From 7f8f17ec5ca3cc284937ff1a85725eb992e5216c Mon Sep 17 00:00:00 2001 From: Binay Date: Tue, 18 Aug 2026 16:50:31 -0400 Subject: [PATCH] chore(ci): bump signetry-reviewer pin to v0.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Picks up the fix for CI rules firing on YAML comments — this repo's own #92 was returned a Block verdict for two comment lines explaining why it deliberately avoids pull_request_target, which is what surfaced that bug. Also brings in the new supply.dependency_skew check (lockfile changed without its manifest), advisory and MEDIUM so it withholds auto-merge without rejecting Dependabot refreshes. --- .github/workflows/reviewer.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml index aa01756..72a0d33 100644 --- a/.github/workflows/reviewer.yml +++ b/.github/workflows/reviewer.yml @@ -38,7 +38,7 @@ jobs: - name: Install signetry-reviewer # source-available (All Rights Reserved); install from source, not PyPI. - run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.1.2" + run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.2.0" - name: Compute the PR diff env: