Draft
Conversation
Contributor
Reviewer's GuideUpdates CI configuration by simplifying the release workflow, removing Dependabot and required-label automation, bumping the gdsfactory dependency, and adding a Claude-based PR review workflow. Sequence diagram for Claude PR review workflowsequenceDiagram
actor Dev
participant GitHub
participant Workflow_claude_pr_review
participant Job_claude_review
participant Anthropic_API
Dev->>GitHub: Open or update pull_request
GitHub-->>Workflow_claude_pr_review: Trigger pull_request event
Workflow_claude_pr_review->>Job_claude_review: Start job claude-review
Job_claude_review->>GitHub: actions_checkout fetch-depth 0
Job_claude_review->>Anthropic_API: anthropic_api_key, model claude-sonnet-4-20250514
Anthropic_API-->>Job_claude_review: PR review feedback
Job_claude_review->>GitHub: Post review comments on PR
Dev->>GitHub: Add issue_comment containing @claude
GitHub-->>Workflow_claude_pr_review: Trigger issue_comment event
Workflow_claude_pr_review->>Job_claude_review: Start job claude-review if comment mentions @claude
Job_claude_review->>Anthropic_API: Send context and instructions
Anthropic_API-->>Job_claude_review: Reply with analysis
Job_claude_review->>GitHub: Post reply comment on PR thread
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Contributor
There was a problem hiding this comment.
Hey - I've left some high level feedback:
- In the
claude-pr-review.ymlworkflow, consider tightening thepermissionsblock (e.g. droppingid-token: writeand possiblyissues: writeif you only need to comment on PRs) to follow the principle of least privilege. - The
anthropics/claude-code-action@betareference inclaude-pr-review.ymlis a moving target; pinning to a specific tagged version or commit SHA would make the workflow more stable and predictable over time.
Prompt for AI Agents
Please address the comments from this code review:
## Overall Comments
- In the `claude-pr-review.yml` workflow, consider tightening the `permissions` block (e.g. dropping `id-token: write` and possibly `issues: write` if you only need to comment on PRs) to follow the principle of least privilege.
- The `anthropics/claude-code-action@beta` reference in `claude-pr-review.yml` is a moving target; pinning to a specific tagged version or commit SHA would make the workflow more stable and predictable over time.Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
ThomasPluck
requested changes
Feb 4, 2026
Contributor
ThomasPluck
left a comment
There was a problem hiding this comment.
No problem with merge - let's try to get tests passing before merge :)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary by Sourcery
Update dependencies and GitHub workflows by introducing an AI-based PR review, simplifying release drafting triggers, and removing legacy automation.
New Features:
Enhancements:
CI: