[aj-bw]

🎟️ Tracking

BRE-2393

📔 Objective

GitHub retires the macos-14 runner image on 2026-11-02. The bitwarden-workflow-linter-rules skill still told Claude to fix pinned_job_runner by pinning macos-latest to macos-14. It now pins to macos-26.

• bitwarden-devops-engineer 0.3.0 → 0.3.1 (patch), with CHANGELOG entry.

🤖 AI-assisted review

Standard local review (code-review-local): no findings. Prettier and cspell pass.

[github-actions]

Claude Code validation

Result: Pass

Validated the bitwarden-devops-engineer plugin (manifest, semantic versioning, structure, frontmatter, credentials), reviewed the changed bitwarden-workflow-linter-rules skill, and ran the configuration and security review over the changeset. The change is a one-line currency update to the pinned_job_runner fix mapping, with a correct PATCH bump and changelog entry; version 0.3.1 is consistent across marketplace.json, plugin.json, and the README catalog table, and no stale macos-14 reference is left anywhere in the repository.

Not covered: Network access was unavailable, so the new macos-26 runner label could not be cross-checked against GitHub's hosted-runner documentation. No finding depends on that check — the label is reported as correct from model knowledge only, and the author may want to confirm it matches what bitwarden/workflow-linter pins.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR changes the pinned_job_runner fix guidance in the bitwarden-workflow-linter-rules skill so that macos-latest maps to macos-26 rather than macos-14, which is being retired. It also bumps bitwarden-devops-engineer from 0.3.0 to 0.3.1 and adds a matching CHANGELOG entry. The new version is the same in marketplace.json, plugin.json, and the README catalog, and the plugin has no agents that would also need it. No other macos-14 references are left in the plugin, and the changed lines contain no credential material.

Not covered: Skill review did not run. This review path cannot launch plugin-dev:skill-reviewer, so plugins/bitwarden-devops-engineer/skills/bitwarden-workflow-linter-rules/SKILL.md was not checked for description quality, length, or progressive disclosure. performing-multi-agent-code-review covers those where plugin-dev is installed.