Commits on Apr 18, 2026

1. fix(ci): repost Copilot reviews as @claude comments (#99) …

   ## Summary
   
   Copilot PR reviews have been silently failing claude-code-action@v1 —
   its `checkHumanActor` step calls
   `octokit.users.getByUsername('Copilot')`, which 404s because `Copilot`
   is a virtual actor with no user record. No action input bypasses that
   lookup (upstream PRs
   [#1018](anthropics/claude-code-action#1018),
   [#1030](anthropics/claude-code-action#1030),
   [#1144](anthropics/claude-code-action#1144) are
   all still open).
   
   Observed on [navigaite/edilio#94 run
   24551381827](https://github.com/navigaite/edilio/actions/runs/24551381827/job/71777721521):
   
   ```
   Checking permissions for actor: Copilot
   GET /users/Copilot - 404
   Action failed with error: Not Found
   ```
   
   ## Fix
   
   Proxy Copilot reviews into an `issue_comment` event that Claude's
   existing pipeline can handle:
   
   - **New `repost-copilot-review` job** in the reusable
   `claude-code.yaml`. Fires only when `pull_request_review.user.type ==
   'Bot'` and login contains `copilot`. Mints the Navigaite workflow App
   token, fetches the review's inline comments via `GET
   /pulls/:n/reviews/:id/comments`, and posts a single stitched `@claude …`
   comment on the PR.
   - **Skip the `claude` job on Copilot reviews** — it would hit the 404.
   The spawned `issue_comment` re-enters the job with `github.actor ==
   'navigaite-workflow-app[bot]'`, a real bot user that resolves, so
   `checkHumanActor`'s `allowed_bots: *` branch takes over.
   - **Relax the `issue_comment` author-association gate** (both the
   reusable workflow step and the caller template's `if:`) to admit
   comments from `navigaite-workflow-app[bot]`. Reposted comments have
   `author_association: NONE` by construction — trust is anchored in the
   fact that only our installed app can mint its own token.
   
   ## Test plan
   
   - [ ] Merge, re-request Copilot review on an open PR in a consumer repo,
   confirm: (1) `repost-copilot-review` job succeeds, (2) an `@claude …`
   comment appears on the PR, (3) a follow-up `issue_comment` run of the
   `claude` job runs to completion without the `users/Copilot` 404.
   - [ ] Confirm human `@claude` comments still trigger Claude normally
   (unchanged path).
   - [ ] Confirm unrelated bot comments (Dependabot, github-actions) are
   still filtered out by the association gate.
   
   🤖 Generated with [Claude Code](https://claude.com/claude-code)
   
   Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

   

   maxbec and claude authored Apr 18, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for bf6d42e
   • Browse repository at this point

   Copy the full SHA

   bf6d42e View commit details

   Browse the repository at this point in the history

2. chore(main): release 2.6.5 (#100) …

   🤖 I have created a release *beep* *boop*
   ---
   
   
   ## [2.6.5](v2.6.4...v2.6.5)
   (2026-04-18)
   
   
   ### 🐛 Bug Fixes
   
   * **ci:** repost Copilot reviews as [@claude](https://github.com/claude)
   comments ([#99](#99))
   ([bf6d42e](bf6d42e))
   
   ---
   This PR was generated with [Release
   Please](https://github.com/googleapis/release-please). See
   [documentation](https://github.com/googleapis/release-please#release-please).
   
   Co-authored-by: navigaite-workflow-app[bot] <133966083+navigaite-workflow-app[bot]@users.noreply.github.com>

   

   navigaite-workflow-app[bot] authored Apr 18, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 0b7f818
   • Browse repository at this point

   Copy the full SHA

   0b7f818 View commit details

   Browse the repository at this point in the history