review-bot re-reviewed konairius/ical-proxy#22 at an unchanged head
(62cf054b) and wrote "I did not fetch the kaniko release notes, so I can't
say what changed between v1.25.20 and v1.25.21", with no web call. Two
causes:
- prompt.md: a re-review with an unchanged head only answers the author's
replies, and re-reviews never revisit code already judged, so the
"Dependency updates" checks never ran on a PR first reviewed under the
old prompt. Re-reviews now run those checks on every review of a
dependency update, for each dependency the newest earlier review did
not cover (upstream changes old -> new, or a digest-only rebuild), and
carry over the ones it did.
- No fetchable URL: the PR body has no link for the kaniko image
(registry.gitlab.com/gitlab-ci-utils/container-images/kaniko has no
source label), and Anthropic's web fetch only opens URLs already in the
conversation (user message, client tool results, earlier fetch/search
results; not the system prompt or MCP results). Following links from a
fetched page is unreliable because page-to-text conversion drops
relative links. The Anthropic backend now also offers the web search
server tool (web_search_20250305, basic, no code execution) on the same
WEB_FETCH_DOMAINS, max_uses WEB_SEARCH_MAX_USES (default 5); search
results are a valid fetch source. The prompt tells the agent to search
for a dependency without a link (package name or the upstream a wrapper
image builds, plus the new version). Web search is enabled per org by
default in the Claude Console; no manual step.
- Tool guard: web_search is allowed only while web tools are on, like
web_fetch; otherwise the review is not posted.
The renovate-config sourceUrl rule for this image (renovate-config #4)
puts notes into the PR body from the next scheduled Renovate run; this
covers the PRs that already exist and any other package without a source.