Skip to content

chore: upgrade version to 2.2.8-stable, add ReviewBuddy workflow and improve naming consistency #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AnkanSaha merged 2 commits into from
Jan 26, 2026
Merged

chore: upgrade version to 2.2.8-stable, add ReviewBuddy workflow and improve naming consistency #10

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
eef736d
chore: update version to 2.2.8-stable and add ReviewBuddy workflow
AnkanSaha Jan 26, 2026
1e5f2f3
Merge branch 'main' into dev
AnkanSaha Jan 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions .github/workflows/ReviewBuddy.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
name: Review Buddy
on:
pull_request:
types: [opened, synchronize]
issue_comment:
types: [created]
Comment on lines +2 to +6
Copy link

Copilot AI Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is triggered on issue_comment and uses a repository secret (GEMINI_API_KEY). issue_comment runs in the base repo context, so any external user can trigger this job by commenting on an issue/PR, which risks secret exfiltration via logs or via the third‑party action. Restrict execution (e.g., only when github.event.issue.pull_request is present and the commenter is a trusted association like OWNER/MEMBER/COLLABORATOR) or remove the issue_comment trigger.

Copilot uses AI. Check for mistakes.
permissions:
pull-requests: write
contents: read
jobs:
review:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: nexoral/ReviewBuddy@main
Copy link

Copilot AI Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

uses: nexoral/ReviewBuddy@main is not pinned to a tag or commit SHA. Referencing a moving branch makes the workflow vulnerable to supply-chain changes and can also cause non-reproducible behavior. Pin this action to a specific release tag or (preferably) a commit SHA.

Suggested change
- uses: nexoral/ReviewBuddy@main
- uses: nexoral/ReviewBuddy@v1.3.0

Copilot uses AI. Check for mistakes.
with:
gemini_api_key: ${{ secrets.GEMINI_API_KEY }}
Comment on lines +15 to +17
Copy link

Copilot AI Jan 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This step requires secrets.GEMINI_API_KEY, but the workflow is triggered by pull_request. For PRs from forks, GitHub does not provide repository secrets, so the job will fail (or run with an empty key). If forked PRs are expected, add an if: guard to skip when the secret is unavailable, or move to pull_request_target with a safe checkout strategy.

Copilot uses AI. Check for mistakes.
2 changes: 1 addition & 1 deletion Scripts/installer.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ ARCH=$(dpkg --print-architecture)

echo "Detected architecture: $ARCH"

VERSION="2.2.7-stable"
VERSION="2.2.8-stable"

if [[ "$ARCH" == "amd64" ]]; then
PKG="xpack_${VERSION}_amd64.deb"
Expand Down
2 changes: 1 addition & 1 deletion VERSION
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
2.2.7-stable
2.2.8-stable
2 changes: 1 addition & 1 deletion src/Core/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ import (
)

// var VERSION is updated by Scripts/versionController.sh
var VERSION = "2.2.7-stable"
var VERSION = "2.2.8-stable"

// readLineRaw reads interactive input from terminal in raw mode, supporting Tab completion
func readLineRaw(promptText, defaultVal string) (string, error) {
Expand Down
2 changes: 1 addition & 1 deletion src/base/banner.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ import (
)

// const Version is kept so external scripts can update it via sed
const Version = "2.2.7-stable"
const Version = "2.2.8-stable"

// PrintBanner prints a simple welcome banner. Version may be empty.
func PrintBanner(version string) {
Expand Down
Loading