From 1621ed801b3668e6c181c873e46cf31ba0680481 Mon Sep 17 00:00:00 2001 From: Steve Gontzes Date: Thu, 6 Aug 2026 10:08:26 -0400 Subject: [PATCH 1/2] Raise pr-review job timeout to 30 minutes The opus-5 reviewer runs longer per review than opus-4-8, and the pr-review (15m) and general-pr-review (20m) caps were cancelling reviews mid-run (they surface as a 'did not finish in time' non-verdict). Raise both to 30 minutes. --- .github/workflows/general-pr-review.yaml | 2 +- .github/workflows/pr-review.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/general-pr-review.yaml b/.github/workflows/general-pr-review.yaml index c7711ab..c06265a 100644 --- a/.github/workflows/general-pr-review.yaml +++ b/.github/workflows/general-pr-review.yaml @@ -42,4 +42,4 @@ jobs: pr_number: ${{ github.event.pull_request.number }} head_sha: ${{ github.event.pull_request.head.sha }} review_prompt: general - timeout-minutes: 20 + timeout-minutes: 30 diff --git a/.github/workflows/pr-review.yaml b/.github/workflows/pr-review.yaml index fba07f1..5069415 100644 --- a/.github/workflows/pr-review.yaml +++ b/.github/workflows/pr-review.yaml @@ -48,4 +48,4 @@ jobs: pr_number: ${{ github.event.pull_request.number }} head_sha: ${{ github.event.pull_request.head.sha }} review_prompt: ${{ inputs.review_prompt || 'connector' }} - timeout-minutes: 15 + timeout-minutes: 30 From d484a6c5242f1c4ee10a7fe998b79fe66db6cde0 Mon Sep 17 00:00:00 2001 From: Steve Gontzes Date: Thu, 6 Aug 2026 10:45:16 -0400 Subject: [PATCH 2/2] Bump claude-code-action to v1.0.185 (SHA-pinned) Moves the pin from v1.0.130 (109 commits behind) to v1.0.185. Net-hardening: stronger untrusted-content sanitization and token redaction, plus the #1350 fix for the silent Bash-permission-widening parser bug that v1.0.130 lacked. No new default token perms or tool exposure for our config. Replaces the bare SHA with a SHA + version comment (still pinned, not @v1). --- .github/actions/pr-review/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/pr-review/action.yml b/.github/actions/pr-review/action.yml index d94cfea..0f79745 100644 --- a/.github/actions/pr-review/action.yml +++ b/.github/actions/pr-review/action.yml @@ -87,7 +87,7 @@ runs: echo "${DELIM}" } >> "${GITHUB_ENV}" - name: Run Claude PR Review - uses: anthropics/claude-code-action@661a6fefbd0569ef35809da16775508ab1937862 + uses: anthropics/claude-code-action@9db594c7a0e82298c121c18b7f08aa1579ce7341 # v1.0.185 with: anthropic_api_key: ${{ inputs.anthropic_api_key }} github_token: ${{ inputs.github_token }}