hermes-bot
c19df81858
Renovate PR bodies do not cover every dependency (kaniko from registry.gitlab.com has no source URL, so Renovate links no notes), and the reviewer had no way to read upstream changes. The Anthropic backend now offers the server-side web fetch tool when WEB_FETCH_DOMAINS is set; the deployment sets github.com,gitlab.com. - Version web_fetch_20250910 (basic): later versions turn on code execution for dynamic filtering. max_uses 10 (WEB_FETCH_MAX_USES), max_content_tokens 20000 per page. - Anthropic only fetches URLs that appeared in a user message, a client tool result or an earlier fetch/search result; MCP connector results do not count. So the task message now lists the https links of the PR body on the allowed domains (no userinfo, deduplicated, at most 20), marked as untrusted data. Without web fetch the task is unchanged. - Tool guard: a server_tool_use other than web_fetch, or web_fetch while it is off, is a violation, so the review is not posted. - Network policy: unchanged. The fetch runs on Anthropic's side; the pod still only talks to Gitea (Traefik) and the model APIs.