From c9ba7c4deabb8a742379d6e6d23f914ca475c0ef Mon Sep 17 00:00:00 2001
From: andig <andi@evcc.io>
Date: Tue, 16 Jun 2026 13:54:59 +0200
Subject: [PATCH] chore: allow Dependabot PRs in Claude Code Review (#30925)

---
 .github/workflows/claude-code-review.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 24634e774..1762d59cc 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -42,6 +42,8 @@ jobs:
         uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          # review dependency bumps opened by Dependabot
+          allowed_bots: 'dependabot[bot]'
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
           plugins: 'code-review@claude-code-plugins'
           prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'