ci(github-action): update action misospace/pr-reviewer-action (v2.0.0 → v2.1.1)

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
misospace/pr-reviewer-action	action	minor	v2.0.0 → v2.1.1

---

Release Notes

misospace/pr-reviewer-action (misospace/pr-reviewer-action)

v2.1.1

Compare Source

What's Changed

• Fix duplicate/missing header in linked-issues section (#​399) by @​joryirving in #​400
• Fix over-escalation: trust concise fast reviews + route on filename/linked signals only by @​joryirving in #​401

Full Changelog: misospace/pr-reviewer-action@v2.1.0...v2.1.1

v2.1.0

Compare Source

What's Changed

• chore: dead-code removal and dedup sweep by @​joryirving in #​366
• fix(forgejo): structured gh api for GitHub comments, unified sticky-comment selection by @​joryirving in #​376
• refactor(classifier): declarative rule tables for pr_kind and risk flags by @​joryirving in #​377
• fix(security): derive fork-ness once, fail closed on degraded PR metadata by @​joryirving in #​380
• fix(precheck): read prior-review metadata via JSON side-file, drop eval by @​joryirving in #​378
• refactor(ci-gate): normalize external checks once in the platform seam by @​joryirving in #​379
• test(redact): comprehensive secret-redaction coverage by @​joryirving in #​381
• docs(verdict): pin the bash/Python verdict-turn contract with equivalence tests by @​joryirving in #​385
• refactor(enrichment): extract run_enrichment core into pr_reviewer modules by @​joryirving in #​386
• ci: enforce pytest coverage gate (baseline 76%, gate 72%) by @​joryirving in #​382
• test(forgejo): unit-test _diff_positions in isolation by @​joryirving in #​383
• test(env): hard gate on cross-block env binding drift in action.yml by @​joryirving in #​384
• fix(platform): resolve platform once in the precheck; PLATFORM-aware _is_forgejo_mode by @​joryirving in #​387
• fix(mcp): correct tool-name docs, log loop outcome, resolve separator aliases by @​joryirving in #​390
• refactor(utils): consolidate env_int, DeadlineBudget, and compare summarization by @​joryirving in #​391
• ci(github-action): update action misospace/pr-reviewer-action (v2.0.0 → v2.0.5) by @​its-miso[bot] in #​392
• docs(agents): replace stale saffron-lane label table with ad-hoc agent/ convention by @​joryirving in #​393
• docs(release): document versioning policy; keep pre-releases off the floating major tag by @​joryirving in #​394
• perf(native-loop): dedup verdict-turn corpus sections; collapse skipped-source boilerplate by @​joryirving in #​395
• refactor(review): unify primary/fallback/smart model calls behind call_model_tier by @​joryirving in #​396
• perf(context): parallelize advisory phases, fan out enrichment API calls, collapse repo-impact scans by @​joryirving in #​397

Full Changelog: misospace/pr-reviewer-action@v2.0.5...v2.1.0

v2.0.5

Compare Source

What's Changed

• fix(enrichment): move brittle shell extraction into Python by @​joryirving in #​357

Full Changelog: misospace/pr-reviewer-action@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

• fix(context): guard compare-shas extraction against set -e by @​joryirving in #​356

Full Changelog: misospace/pr-reviewer-action@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

• feat(enrichment): fetch upstream content for forge-hosted, rolling-tag, and OCI-chart bumps by @​eleboucher in #​349
• perf(enrichment): skip Phase-1 fetch for known non-Forgejo hosts by @​itsmiso-ai in #​353
• fix(context): document SHA regex assumption for non-SHA hex tokens by @​itsmiso-ai in #​354
• fix(enrichment): accept query string in compare URL regex by @​itsmiso-ai in #​355

Full Changelog: misospace/pr-reviewer-action@v2.0.2...v2.0.3

v2.0.2

Compare Source

What's Changed

• feat(release): automate releases by @​joryirving in #​347
• fix(forgejo): send POST body via stdin; surface publish failures by @​eleboucher in #​348

New Contributors

• @​eleboucher made their first contribution in #​348

Full Changelog: misospace/pr-reviewer-action@v2.0.1...v2.0.2

v2.0.1: — Forgejo seam hardening + CI guards

Compare Source

A small hardening patch on the 2.0 line. No functional change for GitHub consumers — on the supported path runtime behavior is identical to v2.0.0. This release is regression guards, docs, and two Forgejo-only correctness fixes. @v2 now points here.

Forgejo correctness (the only runtime changes; the GitHub path is byte-identical)

• platform_compare now forwards --jq on the Forgejo backend — it was silently dropped, so a --jq projection returned the whole compare object instead of the field. The --jq passthrough is now a single shared helper used by both platform_pr_get and platform_compare (#​344).
• The incremental-diff fetch only runs for a real http(s):// compare URL. Forgejo's compare object omits url, so the fetch now skips cleanly instead of attempting a doomed request (#​344).

Hardening and docs

• Outbound-HTTP User-Agent regression guard (#​345): web_fetch / web_search / fetch_url are now asserted to send a non-default User-Agent. urllib's default UA is what tripped the konflate Cloudflare bot fence; a future helper that forgets the header now fails in CI instead of in production.
• Adversarial-fixture convention documented (#​345): every sanitizer/fence must have a test that feeds the boundary token itself, not just benign input.
• Seam divergence + versioning notes refreshed (#​344, #​346): the known Forgejo/GitHub shape differences are documented in the platform seam header, and the versioning convention reflects the current floating-major-tag scheme.

Upgrading

Drop-in for any v2 consumer — @v2 and @v2.0.0 pins need no changes. The v1 tag is unaffected.

Full changelog: misospace/pr-reviewer-action@v2.0.0...v2.0.1

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled because a matching PR was automerged previously.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: Update misospace/pr-reviewer-action v2.0.0 → v2.1.1

Summary

A straightforward GitHub Action dependency update with no application code changes.

Change-by-Change Findings

.github/workflows/ai-pr-review.yaml

• Line 42: Updated action pin from SHA 7e25f7d0d8651e936f3158477b0a364f27ed7383 (v2.0.0) → 41d9ffadf39c7f317ef3cb6885d9f48447dcad23 (v2.1.1)
• This is a standard dependency version bump; no code logic changes in this repo

Sources

• PR body provides release notes showing v2.1.1 includes two fixes:
  • Fix duplicate/missing header in linked-issues section (PR 399)
  • Fix over-escalation: trust concise fast reviews + route on filename/linked signals only (PR 401)
• GitHub Releases API confirmed v2.1.1 published 2026-07-07
• Compare metadata from v2.1.0...v2.1.1 shows two commits matching the release notes

Standards Compliance

• Repository standards (AGENTS.md) are not applicable: this PR only modifies CI workflow configuration, not application code or game logic
• The action being updated is the PR-reviewer tool itself (self-referential upgrade)

Linked Issue Fit

• No linked issues; this is a pure dependency update

Evidence Provider Findings

• No evidence providers configured for this repo

Tool Harness Findings

• Tool API calls to misospace/pr-reviewer-action were blocked by repo permission configuration (expected)
• File read of the modified workflow confirmed the new SHA is present

CI Check Results

Check	State
review	success
review	success
Headless smoke test	success
macOS validation	success
Script test suite	success
review	success
review	success
renovate/stability-days	success

All 8 CI checks passed. The action under review was used to review this PR, and it passed its own stability gate.

Unknowns or Needs Verification

• The commit SHA 41d9ffadf39c7f317ef3cb6885d9f48447dcad23 could not be verified against the upstream repo due to API restrictions, but the SHA is consistent with the v2.1.1 tag and release metadata fetched via GitHub Releases API
• Note: main branch already merged the same update via PR PR 261 (759ac7c); this PR is the Renovate branch for the same change

Recommendation

Approve. This is a low-risk, fully automated dependency update that:

1. Passes all CI checks
2. Matches the documented release notes
3. Is pinned to a specific SHA (not a floating tag)
4. Fixes real issues (over-escalation and header rendering)
5. Was previously validated when merged to main