chore(deps): update the-pr-agent/pr-agent action to v0.45.0 by renovate[bot] · Pull Request #92 · wave-av/wave-desktop

renovate · 2026-08-30T21:05:03Z

This PR contains the following updates:

Package	Type	Update	Change
The-PR-Agent/pr-agent	action	minor	`v0.43.0` → `v0.45.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

The-PR-Agent/pr-agent (The-PR-Agent/pr-agent)

`v0.45.0`

Compare Source

What's Changed

🚀 Features

feat(review): preserve findings across review reruns by @yefuyou in #2722
feat(improve): cap suggestions per file after chunk aggregation by @junnhwan in #3034
feat(git-providers): add public register_git_provider by @ylcn91 in #3023
feat(github): trigger commands after submitted reviews by @junnhwan in #3011
feat(review): add opt-in large-diff chunking with a stated merge rule by @ylcn91 in #3013
Add support for Gemini 3.8 Flash by @takotakot in #3003
feat: opt-in to skip same-model retry on timeout by @derrix060 in #2995
feat(codecommit): review all pull request targets by @junnhwan in #2993
feat(azure): preserve suggestion state across reruns by @TLA020 in #2724
feat(skills): apply configured skills to top-level ask by @junnhwan in #2967
feat: LiteLLM usage stats integration via otel for external monitoring systems by @jong47 in #2201
feat: fall back to LiteLLM metadata for max tokens by @yashaskn8 in #2970
feat: provider-agnostic push outputs for review (stdout/file/webhook/slack) by @shmulc8 in #2510
Add review risk assessment and optional repository review rules by @xiaodeng666a in #2391
feat(gitlab): add publish_improve_as_thread option by @sirluky in #2723

🐛 Bug Fixes

fix(tickets): refresh prompt budgets after extraction by @oleksii-tumanov in #3036
fix(gitea): resolve base_url_html on first use so a repo-level web_url applies by @ylcn91 in #3029
fix(improve): validate committable Python suggestions by @swayamg20 in #3046
fix(bitbucket): parse patches from hunk headers by @oleksii-tumanov in #3032
fix(gerrit): require webhook credentials on every call by @ylcn91 in #3027
fix(gitea): walk every page of PR files and commits by @ylcn91 in #3022
fix(servers): compare basic-auth credentials as bytes and fail closed on a half-configured pair by @ylcn91 in #3028
fix(pr_agent/algo/utils.py): trust only pr-agent's own pyproject.toml for the version by @YokoAC in #3007
fix(ci): harden release input validation by @PeterDaveHello in #2997
fix(gitlab): skip suggestions pointing past blanked head content by @dongwonmoon in #3015
fix(gerrit): return commit messages as text by @adongwanai in #3016
fix: enable describe large-diff chunking prompts by @yashaskn8 in #3006
fix(bitbucket): report code suggestion publish status by @oleksii-tumanov in #2992
fix(qdrant): namespace the collection so pre-#2323 points cannot surface by @prakrititz in #2991
fix: align CLI settings validation with repo allowlist by @mikemikimike in #2964
fix(bitbucket): harden webhook credential handling by @PeterDaveHello in #2988
fix: default auto approval to disabled by @nightcityblade in #2980
fix: handle Gitea inline comment API errors by @chuanxu742-glitch in #2975
fix(github): cast app_id to str so GitHub App auth works on PyJWT >=2.11 by @7487 in #2969
fix(gitea): report success/failure and submit reviews, not drafts by @space-josh in #2878
fix(gerrit): clean up failed repository setup by @Junaid-PK in #2926
fix(docker): restore the pr-agent console script in the cli image by @IsmaelMartinez in #2936
fix: sanitize Mermaid diagrams in PR descriptions by @swayamg20 in #2819
fix: guard against empty commit list in Azure DevOps get_latest_commit_url by @Rehan30g in #2940
fix(review): guard label updates by provider capability by @askarshabdanov1-collab in #2938
fix(providers): normalize inverted line ranges by @RRXXZZYY in #2939
fix(fallback): restore deployment after model retries by @junnhwan in #2929
fix(similar-issue): scope optional vector imports by @Elioooon in #2927
fix(pr_agent/algo/utils.py): returning an empty dict when every yaml fallback fails by @dwin-gharibi in #2730
fix(gitlab): handle null webhook labels by @RRXXZZYY in #2922
fix(pr_agent/config_loader.py): coercing verbosity_level to int by @dwin-gharibi in #2909
fix(pr_agent/algo/utils.py): preferring an exact line match when anchoring a comment by @dwin-gharibi in #2905
fix(suggestions): align fallback chunks after conversion failure by @YaoSong808 in #2867
fix(qdrant): add pandas dep, fix cross-repo ID collisions, fix comment indexing by @gvago in #2323
fix: redact git credentials from clone failure logs by @dwin-gharibi in #2697
fix: share language matcher with plain diff provider by @apoorvdarshan in #2895
fix(gerrit): use action parameter for dispatch and clean up temp repos by @gvago in #2331
fix(pr_agent/tools/pr_similar_issue.py): migrating embeddings to the openai v1 client by @dwin-gharibi in #2726
fix: bound language filename matching by @lxingy3 in #2846

📚 Documentation

docs: sync GitBook navigation with MkDocs by @VedanthB in #3044
docs: make provider support matrix single-source by @VedanthB in #3043
docs(security): discourage baking secrets into images by @PeterDaveHello in #3019
docs: make configuration defaults authoritative by @Ricky-7-Yan in #3000
docs(usage-guide): note importable-env requirement for CLI commands by @dongwonmoon in #2990
docs(usage-guide): add extension guide and fill contributor onboarding gaps by @dongwonmoon in #2966
docs: clarify OSS best practices configuration by @Ricky-7-Yan in #2870

🧹 Maintenance

chore: unskip B005, B009, B012, B905 ruff rules by @even-even in #3060
tests: build file:// URLs with Path.as_uri() to fix Windows failures by @bunnysayzz in #3055
chore: unskip E713, E714, E721 ruff rules by @even-even in #3053
test: use importlib mode for pytest test imports by @PeterDaveHello in #3018
test(git-providers): extend the cross-provider contract to four more methods by @ylcn91 in #3024
chore: unskip actionlint pre-commit and fix warnings by @even-even in #3001
refactor: generate provider-prefixed Claude model ids by @yashaskn8 in #3004
refactor(prompts): share diff-hunk guidance across tools by @swayamg20 in #2994
test: limit default pytest discovery to unit tests by @PeterDaveHello in #2987
chore: fold github_action Dockerfile and coverage workflow into existing definitions by @7487 in #2989
test: add cross-provider get_line_link contract by @swayamg20 in #2984
test: cover the pr_review_prompt user-half variable contract by @Rehan30g in #2950
test: run ASGI unit tests without TestClient by @PeterDaveHello in #2948
test: remove loopback socket dependency from extra-config unit tests by @PeterDaveHello in #2947

⬆️ Dependencies

fix: relax uvicorn version constraint by @mallesh-bot in #3020
fix(deps): update lancedb for Python 3.14 resolution by @devnp2007 in #2983
chore(deps): Upgrade LiteLLM to the latest stable v1.99.0 by @PeterDaveHello in #2981

Full Changelog: The-PR-Agent/pr-agent@v0.44.0...v0.45.0

`v0.44.0`

Compare Source

⚠️ Important Changes

GitHub App webhooks now require a configured secret (#2595): get_body() no longer accepts unsigned webhooks — a deployment without GITHUB.WEBHOOK_SECRET set is rejected with HTTP 403 instead of trusting every caller. Set the secret on your GitHub App and in your config before upgrading. The same PR escapes attacker-controlled webhook fields that were interpolated into CLI command strings.
Dependency management migrated to uv (#2509): requirements.txt, requirements-dev.txt, and the legacy setup.py are gone — dependencies now live in pyproject.toml with a committed uv.lock. Set up a dev environment with uv sync and run tools via uv run. Optional features are now extras (lambda, langchain — uv sync --extra <name>) or a dependency group (similar-issue — uv sync --group similar-issue), and Docker images install from the lockfile with uv sync --frozen. Installing from PyPI with pip install pr-agent still works.
Linting consolidated on Ruff (#2880): flake8 and the standalone isort pre-commit hook were removed. Contributors should run uv run ruff check --fix on touched files before committing.
Dependency pins relaxed to patched ranges (#2881): exact pins were loosened so downstream consumers can pick up security updates; LiteLLM was also upgraded to v1.98.0 (#2794).

🚀 Features

feat(models): add OpenRouter router model support by @PeterDaveHello in #2893
feat(litellm): support Claude adaptive thinking by @Kyzcreig in #2531
Support triggering commands via review assignment in Gitlab by @igoraj in #2388
feat(models): support Grok 4.5/4.6 on xAI and OpenRouter by @PeterDaveHello in #2871
feat(ask): make the ask heading configurable by @oleksii-tumanov in #2823
feat: add opt-in estimated API cost reporting by @elijahchancey in #2817
feat(improve): make suggestions heading configurable by @oleksii-tumanov in #2820
feat(gitlab): resolve the agent's own outdated inline threads by @Arta-shoja in #2774
feat(gitlab): batch-publish committable code suggestions as one review by @nlinakis-xm in #2635
feat(review): make the review heading configurable by @oleksii-tumanov in #2797
feat(ask): resolve review threads via /ask_line by @rophy in #2796
feat(models): add Bedrock Grok 4.3 support by @swayamg20 in #2588
feat(cli): add structured JSON output for local reviews by @Kyzcreig in #2532
enable bedrock access through private VPC endpoint by @luisrviz in #2663

🐛 Bug Fixes

fix(pr_agent/servers/gerrit_server.py): requiring credentials on the webhook route by @dwin-gharibi in #2728
fix: harden webhook auth and CLI argument injection vectors by @wjc2821296948 in #2595
fix: preserve YAML keys and values during fallback parsing by @yifanxiong272 in #2877
fix: surface the triggering workflow's conclusion in workflow_run reviews by @afonsojanu in #2848
fix(improve): avoid false failure after inline publish by @Fnine59 in #2886
fix(github): handle pull requests without commits by @Fnine59 in #2888
fix: add None safety for optional fields in GitLab webhook handlers by @wishhyt in #2276
fix(improve): avoid false failure after successful publish by @Fnine59 in #2882
fix(polling): enforce process limit before spawning by @PeterDaveHello in #2872
fix(improve): clean up progress comment on cancellation by @junnhwan in #2850
Fix: log dropped inline comments by @raappo in #2876
fix(mosaico): preserve request errors around Langfuse spans by @junnhwan in #2865
fix: skip non-UTF-8 files in Local Git and Gerrit diffs by @oleksii-tumanov in #2858
fix(codecommit): skip non-UTF-8 files in diffs by @oleksii-tumanov in #2860
fix: YAML parser error from diff-style lines in nested lists by @isExample in #2061
fix: demote openrouter reasoning_effort warning to info for non-none values by @Newer1107 in #2866
fix(skills): respect per-command settings in request-scoped cache by @junnhwan in #2857
fix(ask-line): enforce conversation history token budget by @junnhwan in #2862
fix: show partial code suggestion coverage by @YaoSong808 in #2863
fix(suggestions): retain successful chunks after partial failure by @junnhwan in #2829
fix(openrouter): normalize reasoning controls by @PeterDaveHello in #2837
fix: accept case-insensitive YAML fence labels by @alexsmolya in #2842
fix(gerrit): align diff metadata and filtering by @lxingy3 in #2836
fix: preserve target indentation in improve suggestions by @Oxygen56 in #2429
fix(describe): clean up progress comments on failure and cancellation by @junnhwan in #2833
fix(github): release cancelled push-trigger waiters by @junnhwan in #2827
fix(agent): preserve asyncio cancellation at request boundary by @junnhwan in #2832
fix(suggestions): only offer applicable changes by @TLA020 in #2649
fix(ask_line): skip the model call when no hunk lines are selected by @Evhye38496 in #2807
fix: propagate exception from verified inline comment publishing by @karesansui-u in #2258
fix(github): handle null GraphQL fields in fetch_sub_issues by @erkdgn in #2785
fix(agent): preserve quoted webhook command arguments by @junnhwan in #2813
fix: fall back for oversized Claude token requests by @junnhwan in #2811
fix: recognize generated descriptions with leading content by @bunnysayzz in #2667
fix: accept whitespace between code fence and yaml info string by @bunnysayzz in #2622
fix(gitlab): support numeric project ID merge request URLs by @waewoo in #2719
fix(gitlab): restore ticket context in reviews by @Fnine59 in #2802
fix(gitlab): strip sub-path prefix when parsing merge request URLs by @Evhye38496 in #2806
fix(pr_agent/algo/file_filter.py): warning when an ignore pattern cannot compile by @dwin-gharibi in #2748
fix(pr_agent/algo/pr_processing.py): coercing patch_extra_lines settings to int by @dwin-gharibi in #2740
fix(pr_agent/algo/pr_processing.py): filling token counts before sorting the compressed diff by @dwin-gharibi in #2734
fix(pr_agent/servers/bitbucket_app.py): building the secret provider per process by @dwin-gharibi in #2736
fix(review): publish failure result for manual runs by @oleksii-tumanov in #2795
fix(pr_agent/algo/utils.py): clamping the review effort score to its scale by @dwin-gharibi in #2760
fix(pr_agent/algo/git_patch_processing.py): skipping lines that are not unified hunk headers by @dwin-gharibi in #2755
fix(azure): handle commits without changes by @junnhwan in #2786
fix(bitbucket-server): preserve MOVE rename semantics in pull request diffs by @junnhwan in #2801
fix(repo-context): propagate provider fetch errors by @junnhwan in #2793
fix(pr_agent/algo/skills_loader.py): keeping truncated skills inside the token budget by @dwin-gharibi in #2770
fix(pr_agent/tools/pr_add_docs.py): range-checking the model's line numbers by @dwin-gharibi in #2758
fix: /ask on outdated review comments crashes with TypeError by @rophy in #2784
fix(codecommit): include deleted files in review diffs by @Fnine59 in #2789
fix: add config.max_output_tokens so completion calls carry an output token limit by @IsmaelMartinez in #2632
fix(ask): stop discarding GitLab answers that mention quick actions (#2302) by @IsmaelMartinez in #2628
fix(pr_agent/algo/token_handler.py): coercing the token estimate factor to float by @dwin-gharibi in #2742
fix(pr_agent/algo/ai_handlers/langchain_ai_handler.py): moving the Runnable import inside the guard by @dwin-gharibi in #2732
fix(bitbucket): propagate repo context fetch errors by @junnhwan in #2791
fix(gitea): strip the full /api/v1/repos prefix when parsing URLs by @jamesbraid in #2780
fix: sanitize illegal control characters before YAML parsing by @kate1128 in #2618
fix(pr_agent/algo/utils.py): rendering nested config values as yaml by @dwin-gharibi in #2752
fix(pr_agent/algo/utils.py): guarding the empty relevant line lookup by @dwin-gharibi in #2772
fix(pr_agent/algo/utils.py): rendering the review without mutating the caller's data by @dwin-gharibi in #2764
fix(pr_agent/algo/utils.py): accepting a single ticket compliance entry by @dwin-gharibi in #2762
fix(pr_agent/algo/utils.py): skipping a malformed contribution time estimate by @dwin-gharibi in #2746
fix(pr_agent/algo/utils.py): reporting an unreadable token budget instead of ignoring it by @dwin-gharibi in #2744
fix(pr_agent/algo/utils.py): coercing configured token limits to int by @dwin-gharibi in #2738
fix(pr_agent/git_providers/github_provider.py): normalising inverted line ranges in links by @dwin-gharibi in #2766
fix(pr_agent/git_providers/github_provider.py): keying global settings on the host by @dwin-gharibi in #2750
fix(github-provider): preserve old_filename and content on renames by @AmirF194 in #2776
Fix Azure diff fallback logging by @LunaMeerkats in #2869
fix(repo-context): separate cache entries by source branch by @junnhwan in #2856
fix(gitlab): retry overflowed merge request diffs by @junnhwan in #2810
Fix/litellm custom provider override by @Taooo-habitus in #2344
Update event handling for pull request updates by @michaelwellsjr in #2637
fix(pr_agent/tools/pr_code_suggestions.py): coercing the per-chunk suggestion count by @dwin-gharibi in #2754
Fix deferred LiteLLM callback draining by @PeterDaveHello in #2614
fix(review): remove stale progress comments by @oleksii-tumanov in #2788
fix(labels): escape single quotes in custom label descriptions by @gvago in #2320
fix: avoid UnboundLocalError in _calc_claude_tokens error handler by @karesansui-u in #2256

⚡ Performance

perf(bitbucket): offload blocking HTTP from async handlers by @PeterDaveHello in #2873

📚 Documentation

docs: avoid duplicating the pre-commit hook list by @PeterDaveHello in #2892
docs: consolidate agent instructions in AGENTS.md by @PeterDaveHello in #2822
docs(usage-guide): document OrcaRouter as an OpenAI-compatible gateway by @nissrin2020ali-ux in #2834
docs: restore pip install pr-agent now that PyPI publishing has resumed by @naorpeled in #2777

🧹 Maintenance

chore(deps): Upgrade vulnerable transitive dependencies by @PeterDaveHello in #2891
chore: unify ruff version in pre-commit and deps by @even-even in #2889
ci: smoke-start github_app container so a broken launcher fails CI by @VedantMadane in #2825
chore: up pre-commit-hooks version and fixes by @even-even in #2668
chore(deps): relax exact pins to patched ranges for consumer security updates by @naorpeled in #2881
chore: consolidate linting on ruff, replace flake8 by @naorpeled in #2880
chore: migrate dependency management to uv by @shmulc8 in #2509
chore(deps): Upgrade security dependencies by @PeterDaveHello in #2808
chore(deps): bump Python base image from 3.12.13 to 3.12.14 by @PeterDaveHello in #2809
chore(deps): Upgrade LiteLLM to the latest stable v1.98.0 by @PeterDaveHello in #2794
chore: bump version from 0.41.0 to 0.43.0 by @naorpeled in #2778

New Contributors

@kate1128 made their first contribution in #2618
@jamesbraid made their first contribution in #2780
@junnhwan made their first contribution in #2791
@luisrviz made their first contribution in #2663
@oleksii-tumanov made their first contribution in #2788
@rophy made their first contribution in #2784
@swayamg20 made their first contribution in #2588
@Evhye38496 made their first contribution in #2806
@waewoo made their first contribution in #2719
@michaelwellsjr made their first contribution in #2637
@erkdgn made their first contribution in #2785
@nlinakis-xm made their first contribution in #2635
@Taooo-habitus made their first contribution in #2344
@Arta-shoja made their first contribution in #2774
@elijahchancey made their first contribution in #2817
@alexsmolya made their first contribution in #2842
@YaoSong808 made their first contribution in #2863
@Newer1107 made their first contribution in #2866
@nissrin2020ali-ux made their first contribution in #2834
@LunaMeerkats made their first contribution in #2869
@raappo made their first contribution in #2876
@shmulc8 made their first contribution in #2509
@igoraj made their first contribution in #2388
@afonsojanu made their first contribution in #2848
@yifanxiong272 made their first contribution in #2877
@wjc2821296948 made their first contribution in #2595
@VedantMadane made their first contribution in #2825

Full Changelog: The-PR-Agent/pr-agent@v0.43.0...v0.44.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

greptile-apps · 2026-08-30T21:05:08Z

PR author is in the excluded authors list.

codeant-ai · 2026-08-30T21:05:08Z

Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.

macroscopeapp · 2026-08-30T21:06:03Z

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This updates the executable PR-Agent action used in both workflow attempts; the action has repository write permissions and secret inputs, while the upstream release includes behavior changes not visible in the two-line diff. The workflow is explicitly owned by the streaming team, but the PR was generated by Renovate, so owner review is warranted.

Not approved because:

Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

^{Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.}

codeant-ai · 2026-09-03T14:31:24Z

Your free trial PR review limit of 300 PRs has been reached. Please upgrade your plan to continue using CodeAnt AI.

codeant-ai · 2026-09-06T01:24:54Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

renovate Bot force-pushed the renovate/the-pr-agent-pr-agent-0.x branch from 96340e7 to 699ddf1 Compare September 3, 2026 14:31

chore(deps): update the-pr-agent/pr-agent action to v0.45.0

4e5f797

renovate Bot force-pushed the renovate/the-pr-agent-pr-agent-0.x branch from 699ddf1 to 4e5f797 Compare September 6, 2026 01:24

renovate Bot changed the title ~~chore(deps): update the-pr-agent/pr-agent action to v0.44.0~~ chore(deps): update the-pr-agent/pr-agent action to v0.45.0 Sep 6, 2026

Navigation Menu

Uh oh!

chore(deps): update the-pr-agent/pr-agent action to v0.45.0 - #92

chore(deps): update the-pr-agent/pr-agent action to v0.45.0#92
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/the-pr-agent-pr-agent-0.x

renovate Bot commented Aug 30, 2026 •

edited by blacksmith-sh Bot

Loading

Uh oh!

greptile-apps Bot commented Aug 30, 2026

Uh oh!

codeant-ai Bot commented Aug 30, 2026

Uh oh!

macroscopeapp Bot commented Aug 30, 2026 •

edited

Loading

Uh oh!

codeant-ai Bot commented Sep 3, 2026

Uh oh!

codeant-ai Bot commented Sep 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 30, 2026 • edited by blacksmith-sh Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.45.0

What's Changed

🚀 Features

🐛 Bug Fixes

📚 Documentation

🧹 Maintenance

⬆️ Dependencies

v0.44.0

⚠️ Important Changes

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

🧹 Maintenance

New Contributors

Configuration

Uh oh!

greptile-apps Bot commented Aug 30, 2026

Uh oh!

codeant-ai Bot commented Aug 30, 2026

Uh oh!

macroscopeapp Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Approvability

Uh oh!

codeant-ai Bot commented Sep 3, 2026

Uh oh!

codeant-ai Bot commented Sep 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 30, 2026 •

edited by blacksmith-sh Bot

Loading

`v0.45.0`

`v0.44.0`

macroscopeapp Bot commented Aug 30, 2026 •

edited

Loading