fix: skip Claude Code Review on dependabot PRs

[Copilot]

Fix Claude Code Review workflow failure on dependabot PRs

Problem

The Claude Code Review workflow is failing when triggered by dependabot PRs with the error:

Workflow initiated by non-human actor: dependabot (type: Bot). 
Add bot to allowed_bots list or use '*' to allow all bots.

Reference: https://github.com/bitflight-devops/github-action-jira-transition-manager/actions/runs/21342884692/job/61425127293#step:3:1

Solution

Added a condition to skip the Claude Code Review workflow for dependabot PRs since dependency updates don't need code review.

Changes Made

• Added if: github.event.pull_request.user.login != 'dependabot[bot]' to the claude-review job
• This prevents the workflow from running on dependabot PRs, avoiding the error
• Merged latest updates from base branch (vitest v4, actions updates)

Checklist

• Add condition to skip Claude Code Review for dependabot PRs
• Test the fix by examining the workflow configuration
• Run code review (no issues found)
• Run security checks (no vulnerabilities found)
• Verify the changes are minimal and correct
• Rebase/merge with base branch updates

Security Summary

No security vulnerabilities were found in this change. The change only adds a conditional check to skip workflow execution for dependabot PRs.

Original prompt

Reference: https://github.com/bitflight-devops/github-action-jira-transition-manager/actions/runs/21342884692/job/61425127293#step:3:1 please address this error

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Jamie-BitFlight]

Rebase please. @copilot

[Copilot]

Pull request overview

This PR fixes the Claude Code Review workflow to prevent failures on dependabot PRs by adding a conditional check to skip the review job when the PR author is dependabot. The PR also includes updates to the sinon testing library and its type definitions.

Changes:

• Added conditional to skip Claude Code Review workflow for dependabot PRs
• Removed placeholder comment demonstrating PR author filtering
• Updated sinon from v19.0.2 to v21.0.1 and @types/sinon from v17.0.3 to v21.0.0

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
.github/workflows/claude-code-review.yml	Added conditional check to skip workflow execution for dependabot PRs and removed commented placeholder examples
package.json	Updated sinon and @types/sinon to latest major versions (v21)
yarn.lock	Lockfile updates reflecting sinon v21 upgrade, including removal of nise dependency (now embedded in sinon)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Rebase please. @copilot

Done! Merged latest updates from base branch in commit ccf7cb5. The branch now includes:

• vitest v4 update (Update vitest to v4 #227)
• actions/upload-artifact v4 to v6 (build(deps): bump actions/upload-artifact from 4 to 6 #222)
• actions/cache v4 to v5 (build(deps): bump actions/cache from 4 to 5 #223)

Note: Used merge instead of rebase since force push is not available in this environment.

[Jamie-BitFlight]

There's still merge conflicts