Update action misospace/pr-reviewer-action (v2.2.0 → v2.2.1)

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
misospace/pr-reviewer-action	action	patch	v2.2.0 → v2.2.1

---

Release Notes

misospace/pr-reviewer-action (misospace/pr-reviewer-action)

v2.2.1

Compare Source

⚠ BREAKING CHANGES

• github-action: Update action actions/setup-python (v5.6.0 → v7.0.0) (#​492)
• github-action: Update action actions/upload-artifact (v4.6.2 → v7.0.1) (#​493)
• github-action: Update action actions/checkout (v4.4.0 → v7.0.1) (#​491)

Features

• action: add fail_on_request_changes input to gate merges without a GitHub App (#​528) (448b27b), closes #​518

Bug Fixes

• classification: pass impact pattern to awk via ENVIRON (#​481) (787f619)
• escalate on an empty completion instead of retrying the same model (#​525) (3850b4a)
• evidence: scrub AI_PRIMARY_API_KEY, AI_SMART_API_KEY, LINEAR_API_KEY from provider env (#​522) (322f88d), closes #​513
• give the native_loop verdict turn the real tool harness findings (#​527) (edb0b02)
• precheck: carry forward previous verdict on diff-unchanged skip (#​523) (22b551e)
• resolve issue #​509 (#​519) (3d7459f)
• route Forgejo auth header through 0600 curl --config file (#​486) (e182061), closes #​471
• security: restrict web_fetch URL scheme to http/https (#​479) (7398d13), closes #​468
• ssrf: gate host allowlist on resolved IP (#​520) (b917fb2), closes #​510
• update README from @​v1 to @​v2 and fix stale self-review section (#​487) (b03949b), closes #​470

Chores

• ci: add gitleaks secret-scan step to validate job (#​521) (fc3b02d)
• ci: add shellcheck to CI (#​467) (61ec936)
• ci: pin test dependencies in requirements.txt for reproducible builds (#​526) (91de1d7), closes #​514
• release 2.2.1 (#​506) (5669812)

Documentation

• clarify ai-pr-review-sha marker value in emit_review_markers (#​503) (07b28c6), closes #​484
• issue contract for the autonomous loop (#​483) (1243840)

Continuous Integration

• github-action: Update action actions/checkout (v4.4.0 → v7.0.1) (#​491) (e002f7b)
• github-action: Update action actions/setup-python (v5.6.0 → v7.0.0) (#​492) (582e3c2)
• github-action: Update action actions/upload-artifact (v4.6.2 → v7.0.1) (#​493) (caad320)

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: Update action misospace/pr-reviewer-action (v2.2.0 → v2.2.1)

Summary

This is a routine renovate-bot patch update that pins the misospace/pr-reviewer-action from v2.2.0 to v2.2.1 in the AI PR review workflow.

Change Analysis

File modified: .github/workflows/ai-pr-review.yaml

• Old SHA: 99e7764a4906f94d99c249231d2016c3cda8997e
• New SHA: 54dfb1aac20e1e410ad8f71dc3681b888500a1ec
• Version comment updated: # v2.2.0 → # v2.2.1

The change follows repository convention: action references use full SHA pins with version comments, which is consistent with prior updates visible in the git log history.

Release Notes Verification

The v2.2.1 release includes:

• Bug fixes: Classification pattern passing, empty completion escalation, evidence scrubbing (API key protection), precheck verdict carry-forward, and SSRF protections
• Security hardening: URL scheme restricted to http/https, host allowlist gated on resolved IP
• Feature: fail_on_request_changes input added

All changes are backward-compatible bug fixes and security hardening—appropriate for a patch update.

CI Status

All CI checks passed:

• Export validation (Windows, macOS, Linux, Web): success
• Headless smoke test: success
• macOS validation: success
• Script test suite: success
• Review checks (4): success
• renovate/stability-days: success

Standards Compliance

• Repository convention: Action references are SHA-pinned with version comments ✓
• Renovate pattern: Matches the established update cadence visible in git history ✓
• No code changes: Only workflow dependency update, no GDScript or game code affected ✓

Tool Harness Findings

The tool harness completed successfully with:

• read_file confirmed the workflow uses the new pinned SHA
• git_log confirmed this follows the regular renovate update pattern
• No repository impact from security-relevant terms (SSRF, 0600 permissions) found in diff

Recommendation

Approve. This is a standard, low-risk dependency update that follows established repository conventions. The update includes valuable security hardening (SSRF protection, API key scrubbing) and bug fixes. CI passes, and the change is appropriately scoped.