ci(github-action): update https://github.com/misospace/pr-reviewer-action ( v2.1.10 ➔ v2.2.1 ) #2008

Merged

GiorgioAresu merged 1 commit from renovate/https-github.com-misospace-pr-reviewer-action-2.x into main 2026-08-29 10:46:08 +02:00

Conversation 2 Commits 1 Files changed 1 +1 -1

renovate-bot commented 2026-08-14 11:00:49 +02:00

Collaborator

Copy link

This PR contains the following updates:

Package	Type	Update	Change
https://github.com/misospace/pr-reviewer-action	action	minor	v2.1.10 → v2.2.1

---

Release Notes

misospace/pr-reviewer-action (https://github.com/misospace/pr-reviewer-action)

v2.2.1

Compare Source

⚠ BREAKING CHANGES

• github-action: Update action actions/setup-python (v5.6.0 → v7.0.0) (#​492)
• github-action: Update action actions/upload-artifact (v4.6.2 → v7.0.1) (#​493)
• github-action: Update action actions/checkout (v4.4.0 → v7.0.1) (#​491)

Features

• action: add fail_on_request_changes input to gate merges without a GitHub App (#​528) (448b27b), closes #​518

Bug Fixes

• classification: pass impact pattern to awk via ENVIRON (#​481) (787f619)
• escalate on an empty completion instead of retrying the same model (#​525) (3850b4a)
• evidence: scrub AI_PRIMARY_API_KEY, AI_SMART_API_KEY, LINEAR_API_KEY from provider env (#​522) (322f88d), closes #​513
• give the native_loop verdict turn the real tool harness findings (#​527) (edb0b02)
• precheck: carry forward previous verdict on diff-unchanged skip (#​523) (22b551e)
• resolve issue #​509 (#​519) (3d7459f)
• route Forgejo auth header through 0600 curl --config file (#​486) (e182061), closes #​471
• security: restrict web_fetch URL scheme to http/https (#​479) (7398d13), closes #​468
• ssrf: gate host allowlist on resolved IP (#​520) (b917fb2), closes #​510
• update README from @​v1 to @​v2 and fix stale self-review section (#​487) (b03949b), closes #​470

Chores

• ci: add gitleaks secret-scan step to validate job (#​521) (fc3b02d)
• ci: add shellcheck to CI (#​467) (61ec936)
• ci: pin test dependencies in requirements.txt for reproducible builds (#​526) (91de1d7), closes #​514
• release 2.2.1 (#​506) (5669812)

Documentation

• clarify ai-pr-review-sha marker value in emit_review_markers (#​503) (07b28c6), closes #​484
• issue contract for the autonomous loop (#​483) (1243840)

Continuous Integration

• github-action: Update action actions/checkout (v4.4.0 → v7.0.1) (#​491) (e002f7b)
• github-action: Update action actions/setup-python (v5.6.0 → v7.0.0) (#​492) (582e3c2)
• github-action: Update action actions/upload-artifact (v4.6.2 → v7.0.1) (#​493) (caad320)

v2.2.0

Compare Source

What's Changed

• feat(prompt): add review_verbosity dial for shorter reviews by @​joryirving in #​475
• fix(prompt): make Standards Compliance a conditional section by @​joryirving in #​476
• fix(ci): review stacked PRs in the dogfood workflow by @​joryirving in #​477

Full Changelog: https://github.com/misospace/pr-reviewer-action/compare/v2.1.11...v2.2.0

v2.1.11

Compare Source

What's Changed

• feat: let system_prompt_file win over system_prompt when both are set (#​426) by @​itsmiso-ai in #​461
• Fix #​449: recover fenced JSON with raw newlines in string values by @​itsmiso-ai in #​463
• Treat flattened review_markdown from json_schema as a validation failure by @​itsmiso-ai in #​464
• fix(prompt): compose inline and file inputs by @​itsmiso-ai in #​465
• refactor(action): extract Publish step bash into scripts/run_publish.sh (#​428) by @​itsmiso-ai in #​462
• fix(parser): recover verdict from reasoning-model prose by @​joryirving in #​474

Full Changelog: https://github.com/misospace/pr-reviewer-action/compare/v2.1.10...v2.1.11

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/misospace/pr-reviewer-action](https://github.com/misospace/pr-reviewer-action) | action | minor | `v2.1.10` → `v2.2.1` | --- ### Release Notes <details> <summary>misospace/pr-reviewer-action (https://github.com/misospace/pr-reviewer-action)</summary> ### [`v2.2.1`](https://github.com/misospace/pr-reviewer-action/releases/tag/v2.2.1) [Compare Source](https://github.com/misospace/pr-reviewer-action/compare/v2.2.0...v2.2.1) ##### ⚠ BREAKING CHANGES - **github-action:** Update action actions/setup-python (v5.6.0 → v7.0.0) ([#&#8203;492](https://github.com/misospace/pr-reviewer-action/issues/492)) - **github-action:** Update action actions/upload-artifact (v4.6.2 → v7.0.1) ([#&#8203;493](https://github.com/misospace/pr-reviewer-action/issues/493)) - **github-action:** Update action actions/checkout (v4.4.0 → v7.0.1) ([#&#8203;491](https://github.com/misospace/pr-reviewer-action/issues/491)) ##### Features - **action:** add fail\_on\_request\_changes input to gate merges without a GitHub App ([#&#8203;528](https://github.com/misospace/pr-reviewer-action/issues/528)) ([448b27b](https://github.com/misospace/pr-reviewer-action/commit/448b27bbef0fb612662aba7bbc5e7ff6d99950b1)), closes [#&#8203;518](https://github.com/misospace/pr-reviewer-action/issues/518) ##### Bug Fixes - **classification:** pass impact pattern to awk via ENVIRON ([#&#8203;481](https://github.com/misospace/pr-reviewer-action/issues/481)) ([787f619](https://github.com/misospace/pr-reviewer-action/commit/787f619da413617116b894f215e40b38feedeb6c)) - escalate on an empty completion instead of retrying the same model ([#&#8203;525](https://github.com/misospace/pr-reviewer-action/issues/525)) ([3850b4a](https://github.com/misospace/pr-reviewer-action/commit/3850b4a86bb46e9f5df266cc0c5c14bf856ff443)) - **evidence:** scrub AI\_PRIMARY\_API\_KEY, AI\_SMART\_API\_KEY, LINEAR\_API\_KEY from provider env ([#&#8203;522](https://github.com/misospace/pr-reviewer-action/issues/522)) ([322f88d](https://github.com/misospace/pr-reviewer-action/commit/322f88da78b03c7eeafa09a939e7495e3ed08976)), closes [#&#8203;513](https://github.com/misospace/pr-reviewer-action/issues/513) - give the native\_loop verdict turn the real tool harness findings ([#&#8203;527](https://github.com/misospace/pr-reviewer-action/issues/527)) ([edb0b02](https://github.com/misospace/pr-reviewer-action/commit/edb0b02bc4c5cc072f938ee3fe307978764bea3d)) - **precheck:** carry forward previous verdict on diff-unchanged skip ([#&#8203;523](https://github.com/misospace/pr-reviewer-action/issues/523)) ([22b551e](https://github.com/misospace/pr-reviewer-action/commit/22b551ede8d66c443bbec18974f26fecf3d2f4df)) - resolve issue [#&#8203;509](https://github.com/misospace/pr-reviewer-action/issues/509) ([#&#8203;519](https://github.com/misospace/pr-reviewer-action/issues/519)) ([3d7459f](https://github.com/misospace/pr-reviewer-action/commit/3d7459f9ab4c4483e6b3ff14f0bb9b7ecb4454e7)) - route Forgejo auth header through 0600 curl --config file ([#&#8203;486](https://github.com/misospace/pr-reviewer-action/issues/486)) ([e182061](https://github.com/misospace/pr-reviewer-action/commit/e182061739aad5bd32fe01361477103ed48e8e2a)), closes [#&#8203;471](https://github.com/misospace/pr-reviewer-action/issues/471) - **security:** restrict web\_fetch URL scheme to http/https ([#&#8203;479](https://github.com/misospace/pr-reviewer-action/issues/479)) ([7398d13](https://github.com/misospace/pr-reviewer-action/commit/7398d137f2efde9a964c408525060c480592316f)), closes [#&#8203;468](https://github.com/misospace/pr-reviewer-action/issues/468) - **ssrf:** gate host allowlist on resolved IP ([#&#8203;520](https://github.com/misospace/pr-reviewer-action/issues/520)) ([b917fb2](https://github.com/misospace/pr-reviewer-action/commit/b917fb29aac8ecee9dc376194b2157c2913c77ad)), closes [#&#8203;510](https://github.com/misospace/pr-reviewer-action/issues/510) - update README from [@&#8203;v1](https://github.com/v1) to [@&#8203;v2](https://github.com/v2) and fix stale self-review section ([#&#8203;487](https://github.com/misospace/pr-reviewer-action/issues/487)) ([b03949b](https://github.com/misospace/pr-reviewer-action/commit/b03949b530981cf1bb8d8f49d5f09636652f7b84)), closes [#&#8203;470](https://github.com/misospace/pr-reviewer-action/issues/470) ##### Chores - **ci:** add gitleaks secret-scan step to validate job ([#&#8203;521](https://github.com/misospace/pr-reviewer-action/issues/521)) ([fc3b02d](https://github.com/misospace/pr-reviewer-action/commit/fc3b02d6915c75944fff99d260533c0a757b8fe0)) - **ci:** add shellcheck to CI ([#&#8203;467](https://github.com/misospace/pr-reviewer-action/issues/467)) ([61ec936](https://github.com/misospace/pr-reviewer-action/commit/61ec936b69a39af96b0be779bcb0af88e4446684)) - **ci:** pin test dependencies in requirements.txt for reproducible builds ([#&#8203;526](https://github.com/misospace/pr-reviewer-action/issues/526)) ([91de1d7](https://github.com/misospace/pr-reviewer-action/commit/91de1d772d475dac21d3d56976821fbf0e044c00)), closes [#&#8203;514](https://github.com/misospace/pr-reviewer-action/issues/514) - release 2.2.1 ([#&#8203;506](https://github.com/misospace/pr-reviewer-action/issues/506)) ([5669812](https://github.com/misospace/pr-reviewer-action/commit/566981250c0409662b2c6be638316e43085ae31e)) ##### Documentation - clarify ai-pr-review-sha marker value in emit\_review\_markers ([#&#8203;503](https://github.com/misospace/pr-reviewer-action/issues/503)) ([07b28c6](https://github.com/misospace/pr-reviewer-action/commit/07b28c6e56eb0d840036e526f2b3c00b14dd948e)), closes [#&#8203;484](https://github.com/misospace/pr-reviewer-action/issues/484) - issue contract for the autonomous loop ([#&#8203;483](https://github.com/misospace/pr-reviewer-action/issues/483)) ([1243840](https://github.com/misospace/pr-reviewer-action/commit/12438401f09847793834fda84b888fa3a4c7a51b)) ##### Continuous Integration - **github-action:** Update action actions/checkout (v4.4.0 → v7.0.1) ([#&#8203;491](https://github.com/misospace/pr-reviewer-action/issues/491)) ([e002f7b](https://github.com/misospace/pr-reviewer-action/commit/e002f7b81aa960122c913768e7133bf5b0852487)) - **github-action:** Update action actions/setup-python (v5.6.0 → v7.0.0) ([#&#8203;492](https://github.com/misospace/pr-reviewer-action/issues/492)) ([582e3c2](https://github.com/misospace/pr-reviewer-action/commit/582e3c2d41dc3a2d3138791290d72acb174e6b25)) - **github-action:** Update action actions/upload-artifact (v4.6.2 → v7.0.1) ([#&#8203;493](https://github.com/misospace/pr-reviewer-action/issues/493)) ([caad320](https://github.com/misospace/pr-reviewer-action/commit/caad3205b2219eb0913b10fdddd710f9749cc167)) ### [`v2.2.0`](https://github.com/misospace/pr-reviewer-action/releases/tag/v2.2.0) [Compare Source](https://github.com/misospace/pr-reviewer-action/compare/v2.1.11...v2.2.0) #### What's Changed - feat(prompt): add review\_verbosity dial for shorter reviews by [@&#8203;joryirving](https://github.com/joryirving) in [#&#8203;475](https://github.com/misospace/pr-reviewer-action/pull/475) - fix(prompt): make Standards Compliance a conditional section by [@&#8203;joryirving](https://github.com/joryirving) in [#&#8203;476](https://github.com/misospace/pr-reviewer-action/pull/476) - fix(ci): review stacked PRs in the dogfood workflow by [@&#8203;joryirving](https://github.com/joryirving) in [#&#8203;477](https://github.com/misospace/pr-reviewer-action/pull/477) **Full Changelog**: <https://github.com/misospace/pr-reviewer-action/compare/v2.1.11...v2.2.0> ### [`v2.1.11`](https://github.com/misospace/pr-reviewer-action/releases/tag/v2.1.11) [Compare Source](https://github.com/misospace/pr-reviewer-action/compare/v2.1.10...v2.1.11) #### What's Changed - feat: let system\_prompt\_file win over system\_prompt when both are set ([#&#8203;426](https://github.com/misospace/pr-reviewer-action/issues/426)) by [@&#8203;itsmiso-ai](https://github.com/itsmiso-ai) in [#&#8203;461](https://github.com/misospace/pr-reviewer-action/pull/461) - Fix [#&#8203;449](https://github.com/misospace/pr-reviewer-action/issues/449): recover fenced JSON with raw newlines in string values by [@&#8203;itsmiso-ai](https://github.com/itsmiso-ai) in [#&#8203;463](https://github.com/misospace/pr-reviewer-action/pull/463) - Treat flattened review\_markdown from json\_schema as a validation failure by [@&#8203;itsmiso-ai](https://github.com/itsmiso-ai) in [#&#8203;464](https://github.com/misospace/pr-reviewer-action/pull/464) - fix(prompt): compose inline and file inputs by [@&#8203;itsmiso-ai](https://github.com/itsmiso-ai) in [#&#8203;465](https://github.com/misospace/pr-reviewer-action/pull/465) - refactor(action): extract Publish step bash into scripts/run\_publish.sh ([#&#8203;428](https://github.com/misospace/pr-reviewer-action/issues/428)) by [@&#8203;itsmiso-ai](https://github.com/itsmiso-ai) in [#&#8203;462](https://github.com/misospace/pr-reviewer-action/pull/462) - fix(parser): recover verdict from reasoning-model prose by [@&#8203;joryirving](https://github.com/joryirving) in [#&#8203;474](https://github.com/misospace/pr-reviewer-action/pull/474) **Full Changelog**: <https://github.com/misospace/pr-reviewer-action/compare/v2.1.10...v2.1.11> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Rome) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNy4xIiwidXBkYXRlZEluVmVyIjoiNDQuMTcuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUvZ2l0aHViLWFjdGlvbiIsInJlbm92YXRlL2dpdGh1Yi1yZWxlYXNlIiwidHlwZS9taW5vciJdfQ==-->

renovate-bot added the

renovate/github-action

renovate/github-release

type/minor

labels 2026-08-14 11:00:49 +02:00

lab-assistant-bot commented 2026-08-14 11:00:51 +02:00

Collaborator

Copy link

konflate — summary

✅ No rendered changes.

View the full rendered diff →

_{konflate · rendered bc506ae · advisory, not a gate}

<!-- konflate:pr-2008 --> ### konflate — summary ✅ No rendered changes. [View the full rendered diff →](https://konflate.aresu.eu/#/pr/2008) _{konflate · rendered `bc506ae` · advisory, not a gate}

forgejo-actions added the

area/ci

label 2026-08-14 11:00:57 +02:00

lab-assistant-bot commented 2026-08-14 11:01:29 +02:00

Collaborator

Copy link

✅ Automated recommendation: APPROVE

Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)

Recommendation: Approve

This PR updates the pr-reviewer-action from v2.1.10 to v2.2.1 — a minor version bump with patch fixes and one new feature.

Changed files:

• .forgejo/workflows/pr-reviewer.yaml — action SHA pin updated (6f4fb724... → 54dfb1aa...)

Notable in v2.2.1:

• Security fixes: SSRF protection now gates the host allowlist on resolved IP; API keys (AI_PRIMARY_API_KEY, AI_SMART_API_KEY, LINEAR_API_KEY) are scrubbed from provider env vars
• Bug fixes: Empty completion escalation, diff-unchanged skip verdict handling, Forgejo auth header routing via curl config (0600)
• Breaking changes: Upstream action deps updated (actions/checkout v4→v7, actions/setup-python v5→v7, actions/upload-artifact v4→v7) — these are transitive, not API-level changes to pr-reviewer-action
• New feature: fail_on_request_changes input added

Checks performed:

• Konflate render: no findings (not applicable — GitHub Actions workflow, not K8s manifests)
• No image digests changed
• Action pinned by SHA (correct for GitHub Actions)
• No linked issues or must_check items to verify

The breaking changes listed in the release notes apply to transitive dependencies of the action, not to the action's own interface. The security improvements (SSRF mitigation, key scrubbing) are net-positive. This is a routine, low-risk CI dependency update for the repository's own PR review pipeline.

<!-- ai-pr-reviewer --> <!-- ai-pr-reviewer:{"version":1,"head_sha":"37fce6004be4e865921cbb8d314051140113b09e","base_sha":"ac5ffcd4a7d4bec2f0604db15231cc0bf112a0b7","review_scope":"full","review_result":"clean"} --> <!-- ai-pr-review-sha:37fce6004be4e865921cbb8d314051140113b09e --> <!-- ai-pr-review-fingerprint:cd376dcc0a302ea84544492c4edfd85c26510c0d1f21b4601d13d62bbbf2cb95|cfg:6ff4d54b131d0810de567d07fbcec72a3d6e810b67a2b67bfc127a6104dd8f4e --> ✅ **Automated recommendation: APPROVE** _Analysis engine: minimax/MiniMax-M2-7-anthropic@http://litellm.ai.svc.cluster.local:4000/v1 (anthropic)_ **Recommendation: Approve** This PR updates the `pr-reviewer-action` from v2.1.10 to v2.2.1 — a minor version bump with patch fixes and one new feature. **Changed files:** - `.forgejo/workflows/pr-reviewer.yaml` — action SHA pin updated (`6f4fb724...` → `54dfb1aa...`) **Notable in v2.2.1:** - **Security fixes**: SSRF protection now gates the host allowlist on resolved IP; API keys (AI_PRIMARY_API_KEY, AI_SMART_API_KEY, LINEAR_API_KEY) are scrubbed from provider env vars - **Bug fixes**: Empty completion escalation, diff-unchanged skip verdict handling, Forgejo auth header routing via curl config (0600) - **Breaking changes**: Upstream action deps updated (actions/checkout v4→v7, actions/setup-python v5→v7, actions/upload-artifact v4→v7) — these are transitive, not API-level changes to pr-reviewer-action - **New feature**: `fail_on_request_changes` input added **Checks performed:** - Konflate render: no findings (not applicable — GitHub Actions workflow, not K8s manifests) - No image digests changed - Action pinned by SHA (correct for GitHub Actions) - No linked issues or must_check items to verify The breaking changes listed in the release notes apply to transitive dependencies of the action, not to the action's own interface. The security improvements (SSRF mitigation, key scrubbing) are net-positive. This is a routine, low-risk CI dependency update for the repository's own PR review pipeline.

renovate-bot changed title from ci(github-action): update https://github.com/misospace/pr-reviewer-action ( v2.1.10 ➔ v2.2.0 ) to ci(github-action): update https://github.com/misospace/pr-reviewer-action ( v2.1.10 ➔ v2.2.1 ) 2026-08-22 20:00:46 +02:00

renovate-bot force-pushed renovate/https-github.com-misospace-pr-reviewer-action-2.x from 1ba78fb0a6 to 37fce6004b 2026-08-22 20:00:46 +02:00 Compare

renovate-bot force-pushed renovate/https-github.com-misospace-pr-reviewer-action-2.x from 37fce6004b to bc506aec26 2026-08-29 10:40:00 +02:00 Compare

GiorgioAresu merged commit 590c8c7e7d into main 2026-08-29 10:46:08 +02:00

GiorgioAresu deleted branch renovate/https-github.com-misospace-pr-reviewer-action-2.x 2026-08-29 10:46:08 +02:00

GiorgioAresu referenced this pull request from a commit 2026-08-29 10:46:09 +02:00

Merge pull request 'ci(github-action): update https://github.com/misospace/pr-reviewer-action ( v2.1.10 ➔ v2.2.1 )' (#2008) from renovate/https-github.com-misospace-pr-reviewer-action-2.x into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area/bootstrap

  

area/ci

  

area/kubernetes

  

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

renovate/container

  

renovate/github-action

  

renovate/github-release

  

renovate/grafana-dashboard

  

renovate/helm

  

renovate/terraform

  

type/digest

  

type/major

  

type/minor

  

type/patch

  

wontfix

This will not be worked on

No labels

area/bootstrap

area/ci

area/kubernetes

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

renovate/container

renovate/github-action

renovate/github-release

renovate/grafana-dashboard

renovate/helm

renovate/terraform

type/digest

type/major

type/minor

type/patch

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

GiorgioAresu/home-ops!2008

No description provided.