ci: bump the AI review workflows to actions v1.0.3 - #978
Open
JuArce wants to merge 1 commit into
Open
Conversation
Both jobs were pinned at v1.0.0. The Claude review has been broken since 2026-09-08: @v1 of claude-code-action moved to a build whose installer leaves no binary at ~/.local/bin/claude, and v1.0.2 pins past it. v1.0.3 then fixes the review context — on issue_comment the checkout was the default branch rather than the PR, so reviews spent their turns trying to fetch the code under review. For the codex review the only change is the fork-PR guard added in v1.0.1.
JuArce
force-pushed
the
ci/bump-ai-review-actions-v1.0.3
branch
from
September 9, 2026 18:35
d730c11 to
4fa3bf9
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps both AI review jobs in
pr_ai_review.yamlfromyetanotherco/actionsv1.0.0 to v1.0.3.Why
The Claude review has been broken since 2026-09-08. v1.0.0 tracked
anthropics/claude-code-action@v1, which moved to a build whose installer exits 0 while leaving no launcher at~/.local/bin/claude, so every run failed before Claude started:Upstream: anthropics/claude-code-action#1817 (open, no fix).
What each job gets
claude-review— three tags of changes:issue_commentpath.claude-code-actionpinned to v1.0.217, past the broken build.issue_commentthe reusable workflow checked out the default branch rather than the PR, while telling the model the PR was checked out — so reviews spent their turns trying to fetch the code under review viagit fetch origin pull/N/headandgh api …/contents/…, both denied by the allowlist, and hit the turn cap with nothing posted. It now checks outrefs/pull/<n>/headwith full history, allowlists read-onlygit diff/git log/git show, and states the sandbox rules in the prompt.codex-review— the only delta across these tags is the v1.0.1 fork-PR guard. No behavioral change to the review itself.Compatibility
Checked against this workflow specifically:
github.event.pull_request.number || github.event.issue.number. This workflow triggers onissue_commentandpull_request: labeled, both of which populate one of those, so the ref resolves.model: opusandmax_turns: 50inputs are unchanged across all four tags.refs/pull/<n>/head, whereas this repo's own jobs userefs/pull/<n>/merge. That only affects the tree the Claude job sees, and head is whatgh pr diffreports.Validation
The Claude review cannot self-test on this PR: the action skips when the workflow file differs from the copy on the default branch, and the step still exits 0, so a green check here proves nothing about the fix. After merge,
/ai-reviewon any open PR exercises it.