Skip to content

fix(ci): PR-review follow-ups that missed the #73 merge window#74

Merged
xergioalex merged 2 commits into
mainfrom
fix/pr-review-followups
Jul 17, 2026
Merged

fix(ci): PR-review follow-ups that missed the #73 merge window#74
xergioalex merged 2 commits into
mainfrom
fix/pr-review-followups

Conversation

@xergioalex

@xergioalex xergioalex commented Jul 16, 2026

Copy link
Copy Markdown
Member

Summary

PR #73 was merged while its AI-review iteration was still in flight, so the last two review rounds' fixes landed on the branch after the squash merge and never reached main. This PR cherry-picks them.

Changes

  1. labels-bootstrap chicken-and-egg fix (round-4 finding, pr-review.yml): the job that creates the Ready label was gated on should_run == 'true', which itself requires Ready to already be applied — so on a clean installation the bootstrap could never create the label maintainers are told to apply. The job now runs on every opened/labeled event (idempotent, ~4s).
  2. docs/RELEASE_AND_DISTRIBUTION.md policy alignment (round-5 finding): AGENTS.md § 15.a and the auto-release.yml header were expanded in chore(agents): upgrade DWP to 2.17.0 + AI Diff Reviewer Flow B [skip release] #73 to two accepted [skip release] use cases, but this doc still said "one accepted use case" and forbade workflow-only skips — contradicting case (b) and chore(agents): upgrade DWP to 2.17.0 + AI Diff Reviewer Flow B [skip release] #73's own merge. Now aligned (plus a one-line rephrase of § 15.a's opener so it doesn't say "one narrow situation" while rule 3 lists two).

Also from #73's review rounds, deferred upstream rather than patched here: the vendored apply-review/open-pr sub-skills declare git+gh via requires.anyBins when both are mandatory — filed as DailybotHQ/ai-diff-reviewer#42 (editing the vendored tree would drift it from the skills-lock.json content hash).

Release — MUST use [skip release]

Maintainer request: this PR is workflow + policy-doc only (case (b) — agent-tooling / CI wiring; nothing a CLI user installs). Do not cut a release.

When squash-merging, put this exact token in the squash commit body (not only the title):

[skip release]

[skip release]

xergioalex and others added 2 commits July 16, 2026 21:58
…en-and-egg

## Summary
Round-4 AI review fixes. On a clean installation the labels-bootstrap
job was gated on should_run=true, which itself requires the Ready
label to already be applied — so the job that creates the Ready label
could never run before the label existed.

## Change Log
- labels-bootstrap: drop the should_run condition; the job now runs on
  every opened/labeled event (idempotent, ~4s)
- The second round-4 finding (vendored apply-review/open-pr SKILL.md
  declaring git+gh via requires.anyBins when both are mandatory) is an
  upstream defect in the skill pack — deferred to
  DailybotHQ/ai-diff-reviewer#42 rather than hand-editing the vendored
  tree and drifting it from the skills-lock.json content hash

## Risks
- None — one job condition removed; the bootstrap step was already
  idempotent (`|| true` on existing labels)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…kip release] policy

## Summary
Round-5 AI review fix: AGENTS.md § 15.a and the auto-release.yml
header were expanded to two accepted [skip release] use cases, but
docs/RELEASE_AND_DISTRIBUTION.md still said "one accepted use case"
and listed CI/workflow-only PRs as forbidden — contradicting case (b)
and this PR's own merge policy.

## Change Log
- RELEASE_AND_DISTRIBUTION.md § "When (and only when) to use it": two
  enumerated cases matching AGENTS.md § 15.a; forbidden list narrowed
  to CLI docs and release/test-pipeline CI (agent-tooling wiring is
  case (b))
- AGENTS.md § 15.a opening line no longer says "one narrow situation"
  while rule 3 enumerates two

## Risks
- None — policy documentation only

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@xergioalex xergioalex added the Ready Trigger AI code review label Jul 16, 2026
@github-actions

github-actions Bot commented Jul 16, 2026

Copy link
Copy Markdown

AI review for 57511f2 — ✅ done

View review →

Highest severity: none

Strictness gate: ✅ highest severity none ≤ critical threshold

0 inline comment(s) attached.

Iteration-Aware Review: gen 1, round 1, policy=first-pass-exhaustive (first_review) — 0 surfaced.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Verdict

Looks good — the chicken-and-egg bootstrap fix is correct, and the [skip release] docs now match AGENTS.md Rule 15.a / auto-release.yml. Nothing blocking.

Findings table

# Severity File Summary
No findings

Notes

  • labels-bootstrap: Removing if: needs.scope.outputs.should_run == 'true' is the right fix. should_run requires Ready to already be applied, so gating label creation on it made bootstrap unreachable on a clean install. The job remains idempotent (gh label create … || true), still needs: scope (scope always exits 0), and the expensive review job stays gated on should_run. Header comment at .github/workflows/pr-review.yml:29 (“auto-created on first run”) is now truthful.
  • Policy docs: AGENTS.md opener and docs/RELEASE_AND_DISTRIBUTION.md now both describe two accepted use cases and distinguish forbidden “CI tweaks to the release/test pipelines” from case (b) agent-tooling workflows — aligned with auto-release.yml lines 26–41 and Rule 15.a §3.
  • Out of scope (deferred upstream): requires.anyBins for git+gh in vendored apply-review/open-pr — correctly left to DailybotHQ/ai-diff-reviewer#42 rather than drifting the vendored tree.
  • Release: This PR itself is workflow + policy-doc only (case (b) candidate). Merge for a PATCH unless a maintainer explicitly requests [skip release] on the squash body.

Recommendation: approve

@github-actions github-actions Bot added the pr-reviewed Passed AI code review label Jul 16, 2026
@xergioalex
xergioalex merged commit f14e44e into main Jul 17, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-reviewed Passed AI code review Ready Trigger AI code review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant