chore(deps): update the-pr-agent/pr-agent action to v0.45.0 by renovate[bot] · Pull Request #39 · wave-av/wave-profiles

renovate · 2026-08-24T03:24:31Z

This PR contains the following updates:

Package	Type	Update	Change
The-PR-Agent/pr-agent	action	minor	`v0.42.0` → `v0.45.0`

Release Notes

The-PR-Agent/pr-agent (The-PR-Agent/pr-agent)

`v0.45.0`

Compare Source

What's Changed

🚀 Features

feat(review): preserve findings across review reruns by @yefuyou in #2722
feat(improve): cap suggestions per file after chunk aggregation by @junnhwan in #3034
feat(git-providers): add public register_git_provider by @ylcn91 in #3023
feat(github): trigger commands after submitted reviews by @junnhwan in #3011
feat(review): add opt-in large-diff chunking with a stated merge rule by @ylcn91 in #3013
Add support for Gemini 3.8 Flash by @takotakot in #3003
feat: opt-in to skip same-model retry on timeout by @derrix060 in #2995
feat(codecommit): review all pull request targets by @junnhwan in #2993
feat(azure): preserve suggestion state across reruns by @TLA020 in #2724
feat(skills): apply configured skills to top-level ask by @junnhwan in #2967
feat: LiteLLM usage stats integration via otel for external monitoring systems by @jong47 in #2201
feat: fall back to LiteLLM metadata for max tokens by @yashaskn8 in #2970
feat: provider-agnostic push outputs for review (stdout/file/webhook/slack) by @shmulc8 in #2510
Add review risk assessment and optional repository review rules by @xiaodeng666a in #2391
feat(gitlab): add publish_improve_as_thread option by @sirluky in #2723

🐛 Bug Fixes

fix(tickets): refresh prompt budgets after extraction by @oleksii-tumanov in #3036
fix(gitea): resolve base_url_html on first use so a repo-level web_url applies by @ylcn91 in #3029
fix(improve): validate committable Python suggestions by @swayamg20 in #3046
fix(bitbucket): parse patches from hunk headers by @oleksii-tumanov in #3032
fix(gerrit): require webhook credentials on every call by @ylcn91 in #3027
fix(gitea): walk every page of PR files and commits by @ylcn91 in #3022
fix(servers): compare basic-auth credentials as bytes and fail closed on a half-configured pair by @ylcn91 in #3028
fix(pr_agent/algo/utils.py): trust only pr-agent's own pyproject.toml for the version by @YokoAC in #3007
fix(ci): harden release input validation by @PeterDaveHello in #2997
fix(gitlab): skip suggestions pointing past blanked head content by @dongwonmoon in #3015
fix(gerrit): return commit messages as text by @adongwanai in #3016
fix: enable describe large-diff chunking prompts by @yashaskn8 in #3006
fix(bitbucket): report code suggestion publish status by @oleksii-tumanov in #2992
fix(qdrant): namespace the collection so pre-#2323 points cannot surface by @prakrititz in #2991
fix: align CLI settings validation with repo allowlist by @mikemikimike in #2964
fix(bitbucket): harden webhook credential handling by @PeterDaveHello in #2988
fix: default auto approval to disabled by @nightcityblade in #2980
fix: handle Gitea inline comment API errors by @chuanxu742-glitch in #2975
fix(github): cast app_id to str so GitHub App auth works on PyJWT >=2.11 by @7487 in #2969
fix(gitea): report success/failure and submit reviews, not drafts by @space-josh in #2878
fix(gerrit): clean up failed repository setup by @Junaid-PK in #2926
fix(docker): restore the pr-agent console script in the cli image by @IsmaelMartinez in #2936
fix: sanitize Mermaid diagrams in PR descriptions by @swayamg20 in #2819
fix: guard against empty commit list in Azure DevOps get_latest_commit_url by @Rehan30g in #2940
fix(review): guard label updates by provider capability by @askarshabdanov1-collab in #2938
fix(providers): normalize inverted line ranges by @RRXXZZYY in #2939
fix(fallback): restore deployment after model retries by @junnhwan in #2929
fix(similar-issue): scope optional vector imports by @Elioooon in #2927
fix(pr_agent/algo/utils.py): returning an empty dict when every yaml fallback fails by @dwin-gharibi in #2730
fix(gitlab): handle null webhook labels by @RRXXZZYY in #2922
fix(pr_agent/config_loader.py): coercing verbosity_level to int by @dwin-gharibi in #2909
fix(pr_agent/algo/utils.py): preferring an exact line match when anchoring a comment by @dwin-gharibi in #2905
fix(suggestions): align fallback chunks after conversion failure by @YaoSong808 in #2867
fix(qdrant): add pandas dep, fix cross-repo ID collisions, fix comment indexing by @gvago in #2323
fix: redact git credentials from clone failure logs by @dwin-gharibi in #2697
fix: share language matcher with plain diff provider by @apoorvdarshan in #2895
fix(gerrit): use action parameter for dispatch and clean up temp repos by @gvago in #2331
fix(pr_agent/tools/pr_similar_issue.py): migrating embeddings to the openai v1 client by @dwin-gharibi in #2726
fix: bound language filename matching by @lxingy3 in #2846

📚 Documentation

docs: sync GitBook navigation with MkDocs by @VedanthB in #3044
docs: make provider support matrix single-source by @VedanthB in #3043
docs(security): discourage baking secrets into images by @PeterDaveHello in #3019
docs: make configuration defaults authoritative by @Ricky-7-Yan in #3000
docs(usage-guide): note importable-env requirement for CLI commands by @dongwonmoon in #2990
docs(usage-guide): add extension guide and fill contributor onboarding gaps by @dongwonmoon in #2966
docs: clarify OSS best practices configuration by @Ricky-7-Yan in #2870

🧹 Maintenance

chore: unskip B005, B009, B012, B905 ruff rules by @even-even in #3060
tests: build file:// URLs with Path.as_uri() to fix Windows failures by @bunnysayzz in #3055
chore: unskip E713, E714, E721 ruff rules by @even-even in #3053
test: use importlib mode for pytest test imports by @PeterDaveHello in #3018
test(git-providers): extend the cross-provider contract to four more methods by @ylcn91 in #3024
chore: unskip actionlint pre-commit and fix warnings by @even-even in #3001
refactor: generate provider-prefixed Claude model ids by @yashaskn8 in #3004
refactor(prompts): share diff-hunk guidance across tools by @swayamg20 in #2994
test: limit default pytest discovery to unit tests by @PeterDaveHello in #2987
chore: fold github_action Dockerfile and coverage workflow into existing definitions by @7487 in #2989
test: add cross-provider get_line_link contract by @swayamg20 in #2984
test: cover the pr_review_prompt user-half variable contract by @Rehan30g in #2950
test: run ASGI unit tests without TestClient by @PeterDaveHello in #2948
test: remove loopback socket dependency from extra-config unit tests by @PeterDaveHello in #2947

⬆️ Dependencies

fix: relax uvicorn version constraint by @mallesh-bot in #3020
fix(deps): update lancedb for Python 3.14 resolution by @devnp2007 in #2983
chore(deps): Upgrade LiteLLM to the latest stable v1.99.0 by @PeterDaveHello in #2981

Full Changelog: The-PR-Agent/pr-agent@v0.44.0...v0.45.0

`v0.44.0`

Compare Source

⚠️ Important Changes

GitHub App webhooks now require a configured secret (#2595): get_body() no longer accepts unsigned webhooks — a deployment without GITHUB.WEBHOOK_SECRET set is rejected with HTTP 403 instead of trusting every caller. Set the secret on your GitHub App and in your config before upgrading. The same PR escapes attacker-controlled webhook fields that were interpolated into CLI command strings.
Dependency management migrated to uv (#2509): requirements.txt, requirements-dev.txt, and the legacy setup.py are gone — dependencies now live in pyproject.toml with a committed uv.lock. Set up a dev environment with uv sync and run tools via uv run. Optional features are now extras (lambda, langchain — uv sync --extra <name>) or a dependency group (similar-issue — uv sync --group similar-issue), and Docker images install from the lockfile with uv sync --frozen. Installing from PyPI with pip install pr-agent still works.
Linting consolidated on Ruff (#2880): flake8 and the standalone isort pre-commit hook were removed. Contributors should run uv run ruff check --fix on touched files before committing.
Dependency pins relaxed to patched ranges (#2881): exact pins were loosened so downstream consumers can pick up security updates; LiteLLM was also upgraded to v1.98.0 (#2794).

🚀 Features

feat(models): add OpenRouter router model support by @PeterDaveHello in #2893
feat(litellm): support Claude adaptive thinking by @Kyzcreig in #2531
Support triggering commands via review assignment in Gitlab by @igoraj in #2388
feat(models): support Grok 4.5/4.6 on xAI and OpenRouter by @PeterDaveHello in #2871
feat(ask): make the ask heading configurable by @oleksii-tumanov in #2823
feat: add opt-in estimated API cost reporting by @elijahchancey in #2817
feat(improve): make suggestions heading configurable by @oleksii-tumanov in #2820
feat(gitlab): resolve the agent's own outdated inline threads by @Arta-shoja in #2774
feat(gitlab): batch-publish committable code suggestions as one review by @nlinakis-xm in #2635
feat(review): make the review heading configurable by @oleksii-tumanov in #2797
feat(ask): resolve review threads via /ask_line by @rophy in #2796
feat(models): add Bedrock Grok 4.3 support by @swayamg20 in #2588
feat(cli): add structured JSON output for local reviews by @Kyzcreig in #2532
enable bedrock access through private VPC endpoint by @luisrviz in #2663

🐛 Bug Fixes

fix(pr_agent/servers/gerrit_server.py): requiring credentials on the webhook route by @dwin-gharibi in #2728
fix: harden webhook auth and CLI argument injection vectors by @wjc2821296948 in #2595
fix: preserve YAML keys and values during fallback parsing by @yifanxiong272 in #2877
fix: surface the triggering workflow's conclusion in workflow_run reviews by @afonsojanu in #2848
fix(improve): avoid false failure after inline publish by @Fnine59 in #2886
fix(github): handle pull requests without commits by @Fnine59 in #2888
fix: add None safety for optional fields in GitLab webhook handlers by @wishhyt in #2276
fix(improve): avoid false failure after successful publish by @Fnine59 in #2882
fix(polling): enforce process limit before spawning by @PeterDaveHello in #2872
fix(improve): clean up progress comment on cancellation by @junnhwan in #2850
Fix: log dropped inline comments by @raappo in #2876
fix(mosaico): preserve request errors around Langfuse spans by @junnhwan in #2865
fix: skip non-UTF-8 files in Local Git and Gerrit diffs by @oleksii-tumanov in #2858
fix(codecommit): skip non-UTF-8 files in diffs by @oleksii-tumanov in #2860
fix: YAML parser error from diff-style lines in nested lists by @isExample in #2061
fix: demote openrouter reasoning_effort warning to info for non-none values by @Newer1107 in #2866
fix(skills): respect per-command settings in request-scoped cache by @junnhwan in #2857
fix(ask-line): enforce conversation history token budget by @junnhwan in #2862
fix: show partial code suggestion coverage by @YaoSong808 in #2863
fix(suggestions): retain successful chunks after partial failure by @junnhwan in #2829
fix(openrouter): normalize reasoning controls by @PeterDaveHello in #2837
fix: accept case-insensitive YAML fence labels by @alexsmolya in #2842
fix(gerrit): align diff metadata and filtering by @lxingy3 in #2836
fix: preserve target indentation in improve suggestions by @Oxygen56 in #2429
fix(describe): clean up progress comments on failure and cancellation by @junnhwan in #2833
fix(github): release cancelled push-trigger waiters by @junnhwan in #2827
fix(agent): preserve asyncio cancellation at request boundary by @junnhwan in #2832
fix(suggestions): only offer applicable changes by @TLA020 in #2649
fix(ask_line): skip the model call when no hunk lines are selected by @Evhye38496 in #2807
fix: propagate exception from verified inline comment publishing by @karesansui-u in #2258
fix(github): handle null GraphQL fields in fetch_sub_issues by @erkdgn in #2785
fix(agent): preserve quoted webhook command arguments by @junnhwan in #2813
fix: fall back for oversized Claude token requests by @junnhwan in #2811
fix: recognize generated descriptions with leading content by @bunnysayzz in #2667
fix: accept whitespace between code fence and yaml info string by @bunnysayzz in #2622
fix(gitlab): support numeric project ID merge request URLs by @waewoo in #2719
fix(gitlab): restore ticket context in reviews by @Fnine59 in #2802
fix(gitlab): strip sub-path prefix when parsing merge request URLs by @Evhye38496 in #2806
fix(pr_agent/algo/file_filter.py): warning when an ignore pattern cannot compile by @dwin-gharibi in #2748
fix(pr_agent/algo/pr_processing.py): coercing patch_extra_lines settings to int by @dwin-gharibi in #2740
fix(pr_agent/algo/pr_processing.py): filling token counts before sorting the compressed diff by @dwin-gharibi in #2734
fix(pr_agent/servers/bitbucket_app.py): building the secret provider per process by @dwin-gharibi in #2736
fix(review): publish failure result for manual runs by @oleksii-tumanov in #2795
fix(pr_agent/algo/utils.py): clamping the review effort score to its scale by @dwin-gharibi in #2760
fix(pr_agent/algo/git_patch_processing.py): skipping lines that are not unified hunk headers by @dwin-gharibi in #2755
fix(azure): handle commits without changes by @junnhwan in #2786
fix(bitbucket-server): preserve MOVE rename semantics in pull request diffs by @junnhwan in #2801
fix(repo-context): propagate provider fetch errors by @junnhwan in #2793
fix(pr_agent/algo/skills_loader.py): keeping truncated skills inside the token budget by @dwin-gharibi in #2770
fix(pr_agent/tools/pr_add_docs.py): range-checking the model's line numbers by @dwin-gharibi in #2758
fix: /ask on outdated review comments crashes with TypeError by @rophy in #2784
fix(codecommit): include deleted files in review diffs by @Fnine59 in #2789
fix: add config.max_output_tokens so completion calls carry an output token limit by @IsmaelMartinez in #2632
fix(ask): stop discarding GitLab answers that mention quick actions (#2302) by @IsmaelMartinez in #2628
fix(pr_agent/algo/token_handler.py): coercing the token estimate factor to float by @dwin-gharibi in #2742
fix(pr_agent/algo/ai_handlers/langchain_ai_handler.py): moving the Runnable import inside the guard by @dwin-gharibi in #2732
fix(bitbucket): propagate repo context fetch errors by @junnhwan in #2791
fix(gitea): strip the full /api/v1/repos prefix when parsing URLs by @jamesbraid in #2780
fix: sanitize illegal control characters before YAML parsing by @kate1128 in #2618
fix(pr_agent/algo/utils.py): rendering nested config values as yaml by @dwin-gharibi in #2752
fix(pr_agent/algo/utils.py): guarding the empty relevant line lookup by @dwin-gharibi in #2772
fix(pr_agent/algo/utils.py): rendering the review without mutating the caller's data by @dwin-gharibi in #2764
fix(pr_agent/algo/utils.py): accepting a single ticket compliance entry by @dwin-gharibi in #2762
fix(pr_agent/algo/utils.py): skipping a malformed contribution time estimate by @dwin-gharibi in #2746
fix(pr_agent/algo/utils.py): reporting an unreadable token budget instead of ignoring it by @dwin-gharibi in #2744
fix(pr_agent/algo/utils.py): coercing configured token limits to int by @dwin-gharibi in #2738
fix(pr_agent/git_providers/github_provider.py): normalising inverted line ranges in links by @dwin-gharibi in #2766
fix(pr_agent/git_providers/github_provider.py): keying global settings on the host by @dwin-gharibi in #2750
fix(github-provider): preserve old_filename and content on renames by @AmirF194 in #2776
Fix Azure diff fallback logging by @LunaMeerkats in #2869
fix(repo-context): separate cache entries by source branch by @junnhwan in #2856
fix(gitlab): retry overflowed merge request diffs by @junnhwan in #2810
Fix/litellm custom provider override by @Taooo-habitus in #2344
Update event handling for pull request updates by @michaelwellsjr in #2637
fix(pr_agent/tools/pr_code_suggestions.py): coercing the per-chunk suggestion count by @dwin-gharibi in #2754
Fix deferred LiteLLM callback draining by @PeterDaveHello in #2614
fix(review): remove stale progress comments by @oleksii-tumanov in #2788
fix(labels): escape single quotes in custom label descriptions by @gvago in #2320
fix: avoid UnboundLocalError in _calc_claude_tokens error handler by @karesansui-u in #2256

⚡ Performance

perf(bitbucket): offload blocking HTTP from async handlers by @PeterDaveHello in #2873

📚 Documentation

docs: avoid duplicating the pre-commit hook list by @PeterDaveHello in #2892
docs: consolidate agent instructions in AGENTS.md by @PeterDaveHello in #2822
docs(usage-guide): document OrcaRouter as an OpenAI-compatible gateway by @nissrin2020ali-ux in #2834
docs: restore pip install pr-agent now that PyPI publishing has resumed by @naorpeled in #2777

🧹 Maintenance

chore(deps): Upgrade vulnerable transitive dependencies by @PeterDaveHello in #2891
chore: unify ruff version in pre-commit and deps by @even-even in #2889
ci: smoke-start github_app container so a broken launcher fails CI by @VedantMadane in #2825
chore: up pre-commit-hooks version and fixes by @even-even in #2668
chore(deps): relax exact pins to patched ranges for consumer security updates by @naorpeled in #2881
chore: consolidate linting on ruff, replace flake8 by @naorpeled in #2880
chore: migrate dependency management to uv by @shmulc8 in #2509
chore(deps): Upgrade security dependencies by @PeterDaveHello in #2808
chore(deps): bump Python base image from 3.12.13 to 3.12.14 by @PeterDaveHello in #2809
chore(deps): Upgrade LiteLLM to the latest stable v1.98.0 by @PeterDaveHello in #2794
chore: bump version from 0.41.0 to 0.43.0 by @naorpeled in #2778

New Contributors

@kate1128 made their first contribution in #2618
@jamesbraid made their first contribution in #2780
@junnhwan made their first contribution in #2791
@luisrviz made their first contribution in #2663
@oleksii-tumanov made their first contribution in #2788
@rophy made their first contribution in #2784
@swayamg20 made their first contribution in #2588
@Evhye38496 made their first contribution in #2806
@waewoo made their first contribution in #2719
@michaelwellsjr made their first contribution in #2637
@erkdgn made their first contribution in #2785
@nlinakis-xm made their first contribution in #2635
@Taooo-habitus made their first contribution in #2344
@Arta-shoja made their first contribution in #2774
@elijahchancey made their first contribution in #2817
@alexsmolya made their first contribution in #2842
@YaoSong808 made their first contribution in #2863
@Newer1107 made their first contribution in #2866
@nissrin2020ali-ux made their first contribution in #2834
@LunaMeerkats made their first contribution in #2869
@raappo made their first contribution in #2876
@shmulc8 made their first contribution in #2509
@igoraj made their first contribution in #2388
@afonsojanu made their first contribution in #2848
@yifanxiong272 made their first contribution in #2877
@wjc2821296948 made their first contribution in #2595
@VedantMadane made their first contribution in #2825

Full Changelog: The-PR-Agent/pr-agent@v0.43.0...v0.44.0

`v0.43.0`

Compare Source

[!NOTE]
PyPI releases are back. pr-agent is published to PyPI again as part of the release workflow — this release is available as pr-agent 0.43.0. The versions missed during the gap (0.40.0, 0.41.0, 0.42.0) have been backfilled as well.
pip install pr-agent==0.43.0

What's Changed

🚀 Features

feat(config): accept max reasoning effort by @Kyzcreig in #2529
feat: add Asana ticket detection to ticket compliance check by @Oxygen56 in #2430
feat(azure): publish review findings inline by @TLA020 in #2651
feat(webhooks): add feedback_on_draft_pr to run auto commands on draft PRs by @kvdb in #2659
feat(gitlab): incremental /review -i and /improve -i by @sizickp in #2389
Add support for Gemini 3.7 Flash by @takotakot in #2657

🐛 Bug Fixes

fix(azure): span complete suggestion lines by @TLA020 in #2721
fix(suggestions): remove stale progress comments by @TLA020 in #2648
fix: compare configuration skip keys case-insensitively by @dwin-gharibi in #2689
fix: render a trailing deletion-only hunk instead of dropping it by @dwin-gharibi in #2683
fix: parse omitted hunk counts in find_line_number_of_relevant_line_in_file by @dwin-gharibi in #2699
fix: treat an omitted unified-diff hunk count as 1, not 0 by @dwin-gharibi in #2677
fix: return 401 instead of 500 for an unauthenticated Azure DevOps webhook by @dwin-gharibi in #2703
fix: match the litellm callback probe record by identity by @dwin-gharibi in #2693
fix: read config.skip_keys from the correct settings path by @dwin-gharibi in #2687
fix: stop lowercasing the whole comment body in the GitHub Action runner by @dwin-gharibi in #2691
fix: strip whitespace before validating forbidden CLI arguments by @dwin-gharibi in #2675
fix: authenticate GitLab webhooks in the request path so failures return 401 by @dwin-gharibi in #2708
fix(description): use regex for minute suffix replacement instead of blanket .replace by @gvago in #2318
fix: render tickets requiring only human verification by @Fnine59 in #2654
fix: select the correct old-file lines for /ask on a LEFT-side diff line by @dwin-gharibi in #2679
fix: drop deletion-only hunk when a later hunk has additions by @bunnysayzz in #2621
fix: keep DefaultDictWithTimeout key timestamps in sync with its entries by @dwin-gharibi in #2685
fix(local): support detached HEAD in LocalGitProvider by @SAY-5 in #2670
fix(gitea): use user-facing base URL for links published in comments by @niallsemple in #2617
fix: allow importing get_logger as the first pr_agent import by @AshSgDe29071999 in #2704
fix(azure): anchor inline comments to diff paths by @TLA020 in #2647
fix: update stale unreviewed_files_set references to unreviewed_files_map in tests by @lesbass in #2711
fix(ticket-compliance): fetch linked issues from their own repository by @higher68 in #2533
fix: include agent run details in /improve output when no suggestions are found by @YokoAC in #2653
fix(improve): route self-reflection through the reasoning fallback chain (#2660) by @IsmaelMartinez in #2661

📚 Documentation

docs(gitlab): clarify pipeline and webhook workflows by @hansu650 in #2636
docs: pin current GitHub install source by @er-s-an in #2655
docs: document local git provider workflow by @yefuyou in #2665
docs: remove wiki configuration file, which this repo does not implement by @IsmaelMartinez in #2666
docs: remove interactive checkbox claims that this repo does not implement (#2541) by @IsmaelMartinez in #2615

🧹 Maintenance

chore(deps): Upgrade LiteLLM to the latest stable v1.96.2 by @PeterDaveHello in #2638
test: isolate Gunicorn tests from runner CPU affinity by @PeterDaveHello in #2613

Full Changelog: The-PR-Agent/pr-agent@v0.42.0...v0.43.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

greptile-apps · 2026-08-24T03:24:36Z

PR author is in the excluded authors list.

codeant-ai · 2026-08-24T03:24:36Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

macroscopeapp · 2026-08-24T03:25:18Z

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — This small dependency update changes a privileged PR automation action that receives repository and API credentials, and the workflow is entirely owned by another team. Human review is warranted to confirm the new upstream action remains appropriate for this sensitive workflow.

Not approved because:

Credit balance exhausted. Approvability relies on correctness review in order to determine eligibility

No code changes detected at 3fbadf6. Prior analysis still applies.

^{Review your spending limits in Billing settings. You can add or adjust custom eligibility rules. Learn more.}

codeant-ai · 2026-08-27T00:42:29Z