ci(github-action): update action misospace/pr-reviewer-action (v2.1.5 → v2.1.6)

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
misospace/pr-reviewer-action	action	patch	v2.1.5 → v2.1.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

misospace/pr-reviewer-action (misospace/pr-reviewer-action)

v2.1.6

Compare Source

What's Changed

• ci(github-action): update action misospace/pr-reviewer-action (v2.1.4 → v2.1.5) by @​its-miso[bot] in #​423
• ci(github-action)!: Update action actions/setup-python (v6.3.0 → v7.0.0) by @​its-miso[bot] in #​424
• ci(github-action): update action actions/checkout (v7.0.0 → v7.0.1) by @​its-miso[bot] in #​425
• fix(tools): honor "*" wildcard in web_fetch host allowlist by @​joryirving in #​427

Full Changelog: misospace/pr-reviewer-action@v2.1.5...v2.1.6

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: Update misospace/pr-reviewer-action v2.1.5 → v2.1.6

Summary

This is a straightforward Renovate dependency update patching the misospace/pr-reviewer-action GitHub Action from v2.1.5 to v2.1.6 in the AI PR review workflow. The change touches a single file with a one-line action pin update.

Change Details

File changed: .github/workflows/ai-pr-review.yaml

• Old pin: @071a13976b80df2d5ea0e45285bcafcdae2c8a9e # v2.1.5
• New pin: @2f3713c246216f5d1a4fc5c3d944932d5567b4b5 # v2.1.6

The commit SHA is properly pinned with a version comment annotation — this is the correct pattern for GitHub Actions.

Release Notes Verification (v2.1.6)

The v2.1.6 release (published 2026-07-23T16:00:27Z) contains 4 changes:

Change	Description
PR 423	Self-update of pr-reviewer-action (v2.1.4 → v2.1.5)
PR 424	actions/setup-python v6.3.0 → v7.0.0 (breaking)
PR 425	actions/checkout v7.0.0 → v7.0.1
PR 427	fix(tools): honor "*" wildcard in web_fetch host allowlist

The most notable change is PR 427, which fixes a regression where allowlisted_host() performed exact-match only, causing allowed_source_hosts: "*" to silently block every fetch instead of allowing any host. This is a correctness fix that aligns web_fetch host allowlisting with the existing gh_api repo allowlist behavior. The release also includes updated CI dependency pins.

Standards Compliance

Requirement	Status
No secrets committed	✅ Pass — no secrets involved
No .env, node_modules, or build artifacts	✅ Pass — only workflow YAML
Proper action pinning	✅ Pass — commit SHA with version comment
No agent-specific names in generic docs	✅ N/A — no documentation changes

CI Check Results

All 11 CI checks passed:

• publish-release, review (×3), Docker Build, Tests, Typecheck, Lint, Build, renovate/stability-days

Tool Harness Findings

The tool harness encountered two API errors (404) when attempting to fetch the compare endpoint and release tag via the GitHub API, but the release metadata was successfully retrieved via the releases enrichment endpoint, so the verification is complete.

Assessment

This is a low-risk, well-formed dependency update. The Renovate PR follows repository conventions:

• Action pinned to full commit SHA
• Version annotated in comment
• Automerge enabled (standard for patch updates)
• All CI checks green

Recommendation: Approve.