Skip to content

ci: bump ai-review workflow to 524b5a7 - #130

Merged
ben-miru merged 1 commit into
mainfrom
ben/bump-ai-review-524b5a7
Oct 12, 2026
Merged

ben-miru merged 1 commit into
mainfrom
ben/bump-ai-review-524b5a7

Conversation

@ben-miru

@ben-miru ben-miru commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the pinned mirurobotics/.github AI review workflow from 6472b6d to 524b5a7.

What changes: mirurobotics/.github#6. Before reviewing, the workflow fetches the PR's earlier inline review threads, with their replies and resolved state, and the PR conversation. The prompt then tells Claude not to re-raise points that are already settled.

  • Only the PR author, an OWNER, MEMBER or COLLABORATOR, or a resolved mark can settle a thread. None of them can clear a blocking finding unless the code backs it up.
  • If fetching the earlier comments fails, the review fails closed with an error status. Re-run the job.
  • Claude gets no new tool permissions.

This PR is reviewed by the currently pinned version, because pull_request_target runs the workflow from the base branch. The new behaviour starts on PRs opened after this merges.

🤖 Generated with Claude Code


View with [code]smith Autofix with [code]smith
Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.

Picks up mirurobotics/.github#6: the AI reviewer reads earlier review threads and the PR conversation, so it stops re-raising points that were already answered.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Comment thread .github/workflows/ai-review.yml
@github-actions

Copy link
Copy Markdown

AI review: approve for c652a5e

This PR changes one line: it moves the pinned mirurobotics/.github reusable AI-review workflow from SHA 6472b6d to 524b5a7. The pin is still a full 40-character commit SHA. The caller's permissions (contents: read, pull-requests: write, statuses: write), its pull_request_target trigger and the secrets it passes are all unchanged. I couldn't look at the upstream diff between the two SHAs: the GitHub API call to compare them needed approval, which this job doesn't have. I left a non-blocking inline note asking a human to confirm that 524b5a7 is the merged commit from mirurobotics/.github#6. Nothing visible in this repo would cause a bug or a security problem.

Review run

@ben-miru
ben-miru merged commit 96dba88 into main Oct 12, 2026
29 checks passed
@ben-miru
ben-miru deleted the ben/bump-ai-review-524b5a7 branch October 12, 2026 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant