diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d9c61ef..0f7320f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,11 @@ jobs:
           retention-days: 30
 
       - name: Report coverage
-        uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+        # Local path, not a pinned release tag: this repo dogfoods its own
+        # action, so it should always run the exact code on this branch/ref
+        # rather than a released version that may lag behind (or, during
+        # release prep, not exist yet as a tag at all).
+        uses: ./.github/actions/report
         with:
           worker-url: https://demo.coveragetracker.dev
           coverage-path: dashboard/coverage/lcov.info
@@ -115,7 +119,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Report coverage
-        uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+        uses: ./.github/actions/report
         with:
           worker-url: https://demo.coveragetracker.dev
           category: backend
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index b5e8cfd..0a0417d 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -39,6 +39,7 @@ jobs:
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
           plugins: 'code-review@claude-code-plugins'
           prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
+          allowed_bots: "dependabot[bot],copilot[bot]"
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
           # or https://code.claude.com/docs/en/cli-reference for available options