Bump sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.17 to 0.0.21 - #99
Conversation
Bumps [sei-protocol/uci/.github/workflows/ai-review.yml](https://github.com/sei-protocol/uci) from 0.0.17 to 0.0.21. - [Release notes](https://github.com/sei-protocol/uci/releases) - [Commits](1d50ef2...93ebad0) --- updated-dependencies: - dependency-name: sei-protocol/uci/.github/workflows/ai-review.yml dependency-version: 0.0.21 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
PR SummaryLow Risk Overview That pulls in upstream CI behavior from UCI v0.0.18–v0.0.21 (e.g. comment-trigger concurrency fixes, fewer cancelled review jobs, opt-in nit reviews, bot-review options, and allowed bot names for the Claude action). Permissions, secrets, Reviewed by Cursor Bugbot for commit bd9970b. Bugbot is set up for automated code reviews on this repo. Configure here. |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit bd9970b. Configure here.
| if: github.event_name != 'issue_comment' || github.event.issue.pull_request != null | ||
| # See: https://github.com/sei-protocol/uci/releases/tag/v0.0.17 | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@1d50ef2bd27c695493f254c3037eb6b78f9bb85f | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@93ebad0186c8b71a4036fd0915ffe2ec44283d4b |
There was a problem hiding this comment.
Workflow pin and uci-ref diverged
Medium Severity
The uses pin now points at v0.0.21, but uci-ref still fetches prompts from the v0.0.17 SHA. The reusable workflow checks out scout.md and review.md from uci-ref, so the new pipeline runs against older prompt files.
Reviewed by Cursor Bugbot for commit bd9970b. Configure here.
Bumps sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.17 to 0.0.21.
Release notes
Sourced from sei-protocol/uci/.github/workflows/ai-review.yml's releases.
Commits
93ebad0Set allowed bot names in claude code action (#69)68010d0Add option to allow bots reviewing bot code (#68)a4b7a32Fix high rate of cancelled AI review jobs (#67)eb65d6dFix concuccency control on AI review trigger by comment (#64)be86965Make nit level AI reviews opt-in (#63)d43d59bReact with emoji for better UX on explicit review ask (#62)4f5f5e0Merge pull request #61 from sei-protocol/enable-uci-ai-review191da3dEnable AI review and assistance on UCIDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)