docs(698): correct the Renovate auto-pass rule in CLAUDE.md #710

Merged
timothy merged 1 commits from docs/698-claudemd-renovate-rule into main 2026-07-30 21:58:04 +02:00
Owner

refs #698

Docs-only. CLAUDE.md still described the Renovate review-verdict/h10 auto-pass as identity-only — "auto-passed as a bot PR unless they touch .claude//.gitea//.husky//scripts//docker/ci/".

Since #698 that is no longer the rule. The auto-pass now requires both: no protected path and every changed path being a dependency manifest (Directory.Packages.props, .config/dotnet-tools.json). A bot account does not attribute the code at a head — pull_request.user.login is the PR's immutable creator, while the head it points at is not.

CLAUDE.md is loaded into every session, so a stale rule there propagates further than a stale doc would. Caught by the /done docs-impact check after #705 merged; docs/ci-cd.md and the decision records were already correct.

Practical effect worth knowing: a Renovate PR touching a .csproj or a source file is not blocked, it simply needs a real verdict.

refs #698 Docs-only. `CLAUDE.md` still described the Renovate `review-verdict/h10` auto-pass as identity-only — "auto-passed as a bot PR unless they touch `.claude/`/`.gitea/`/`.husky/`/`scripts/`/`docker/ci/`". Since #698 that is no longer the rule. The auto-pass now requires **both**: no protected path **and** every changed path being a dependency manifest (`Directory.Packages.props`, `.config/dotnet-tools.json`). A bot *account* does not attribute the *code* at a head — `pull_request.user.login` is the PR's immutable creator, while the head it points at is not. `CLAUDE.md` is loaded into every session, so a stale rule there propagates further than a stale doc would. Caught by the `/done` docs-impact check after #705 merged; `docs/ci-cd.md` and the decision records were already correct. Practical effect worth knowing: a Renovate PR touching a `.csproj` or a source file is not blocked, it simply needs a real verdict.
timothy added 1 commit 2026-07-30 21:56:26 +02:00
docs(698): correct the Renovate auto-pass rule in CLAUDE.md
PR Gates / CI image pin matches docker/ci (pull_request) Successful in 16s
PR Gates / Docs update reminder (pull_request) Successful in 18s
Build ErsatzTV Image / Build & test (.NET) (pull_request) Successful in 19s
PR Gates / decisions lifecycle (pull_request) Successful in 20s
Build ErsatzTV Image / EF migration integrity (SQLite + MySql) (pull_request) Successful in 39s
Build ErsatzTV Image / Functional E2E (curl + UI contracts) (pull_request) Successful in 38s
review-verdict/h10 Exempt: docs-only change (no code, no protected path)
Build ErsatzTV Image / Formatting (changed .cs conform to .editorconfig) (pull_request) Successful in 38s
Build ErsatzTV Image / API docs in sync (OpenAPI + endpoint index) (pull_request) Successful in 38s
Review verdict / Set review-verdict status (pull_request_target) Successful in 24s
Build ErsatzTV Image / Build & push image (amd64) (pull_request) Has been skipped
PR Gates / Script tests (pytest) (pull_request) Successful in 1m0s
1eca9b0c11
CLAUDE.md still described the bot exemption as identity-only (auto-passed unless a
protected path is touched). Since #698 it also requires EVERY changed path to be a
dependency manifest — a bot account does not attribute the code at a head. CLAUDE.md is
loaded every session, so a stale rule here is worse than a stale doc.

Refs: #698
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
timothy merged commit 81be685df9 into main 2026-07-30 21:58:04 +02:00
Sign in to join this conversation.