ci(github-action): update action misospace/pr-reviewer-action (v2.0.2 → v2.0.5)

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
misospace/pr-reviewer-action	action	patch	v2.0.2 → v2.0.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

misospace/pr-reviewer-action (misospace/pr-reviewer-action)

v2.0.5

Compare Source

What's Changed

• fix(enrichment): move brittle shell extraction into Python by @​joryirving in #​357

Full Changelog: misospace/pr-reviewer-action@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

• fix(context): guard compare-shas extraction against set -e by @​joryirving in #​356

Full Changelog: misospace/pr-reviewer-action@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

• feat(enrichment): fetch upstream content for forge-hosted, rolling-tag, and OCI-chart bumps by @​eleboucher in #​349
• perf(enrichment): skip Phase-1 fetch for known non-Forgejo hosts by @​itsmiso-ai in #​353
• fix(context): document SHA regex assumption for non-SHA hex tokens by @​itsmiso-ai in #​354
• fix(enrichment): accept query string in compare URL regex by @​itsmiso-ai in #​355

Full Changelog: misospace/pr-reviewer-action@v2.0.2...v2.0.3

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-miso]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: Update misospace/pr-reviewer-action (v2.0.2 → v2.0.5)

Recommendation

Approve. This is a straightforward dependency update for the PR-reviewer GitHub Action. The patch versions contain targeted bug fixes for regressions introduced in v2.0.3, plus new enrichment features. CI passes, the SHA is pinned, and the change is low-risk.

---

Change-by-Change Findings

.github/workflows/ai-pr-review.yaml (1-line change)

• Updated action reference from misospace/pr-reviewer-action@v2.0.2 (SHA 529f5e8) → @v2.0.5 (SHA b36ea14)
• SHA pin is intact and matches the current file content verified by tool harness
• This action powers the AI PR review workflow for this repository

---

Standards Compliance

✅ No secrets committed — The change only touches a workflow file, no credentials or sensitive values modified.

✅ GitHub Actions conventions followed — Action pinned with full SHA commit hash (not just tag), inline comment documents version.

✅ Repository conventions — This PR follows standard Renovate bot pattern for GitHub Action updates. The workflow file uses documented conventions.

---

Linked Issue Fit

No linked issues. This is a pure dependency maintenance PR.

---

Evidence Provider Findings

✅ Release metadata confirmed via linked sources:

• v2.0.3 (4 commits): Enrichment features, performance optimization for non-Forgejo hosts, context documentation, URL regex fix for query strings
• v2.0.4 (1 commit): Critical fix for compare-shas extraction under set -euo pipefail (regression from PR 349, caused silent failures on image-tag bumps like 0.8.19 → 0.8.21)
• v2.0.5 (1 commit): Move brittle shell extraction into Python (fixes second regression from PR 349, observed in home-ops#7892 where titles without version tokens caused TARGET_VERSION grep to return 1 and abort the review)

The v2.0.4 and v2.0.5 patches are particularly valuable — they fix regressions that would silently break PR reviews on common patterns (image tag bumps with no SHA, titles without version tokens).

---

Tool Harness Findings

⚠️ Some GitHub API lookups for misospace/pr-reviewer-action release tags returned 404, but the release metadata was successfully retrieved through other enrichment sources (GitHub Releases API, Compare API). The target version v2.0.5 is confirmed in multiple sources.

---

CI Check Results

✅ All checks passed:

• Docker Build, Lint, Typecheck, Tests, Build — all success
• PR Review (2x) — success
• renovate/stability-days — success (confirms minimum release age requirement met)

---

Unknowns / Needs Verification

None. The update is well-documented by Renovate, the SHA is verifiable, and all CI gates pass.

---

Summary

This is a clean, low-risk dependency update. The intervening patch releases contain important bug fixes for edge-case failures in the AI PR reviewer. The change follows repository conventions and CI validates successfully.