ci: migrate Claude review jobs to claude-code-action v1

[loothero]

Summary

• Migrate the four claude-review-* jobs from the deprecated anthropics/claude-code-action@beta API to v1.0.111, pinned by commit SHA (fefa07e) for security since the action runs with pull-requests: write and access to CLAUDE_CODE_OAUTH_TOKEN.
• Apply the v1 breaking-change migration (docs): direct_prompt → prompt, and the allowed_tools input → claude_args: --allowedTools.
• Add timeout-minutes: 20 to all 8 AI review jobs (4 Claude + 4 Codex) so a stuck run can't burn the 6h GitHub Actions default.

No behavioral change to prompts, scope filtering, severity gating, or the marker-based comment lookup. Default model remains the action's default (Sonnet) — model override (e.g. --model claude-opus-4-7) can be added later by appending to claude_args.

Test plan

• CI green on this PR (each scope's Claude job picks up the new action SHA and v1 input shape)
• PR comments still appear with the ## Claude Review - … header + REVIEW_MARKER line so the Check for blocking findings step continues to find them
• Trigger a review with a [HIGH] finding (or temporarily lower the threshold in a draft) to confirm the blocking step still fails the job

🤖 Generated with Claude Code

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
summit	Ready	Preview, Comment	May 3, 2026 11:57am

[coderabbitai]

Warning

Rate limit exceeded

@loothero has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 27 minutes and 47 seconds before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 3f6435d7-4cef-4196-bd5b-adbdbf2be744

📥 Commits

Reviewing files that changed from the base of the PR and between 5418359 and 998a9d5.

📒 Files selected for processing (1)

• .github/workflows/pr-ci.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/claude-action-v1-migration

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 0/1 reviews remaining, refill in 27 minutes and 47 seconds.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[railway-app]

🚅 Deployed to the summit-pr-143 environment in Summit

3 services not affected by this PR

• summit-db
• summit-indexer
• summit-api

[Copilot]

Pull request overview

Migrates the GitHub Actions CI workflow’s Claude review jobs from the deprecated anthropics/claude-code-action@beta interface to the v1 interface (pinned by commit SHA) and adds job-level timeouts to prevent hung AI review jobs from consuming the default 6-hour runner limit.

Changes:

• Update all four claude-review-* jobs to use anthropics/claude-code-action pinned by commit SHA and migrate inputs (direct_prompt → prompt, allowed_tools → claude_args: --allowedTools ...).
• Add timeout-minutes: 20 to all eight AI review jobs (4 Claude + 4 Codex).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.