Skip to content

oss-pr-reviewer v0.4.0

Latest
Latest

Choose a tag to compare

View all tags
@vuphongle vuphongle released this 13 Aug 04:27
· 2 commits to main since this release
v0.4.0
1dca4de
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Added opt-in GitHub Action PR comment mode with post-comment: true.
  • Added stable marker-based ownership and create-once/update-in-place behavior across repeated reviews.
  • Added comment-action, comment-id, and comment-url Action outputs.
  • Kept complete Markdown output in GITHUB_STEP_SUMMARY for every run.
  • Added 60,000-character comment bounds, priority-aware truncation, truncation notices, and mention neutralization.
  • Added least-privilege documentation: pull-requests: read for summary-only mode and pull-requests: write for comment mode.

Security and limitations

Comment mode is disabled by default, does not use pull_request_target, does not execute reviewed PR code, does not delete older duplicate comments, and remains advisory. Fork workflows may not receive repository secrets under GitHub's pull_request security model. Live GitHub/OpenAI PR comment smoke testing remains pending because credentials were not used during release preparation.

Validation

The release passed local install with 0 vulnerabilities, lint, typecheck, 74 deterministic tests, build, format checks, YAML validation, CLI checks, package dry-run, secret scan, and GitHub Actions CI.

Assets 2
Loading