From b98cd57468df26ada46a4ff48cdbc0bcbd890bbd Mon Sep 17 00:00:00 2001 From: Josh Mabry Date: Tue, 21 Jul 2026 03:35:18 -0700 Subject: [PATCH] =?UTF-8?q?chore(deps):=20base=20protoagent=200.106.0=20+?= =?UTF-8?q?=20github-plugin=20v0.3.0=20=E2=80=94=20head-pinned=20reads?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Lands the pr-reviewer-plugin#20 fix on Vera. The two bumps are one change and must ship together: • base 0.106.0 carries protoAgent#2100 — review-finder and verifier now read a PR's code with `github_read_pr_file` (and the verifier fails closed to "uncertain" when it cannot read at the head) • github-plugin v0.3.0 PROVIDES that tool Base alone would leave the seats naming a tool that isn't installed; the plugin alone would install a tool nothing calls. Why it matters: `github_read_file`'s `ref` defaults to the repo's default branch, so the panel was reading the PRE-PR file and "confirming" that symbols a PR ADDS don't exist — false blockers on correct PRs (protoAgent#2088, and #2094 compounded 8→9→11 across re-reviews). Prompt-level ref discipline was already in both seats, the recipe passed the head SHA everywhere, and a test asserted the wording — it still read main. The tool now takes no ref at all. Note this also moves the base 0.104.5 → 0.106.0, so Vera picks up everything else in that range. Follow-up once deployed: re-enable `regate: true` on her live config (turned off while these false FAILs could arm blocking reviews). Co-Authored-By: Claude Opus 4.8 (1M context) --- Dockerfile | 4 ++-- protoagent.bundle.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 1cbe1e1..7641694 100644 --- a/Dockerfile +++ b/Dockerfile @@ -9,7 +9,7 @@ # protoAgent core forward on the same image roll — core and member bumps are # decoupled. Bump this deliberately (and re-verify), keeping it in step with the # manifest's `verified_against`. Tag format is bare semver (no `v` prefix). -FROM ghcr.io/protolabsai/protoagent:0.104.5 +FROM ghcr.io/protolabsai/protoagent:0.106.0 USER root @@ -27,7 +27,7 @@ RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \ # Bake the bundle members at their RELEASE TAGS (both public — no build secrets). # The tags mirror protoagent.bundle.yaml's pins; bump both together (the manifest # is the source of truth, this bake is its image form). -ARG GITHUB_PLUGIN_REF=v0.2.0 +ARG GITHUB_PLUGIN_REF=v0.3.0 RUN git clone --depth 1 --branch "${GITHUB_PLUGIN_REF}" \ https://github.com/protoLabsAI/github-plugin.git /opt/protoagent/plugins/github \ && rm -rf /opt/protoagent/plugins/github/.git diff --git a/protoagent.bundle.yaml b/protoagent.bundle.yaml index e505cbd..3a6ac01 100644 --- a/protoagent.bundle.yaml +++ b/protoagent.bundle.yaml @@ -29,7 +29,7 @@ verified_against: 0.104.5 plugins: - { id: workflows, builtin: true } # the recipe engine (code-review panels run through it) - - { id: github, url: https://github.com/protoLabsAI/github-plugin, ref: v0.2.0 } + - { id: github, url: https://github.com/protoLabsAI/github-plugin, ref: v0.3.0 } - { id: pr-reviewer, url: https://github.com/protoLabsAI/pr-reviewer-plugin, ref: v0.7.1 } enabled: [workflows, github, pr-reviewer] # suggested turn-on list (applied to plugins.enabled)