chore(deps): bump petry-projects/.github-private/.github/workflows/pr-review.yml from 1.7.0 to 1.8.0 by dependabot[bot] · Pull Request #310 · petry-projects/TalkTerm

dependabot · 2026-06-22T05:54:31Z

Bumps petry-projects/.github-private/.github/workflows/pr-review.yml from 1.7.0 to 1.8.0.

Commits

ded84ce revert(dogfood): remove ci-status.sh dogfood comment + re-prove downstream-im...
bf04bea feat: implement issue #840 — [Phase 1] Author the LSP pilot scoping doc — lan...
7a90255 test(dogfood): comment-only touch to exercise downstream-impact on next (#850)
90876e1 scripts: make cut-release.sh executable (100644 -> 100755) (#834)
761541f feat: implement issue #822 — Live idea:approved canary + Fleet Monitor covera...
1ff137e docs(mcp-review): Context7 A/B eval findings + tool-name fix (#847)
7f91b06 pr-review: dogfood ring-0 on @pr-review/next (self-host canary) (#833)
648b80b feat: add zero-auth Context7 MCP server to PR-review runtime (#826)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…-review.yml Bumps [petry-projects/.github-private/.github/workflows/pr-review.yml](https://github.com/petry-projects/.github-private) from 1.7.0 to 1.8.0. - [Commits](petry-projects/.github-private@ceab48a...ded84ce) --- updated-dependencies: - dependency-name: petry-projects/.github-private/.github/workflows/pr-review.yml dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

…-github-private/dot-github/workflows/pr-review.yml-1.8.0

don-petry · 2026-06-22T06:35:07Z

Dev-Lead — fix-bot-comment (no-changes)

Agent reasoning

Issues addressed: 0
Files changed: None
Skipped (informational): 0
Status: Quality Gate passed — no changes needed.
```

…-github-private/dot-github/workflows/pr-review.yml-1.8.0

sonarqubecloud · 2026-06-22T22:11:13Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

…-review.yml from 1.7.0 to 1.8.0 (#310) chore(deps): bump petry-projects/.github-private/.github/workflows/pr-review.yml Bumps [petry-projects/.github-private/.github/workflows/pr-review.yml](https://github.com/petry-projects/.github-private) from 1.7.0 to 1.8.0. - [Commits](petry-projects/.github-private@ceab48a...ded84ce) --- updated-dependencies: - dependency-name: petry-projects/.github-private/.github/workflows/pr-review.yml dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: dependabot-automerge-petry[bot] <270452309+dependabot-automerge-petry[bot]@users.noreply.github.com>

…Dependabot drift) Dependabot bumped the SHA-pinned caller from v1.7.0 (ceab48a) to v1.8.0 (ded84ce) in #310, dragging TalkTerm onto the unreleased 'next' channel ahead of the stable promotion — stable is still v1.7.0. SHA-pinning a reusable makes Dependabot's github-actions updater treat it as a versioned dependency and auto-bump to the newest tag, bypassing the release-ring/channel strategy. Switch the uses: ref to the non-semver moving tag @pr-review/stable (the pattern the other consumers already use), which Dependabot leaves untouched. This returns TalkTerm to stable (v1.7.0) and tracks future promotions centrally.

…sion drift) (#325) * fix(pr-review): use moving pr-review/stable tag, not a SHA pin (stop Dependabot drift) Dependabot bumped the SHA-pinned caller from v1.7.0 (ceab48a) to v1.8.0 (ded84ce) in #310, dragging TalkTerm onto the unreleased 'next' channel ahead of the stable promotion — stable is still v1.7.0. SHA-pinning a reusable makes Dependabot's github-actions updater treat it as a versioned dependency and auto-bump to the newest tag, bypassing the release-ring/channel strategy. Switch the uses: ref to the non-semver moving tag @pr-review/stable (the pattern the other consumers already use), which Dependabot leaves untouched. This returns TalkTerm to stable (v1.7.0) and tracks future promotions centrally. * chore: apply manual instructions [skip ci-relay] * fix(pr-review): add inline NOSONAR(githubactions:S7637) marker to uses: line Adopt the org-wide canonical S7637 exemption (#549/#551): the channel-pinned first-party reusable-ref uses: line carries an inline # NOSONAR(githubactions:S7637) marker. This supersedes the per-file sonar-project.properties approach and, unlike it, suppresses the rule at analysis time — clearing BOTH the SonarCloud quality gate AND the GHAS code-scanning SARIF alert that was keeping this PR's 'SonarCloud' check red and making the pr-review agent skip on ci-failing. --------- Co-authored-by: donpetry-bot <281750570+donpetry-bot@users.noreply.github.com>

dependabot Bot added dependencies Dependency update PRs security Security-related PRs and issues labels Jun 22, 2026

dependabot Bot requested a review from a team as a code owner June 22, 2026 05:54

dependabot Bot added dependencies Dependency update PRs security Security-related PRs and issues labels Jun 22, 2026