Repository navigation
build(deps): bump sei-protocol/uci/.github/workflows/ai-assistant.yml from 0.0.22 to 0.0.26 - #122
Conversation
Bumps [sei-protocol/uci/.github/workflows/ai-assistant.yml](https://github.com/sei-protocol/uci) from 0.0.22 to 0.0.26. - [Release notes](https://github.com/sei-protocol/uci/releases) - [Commits](4bd0b78...0dc48cf) --- updated-dependencies: - dependency-name: sei-protocol/uci/.github/workflows/ai-assistant.yml dependency-version: 0.0.26 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
PR SummaryLow Risk Overview That pulls in upstream v0.0.26 behavior for comment/review-triggered assistant runs— notably reserving Reviewed by Cursor Bugbot for commit 7d211e6. Bugbot is set up for automated code reviews on this repo. Configure here. |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
This Dependabot bump moves the reusable ai-assistant.yml workflow from v0.0.22 to v0.0.26 (0dc48cf). But the uci-ref input and both release-tag comments still point at v0.0.22, so the workflow and the prompt it fetches now come from different versions.
Findings: 0 blocking | 2 non-blocking | 1 posted inline
Blockers
- None at the file/PR level.
Non-blocking
- [suggestion] Repoint the
# See: .../releases/tag/v0.0.22comments on lines 11 and 20 to v0.0.26 so they match the pinned SHA. As they stand, they misstate which version is in use. - 1 suggestion(s)/nit(s) flagged inline on specific lines.
| assistant: | ||
| # See: https://github.com/sei-protocol/uci/releases/tag/v0.0.22 | ||
| uses: sei-protocol/uci/.github/workflows/ai-assistant.yml@4bd0b7826bdf7966c2bd899b8810a3aaaa52e80d | ||
| uses: sei-protocol/uci/.github/workflows/ai-assistant.yml@0dc48cfb58b6c88f528b6def9784524d444ed0f6 |
There was a problem hiding this comment.
[suggestion] uses: now pins v0.0.26 (0dc48cf…), but uci-ref on line 21 still points at v0.0.22 (4bd0b78…). The uci-ref input says "Pin to your uses: ref." The v0.0.26 workflow will check out .github/seidroid/ai-review from the old ref, so it runs with the v0.0.22 prompt and skips any prompt changes made since then. Set uci-ref to 0dc48cfb58b6c88f528b6def9784524d444ed0f6 as well, and update both v0.0.22 comments to v0.0.26.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 7d211e6. Configure here.
| assistant: | ||
| # See: https://github.com/sei-protocol/uci/releases/tag/v0.0.22 | ||
| uses: sei-protocol/uci/.github/workflows/ai-assistant.yml@4bd0b7826bdf7966c2bd899b8810a3aaaa52e80d | ||
| uses: sei-protocol/uci/.github/workflows/ai-assistant.yml@0dc48cfb58b6c88f528b6def9784524d444ed0f6 |
There was a problem hiding this comment.
Workflow pin and uci-ref diverged
Low Severity
The uses: pin now targets v0.0.26, but uci-ref still names the v0.0.22 SHA. The reusable workflow checks out assistant.md from uci-ref, so this bump runs the new assistant against the old prompt set.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 7d211e6. Configure here.
Bumps sei-protocol/uci/.github/workflows/ai-assistant.yml from 0.0.22 to 0.0.26.
Release notes
Sourced from sei-protocol/uci/.github/workflows/ai-assistant.yml's releases.
... (truncated)
Commits
0dc48cffeat(seidroid-review): drive sei-agent-driver v0.23.0 (#119)54c9dacfeat(seidroid-review): run the review at high reasoning effort (#118)1b4330bfix(ai-assistant): reserve@seidroid review closefor the review workflow (...5abb126Bump korthout/backport-action from 4.6.0 to 4.6.1 (#111)a4de9beBump sei-protocol/uci/.github/workflows/ai-assistant.yml from 0.0.17 to 0.0.2...1849c10Bump sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.17 to 0.0.22 (...fcdcbedfix(seidroid-review): recheck the head before withdrawing, and find a batch r...b6a6b14fix(seidroid-review): take the review's position on the review that carries t...3cb8276fix(seidroid-review): match this tool's GraphQL bot login when reading and cl...ad9635aperf(seidroid-review): install the prebuilt driver, pin Opus 5.5 (PLT-1330) (...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)