Repository navigation
build(deps): bump sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.22 to 0.0.26 - #123
Conversation
Bumps [sei-protocol/uci/.github/workflows/ai-review.yml](https://github.com/sei-protocol/uci) from 0.0.22 to 0.0.26. - [Release notes](https://github.com/sei-protocol/uci/releases) - [Commits](4bd0b78...0dc48cf) --- updated-dependencies: - dependency-name: sei-protocol/uci/.github/workflows/ai-review.yml dependency-version: 0.0.26 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
PR SummaryLow Risk Overview That pulls in upstream CI changes from UCI v0.0.23–v0.0.26, including stricter handling of The Reviewed by Cursor Bugbot for commit 8ae7505. Bugbot is set up for automated code reviews on this repo. Configure here. |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
This Dependabot bump moves the ai-review.yml reusable workflow pin from v0.0.22 to v0.0.26 (0dc48cf). The new pin is fine, but uci-ref still points at the v0.0.22 SHA, so the new workflow would load the old prompt files. Two "See: …v0.0.22" comments are also out of date.
Findings: 0 blocking | 2 non-blocking | 1 posted inline
Blockers
- None at the file/PR level.
Non-blocking
- [suggestion]
.github/workflows/ai-review-self.yml:24:uci-refis still4bd0b7826bdf7966c2bd899b8810a3aaaa52e80d(v0.0.22). Theai-review.ymlinput says to "Pin to youruses:ref", and the workflow usesuci-refto sparse-checkout.github/seidroid/ai-review/{scout,review}.md. As things stand, the v0.0.26 workflow would run with the v0.0.22 prompts. Update it to0dc48cfb58b6c88f528b6def9784524d444ed0f6, along with the release-link comment above it at line 23. Dependabot only updates theuses:line, so this will keep drifting on future bumps unless it's handled. - 1 suggestion(s)/nit(s) flagged inline on specific lines.
| if: github.event_name != 'issue_comment' || github.event.issue.pull_request != null | ||
| # See: https://github.com/sei-protocol/uci/releases/tag/v0.0.22 | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@4bd0b7826bdf7966c2bd899b8810a3aaaa52e80d | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@0dc48cfb58b6c88f528b6def9784524d444ed0f6 |
There was a problem hiding this comment.
[suggestion] The pin now points at v0.0.26 (0dc48cf), but the comment on the line above still links releases/tag/v0.0.22. The uci-ref input at line 24 (and its comment) also still uses the v0.0.22 SHA 4bd0b78…. Because uci-ref chooses which prompt files are checked out, the workflow and its prompts would come from different versions. Bump both lines to match this pin.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 8ae7505. Configure here.
| if: github.event_name != 'issue_comment' || github.event.issue.pull_request != null | ||
| # See: https://github.com/sei-protocol/uci/releases/tag/v0.0.22 | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@4bd0b7826bdf7966c2bd899b8810a3aaaa52e80d | ||
| uses: sei-protocol/uci/.github/workflows/ai-review.yml@0dc48cfb58b6c88f528b6def9784524d444ed0f6 |
There was a problem hiding this comment.
Workflow pin and uci-ref diverge
Medium Severity
The uses pin now points at 0dc48cf (v0.0.26), but uci-ref still names 4bd0b78 (v0.0.22). The reusable workflow checks out prompt files from uci-ref, so this run loads the old prompts under the new review logic. Those two refs are required to stay together.
Reviewed by Cursor Bugbot for commit 8ae7505. Configure here.
Bumps sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.22 to 0.0.26.
Release notes
Sourced from sei-protocol/uci/.github/workflows/ai-review.yml's releases.
... (truncated)
Commits
0dc48cffeat(seidroid-review): drive sei-agent-driver v0.23.0 (#119)54c9dacfeat(seidroid-review): run the review at high reasoning effort (#118)1b4330bfix(ai-assistant): reserve@seidroid review closefor the review workflow (...5abb126Bump korthout/backport-action from 4.6.0 to 4.6.1 (#111)a4de9beBump sei-protocol/uci/.github/workflows/ai-assistant.yml from 0.0.17 to 0.0.2...1849c10Bump sei-protocol/uci/.github/workflows/ai-review.yml from 0.0.17 to 0.0.22 (...fcdcbedfix(seidroid-review): recheck the head before withdrawing, and find a batch r...b6a6b14fix(seidroid-review): take the review's position on the review that carries t...3cb8276fix(seidroid-review): match this tool's GraphQL bot login when reading and cl...ad9635aperf(seidroid-review): install the prebuilt driver, pin Opus 5.5 (PLT-1330) (...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)