ci: use claude code to fix upgrade issues

Author: Brooooooklyn

.github/workflows/upgrade-deps.yml

@@ -13,6 +13,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      actions: read
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - uses: ./.github/actions/clone
@@ -24,6 +25,7 @@ jobs:
         with:
           save-cache: ${{ github.ref_name == 'main' }}
           cache-key: upgrade-deps
+          tools: just,cargo-shear
 
       - uses: oxc-project/setup-node@fdbf0dfd334c4e6d56ceeb77d91c76339c2a0885 # v1.0.4
 
@@ -50,8 +52,34 @@ jobs:
 
       - name: Build
         uses: ./.github/actions/build-upstream
+        id: build-upstream
+        continue-on-error: true
         with:
           target: x86_64-unknown-linux-gnu
+      
+      - uses: anthropics/claude-code-action@a017b830c03e23789b11fb69ed571ea61c12e45c # v1.0.0
+        if: steps.build-upstream.outcome == 'failure'
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          prompt: |
+            Check why the build-upstream steps failed and fix them.
+            ### Background
+            - The build-upstream steps are at ./.github/actions/build-upstream/action.yml
+            - The deps upgrade script is at ./.github/scripts/upgrade-deps.mjs
+
+            ### Instructions
+            - We are using `pnpm` as the package manager
+            - We are aiming to upgrade all dependencies to the latest versions in this workflow, so don't downgrade any dependencies.
+            - If deps in our `Cargo.toml` need to be upgraded, you can refer to the `./.claude/agents/cargo-workspace-merger.md`
+              - If `Cargo.toml` has been modified, you need to run `cargo shear` to ensure there is nothing wrong with our dependencies.
+            - Run the steps in `build-upstream` action.yml after your fixing. If no errors are found, you can safe to exit.
+
+            Help me fix the errors in `build-upstream` steps, no need to commit changes after your fixing.
+          claude_args: |
+            --allowedTools "Bash,Edit,Replace,NotebookEditCell"
+          additional_permissions: |
+            actions: read
+          
 
       - name: Update lockfile
         run: |