v1.3.1

What's new

• claude-responder.yml: bot-authored events are skipped at the job level instead of started and refused. A @claude mention written by a bot the caller has not listed in allowed_bots (CodeRabbit's review comments were the recurring case) used to start the job, which claude-code-action then failed with "Workflow initiated by non-human actor", leaving a red claude / claude check and an UNSTABLE merge state for no defect in the repo. The job's if: now mirrors the action's allow-list (*, or the sender's login with or without [bot], case-insensitive), so those events leave the check skipped; human mentions and listed bots run as before. No input changed; the allowed_bots default stays github-actions. (#68, #73)
• Internal render-claude-summary refs in claude-responder.yml and claude-review.yml now pin @v1.3.1.

Callers

Bump your uses: refs from @v1.2.3 (or @v1.3.0) to @v1.3.1. Dependabot opens these as PRs automatically where it is enabled; the open actions-routine group PRs pick the new version up on their next refresh.