ci: skip Claude review on dependabot PRs

[blove]

Summary

Dependabot-triggered workflow runs cannot read repo secrets, so the advisory Claude-review job fails in ~10s with a red X on every dependabot PR (all 7 current ones show it). Skip the job for dependabot[bot] — same convention as scripts/check-changesets.mjs. The job is advisory (not a required check), so this only removes noise.

Test Plan

• YAML valid; one-line job-level if: guard
• Next dependabot PR shows the review job skipped instead of failed

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dawnai	Ready	Preview, Comment	Jul 6, 2026 2:56am

[github-actions]

Automated approval: this PR received an intelligent (AI) code review. See the review comments on this PR.

[github-actions]

Claude finished @blove's task in 33s —— View job

---

Review

• Read diff and workflow file
• Analyze change

LGTM. The fix is correct and minimal.

The job-level if: github.actor != 'dependabot[bot]' guard is the right layer to apply this — it skips the entire job cleanly, including the "Resolve advisory review threads" step (which has if: always() to handle review errors, but never runs when the job itself is skipped, which is fine since there are no threads to resolve). Using github.actor is the correct expression here; github.triggering_actor would be an alternative but is only relevant when re-running jobs manually, not for the initial dependabot trigger.

No correctness bugs, security issues, or type-safety concerns. No tests needed for a CI config change of this scope.

---