From 20e872f2d49c2ac8a86ef091e007804c43558742 Mon Sep 17 00:00:00 2001 From: Gonzalo Riestra Date: Thu, 10 Sep 2026 12:18:17 +0200 Subject: [PATCH 1/2] Pin Claude model and proxy endpoint in workflows --- .github/workflows/gardener-investigate-issue.yml | 3 ++- .github/workflows/maintenance-prs.yml | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/gardener-investigate-issue.yml b/.github/workflows/gardener-investigate-issue.yml index 37082f4d802..a5c6ca4f756 100644 --- a/.github/workflows/gardener-investigate-issue.yml +++ b/.github/workflows/gardener-investigate-issue.yml @@ -70,7 +70,7 @@ jobs: timeout-minutes: 30 uses: anthropics/claude-code-action@36a69b6a90b850823f86de06fdfd56264772ad98 # v1 env: - ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }} + ANTHROPIC_BASE_URL: https://proxy.shopify.ai/vendors/anthropic-claude-code with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} @@ -86,6 +86,7 @@ jobs: Always return an investigation report as the `report` field in your structured output. If you identify a straightforward fix, describe the proposed fix in the report instead of implementing it. claude_args: | + --model claude-opus-4-8 --json-schema '{"type":"object","properties":{"report":{"type":"string","description":"The full investigation report markdown"}},"required":["report"]}' - name: Write report to job summary diff --git a/.github/workflows/maintenance-prs.yml b/.github/workflows/maintenance-prs.yml index 1adc0ad513e..0deca28d08c 100644 --- a/.github/workflows/maintenance-prs.yml +++ b/.github/workflows/maintenance-prs.yml @@ -70,7 +70,7 @@ jobs: if: steps.schedule.outputs.run == 'true' uses: anthropics/claude-code-action@36a69b6a90b850823f86de06fdfd56264772ad98 # v1 env: - ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }} + ANTHROPIC_BASE_URL: https://proxy.shopify.ai/vendors/anthropic-claude-code GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} CLAUDE_BRANCH: ${{ env.MAINTENANCE_BRANCH }} with: @@ -99,6 +99,7 @@ jobs: Keep duplicate-check notes out of the PR body and all template checkboxes unchecked. Do not post to Slack; the workflow will announce the PR after it exists. claude_args: | + --model claude-opus-4-8 --allowedTools Read,Glob,Grep,Edit,Write,Bash - name: Find the created PR From 3fede11afbecb8e3a9a887764864ef6221399ddd Mon Sep 17 00:00:00 2001 From: Gonzalo Riestra Date: Thu, 10 Sep 2026 12:25:01 +0200 Subject: [PATCH 2/2] Use the latest Opus alias and keep the proxy URL secret --- .github/workflows/gardener-investigate-issue.yml | 4 ++-- .github/workflows/maintenance-prs.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/gardener-investigate-issue.yml b/.github/workflows/gardener-investigate-issue.yml index a5c6ca4f756..3e7b26b0a8d 100644 --- a/.github/workflows/gardener-investigate-issue.yml +++ b/.github/workflows/gardener-investigate-issue.yml @@ -70,7 +70,7 @@ jobs: timeout-minutes: 30 uses: anthropics/claude-code-action@36a69b6a90b850823f86de06fdfd56264772ad98 # v1 env: - ANTHROPIC_BASE_URL: https://proxy.shopify.ai/vendors/anthropic-claude-code + ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }} with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} @@ -86,7 +86,7 @@ jobs: Always return an investigation report as the `report` field in your structured output. If you identify a straightforward fix, describe the proposed fix in the report instead of implementing it. claude_args: | - --model claude-opus-4-8 + --model claude-opus-latest --json-schema '{"type":"object","properties":{"report":{"type":"string","description":"The full investigation report markdown"}},"required":["report"]}' - name: Write report to job summary diff --git a/.github/workflows/maintenance-prs.yml b/.github/workflows/maintenance-prs.yml index 0deca28d08c..ef6e06030c0 100644 --- a/.github/workflows/maintenance-prs.yml +++ b/.github/workflows/maintenance-prs.yml @@ -70,7 +70,7 @@ jobs: if: steps.schedule.outputs.run == 'true' uses: anthropics/claude-code-action@36a69b6a90b850823f86de06fdfd56264772ad98 # v1 env: - ANTHROPIC_BASE_URL: https://proxy.shopify.ai/vendors/anthropic-claude-code + ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} CLAUDE_BRANCH: ${{ env.MAINTENANCE_BRANCH }} with: @@ -99,7 +99,7 @@ jobs: Keep duplicate-check notes out of the PR body and all template checkboxes unchecked. Do not post to Slack; the workflow will announce the PR after it exists. claude_args: | - --model claude-opus-4-8 + --model claude-opus-latest --allowedTools Read,Glob,Grep,Edit,Write,Bash - name: Find the created PR