fix(review-bot): dependency checks on re-reviews, web search for release notes #1612

Merged
k.renner merged 1 commits from daedalus/review-bot-dependency-rereview into main 2026-11-09 08:24:29 +00:00
1 Commits
Author SHA1 Message Date
hermes-bot 8f08ef2f1d fix(review-bot): dependency checks on re-reviews, web search for notes
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
ci/woodpecker/pr/review-bot-test Pipeline was successful
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
review-bot re-reviewed konairius/ical-proxy#22 at an unchanged head
(62cf054b) and wrote "I did not fetch the kaniko release notes, so I can't
say what changed between v1.25.20 and v1.25.21", with no web call. Two
causes:

- prompt.md: a re-review with an unchanged head only answers the author's
  replies, and re-reviews never revisit code already judged, so the
  "Dependency updates" checks never ran on a PR first reviewed under the
  old prompt. Re-reviews now run those checks on every review of a
  dependency update, for each dependency the newest earlier review did
  not cover (upstream changes old -> new, or a digest-only rebuild), and
  carry over the ones it did.
- No fetchable URL: the PR body has no link for the kaniko image
  (registry.gitlab.com/gitlab-ci-utils/container-images/kaniko has no
  source label), and Anthropic's web fetch only opens URLs already in the
  conversation (user message, client tool results, earlier fetch/search
  results; not the system prompt or MCP results). Following links from a
  fetched page is unreliable because page-to-text conversion drops
  relative links. The Anthropic backend now also offers the web search
  server tool (web_search_20250305, basic, no code execution) on the same
  WEB_FETCH_DOMAINS, max_uses WEB_SEARCH_MAX_USES (default 5); search
  results are a valid fetch source. The prompt tells the agent to search
  for a dependency without a link (package name or the upstream a wrapper
  image builds, plus the new version). Web search is enabled per org by
  default in the Claude Console; no manual step.
- Tool guard: web_search is allowed only while web tools are on, like
  web_fetch; otherwise the review is not posted.

The renovate-config sourceUrl rule for this image (renovate-config #4)
puts notes into the PR body from the next scheduled Renovate run; this
covers the PRs that already exist and any other package without a source.
2026-11-09 08:00:44 +00:00