Skip to content

oss-pr-reviewer v0.2.0

Choose a tag to compare

View all tags
@vuphongle vuphongle released this 13 Aug 03:20
· 11 commits to main since this release
v0.2.0
e252f93
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Added trusted-base repository configuration through .oss-pr-reviewer.yml.
  • Added CLI-over-config-over-default minimum severity precedence.
  • Added custom repository review rules with explicit untrusted-data prompt boundaries.
  • Added validated glob-based ignored paths and ignored-file reporting.
  • Added explicit character-based context budgeting with reserved prompt and response space.
  • Added configurable batch limits and richer review statistics for changed, reviewed, ignored, skipped, and batched files.
  • Added configuration examples, documentation, and 47 deterministic tests.

Security and limitations

Configuration is read from the pull request base commit, so a PR cannot silently change its own active review policy. Rules remain untrusted repository guidance and cannot override system safety instructions. Reviewed code is never executed.

Context budgets use character approximations rather than exact tokenizer accounting. OpenAI remains the only implemented provider. The tool does not clone repositories, post PR comments, or create inline annotations.

Validation

The release passed local install, lint, typecheck, 47 tests, build, format checks, CLI checks, package dry-run, and fresh GitHub Actions CI on main.

Live GitHub/OpenAI smoke testing remains pending because credentials were not used during release preparation.

Assets 2
Loading