fix dismiss all Dependabot review requests

[Pigbibi]

Policy

Automatically generated Pigbibi review requests are dismissed only when the request event itself was created by Dependabot. Requests made by maintainers are preserved. Major dependency updates remain open because the existing auto-merge workflow excludes semver-major updates.

What changed

• support dependabot[bot] and app/dependabot PR authors and event actors
• react directly to review_requested events
• serialize per-PR cleanup runs without cancelling the matching event
• verify the latest paginated timeline request still came from Dependabot immediately before deletion
• keep API failures visible while treating an already-removed request as success
• do not checkout or execute PR code

Validation

• bash syntax check
• git diff --check

[github-actions]

🤖 Codex PR Review

✅ Merge allowed: 1 finding(s) reported but none are blocking

ℹ️ Other Findings

1. 🟡 [MEDIUM] Logic in .github/workflows/dependabot_review_request_cleanup.yml

Removing the post-DELETE timeline check and reviewer restoration reintroduces a race: if this workflow starts from a Dependabot review_requested event, computes latest_request_actor as Dependabot, and then a human manually re-requests Pigbibi before the DELETE call executes, the job will delete that newer human request as well. This path is reachable from the current review_requested entry point because GitHub can deliver the human re-request while the earlier run is still in progress, and the new code no longer detects or restores that concurrent human intent. (line 66)

Suggestion: Keep a post-DELETE reconciliation step, or re-read the timeline/current reviewer state immediately before or after DELETE and restore the reviewer when a non-bot review_requested happened after the run's initial snapshot.

---

Review by Codex PR Review bot • PR

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: cb30d4deb4

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".