Update claude action code

[marcoacierno]

What

ToDo

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
pycon	Error		Jun 20, 2026 7:20pm

[claude]

This PR updates the Claude GitHub Action workflow: model upgrade to claude-opus-4-8, doubled timeout, added Edit/Write tools, and adjusted allowed Bash patterns.

allowedTools syntax regression for uv and pip

The old config used Bash(uv *) and Bash(pip *) (space-separated), which matches how these tools are actually invoked (uv run pytest, pip install ...). The new config uses Bash(uv:*) and Bash(pip:*) (colon-separated). The colon format appears to be for command:subcommand syntax (as with gh api:*), but uv and pip use space-separated subcommands, not colons. This means these patterns will not match actual uv run or pip install invocations, silently blocking those commands during agent runs.

reviewer_trigger removal broadens trigger scope

Removing reviewer_trigger: "pythonitaliabot2" means the review_requested event now fires for any reviewer assignment, not just when pythonitaliabot2 is explicitly requested. This could cause unintended bot activity on PRs.

Edit and Write in allowedTools grants broad filesystem write access

The previous config was read-only (only gh CLI reads). Adding Edit and Write allows the agent to modify arbitrary files in the repository during any triggered run (issue comments mentioning @claude, PR review requests). This is a meaningful expansion of the attack surface — a malicious @claude-mention in an issue body could cause the agent to overwrite workflow files or source code.

Bash(gh api:*) was removed

The old allowlist included Bash(gh api:*) which permitted general GitHub API calls. This was removed. If any agent behavior relied on raw gh api calls, those will now be blocked.