fix dismiss all Dependabot review requests

[Pigbibi]

Policy

Automatically generated Pigbibi review requests are dismissed only when the request event itself was created by Dependabot. Requests made by maintainers are preserved. Major dependency updates remain open because the existing auto-merge workflow excludes semver-major updates.

What changed

• support dependabot[bot] and app/dependabot PR authors and event actors
• react directly to review_requested events
• serialize per-PR cleanup runs without cancelling the matching event
• verify the latest paginated timeline request still came from Dependabot immediately before deletion
• keep API failures visible while treating an already-removed request as success
• do not checkout or execute PR code

Validation

• bash syntax check
• git diff --check

[github-actions]

🤖 Codex PR Review

✅ Merge allowed: 1 finding(s) reported but none are blocking

ℹ️ Other Findings

1. 🟡 [MEDIUM] Reliability in .github/workflows/dependabot_review_request_cleanup.yml

The workflow now decides whether to delete the review request from a single snapshot of the timeline and then unconditionally issues the DELETE, but the previous post-delete reconciliation logic was removed. If a human re-requests Pigbibi after latest_request_actor is computed but before the DELETE call completes, that manual request is still removed by this job. This race is reachable because review requests are a public PR action and the job no longer restores concurrent human intent. (line 66)

Suggestion: Reintroduce a concurrency-safe check after the DELETE, or perform a second timeline/current-reviewer read immediately before or after deletion and restore the request when a non-Dependabot actor re-requested it during the job run.

---

Review by Codex PR Review bot • PR

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a8f7e1ff46

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".