn on full transcript output (show_full_output) by just
  labeling the PR, without editing/pushing the workflow file. The label
  is queried live via `gh pr view` inside the step rather than read from
  the event payload, since GitHub's "Re-run jobs" replays the original
  stored payload and would miss a label added afterward. `labeled` is
  added to the trigger types so applying the label alone starts a fresh
  run, scoped tightly in the job's `if:` so an unrelated label can't
  re-trigger this paid workflow.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 4, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 23d049f7-a787-4bbb-8b60-7228598b044b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@jnasbyupgrade jnasbyupgrade added claude-debug Debug toggle for claude-code-review.yml (skip cost gate, full transcript) and removed claude-debug Debug toggle for claude-code-review.yml (skip cost gate, full transcript) labels Aug 4, 2026
@jnasbyupgrade jnasbyupgrade changed the title ci: bump Actions pins, add track_progress, add claude-debug label toggle CI: bump Actions pins, add track_progress, add claude-debug label toggle Aug 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant