[PR #134] [MERGED] Align manual AI dependency review workflow with shared action inputs #244

New issue

Closed

opened 2026-06-08 08:30:53 +00:00 by ryangr0 · 0 comments

ryangr0 commented

2026-06-08 08:30:53 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/webgrip/homelab-cluster/pull/134
Author: @Copilot
Created: 5/23/2026
Status: ✅ Merged
Merged: 5/23/2026
Merged by: @Ryangr0

Base: main ← Head: copilot/fix-ai-dependency-review-job-again

📝 Commits (2)

555a25d Initial plan
7bf37ba fix manual renovate review workflow inputs

📊 Changes

1 file changed (+9 additions, -3 deletions)

View changed files

📝 .github/workflows/renovate-review-manual.yml (+9 -3)

📄 Description

The manual AI dependency review workflow was out of sync with webgrip/.github/actions/renovate-review@main, causing dispatches to fail before the review issue could be created. This updates the workflow to match the current action contract and required permissions.

Workflow input contract
- Replace the obsolete github-token input with agent-token
- Pass COPILOT_AGENT_TOKEN instead of GITHUB_TOKEN
- Forward the required PR metadata expected by the shared action:
  - pr-title
  - pr-author
  - base-ref
PR metadata capture
- Extend the Validate PR step to export additional outputs from the fetched PR:
  - title
  - author login
  - base branch
Permissions alignment
- Grant issues: write so the shared action can create and assign the tracking issue
- Reduce pull request permission scope to read-only, matching actual usage
- Remove the unused models: read permission

Example of the workflow call after this change:

- uses: webgrip/.github/actions/renovate-review@main
  with:
    agent-token: ${{ secrets.COPILOT_AGENT_TOKEN }}
    base-ref: ${{ steps.pr.outputs.base_ref }}
    pr-number: ${{ steps.pr.outputs.number }}
    pr-title: ${{ steps.pr.outputs.title }}
    pr-author: ${{ steps.pr.outputs.author }}
    repository: ${{ github.repository }}

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/homelab-cluster/pull/134 **Author:** [@Copilot](https://github.com/apps/copilot-swe-agent) **Created:** 5/23/2026 **Status:** ✅ Merged **Merged:** 5/23/2026 **Merged by:** [@Ryangr0](https://github.com/Ryangr0) **Base:** `main` ← **Head:** `copilot/fix-ai-dependency-review-job-again` --- ### 📝 Commits (2) - [`555a25d`](https://github.com/webgrip/homelab-cluster/commit/555a25ddd7660faac0e19ae39ee3ca85de938e19) Initial plan - [`7bf37ba`](https://github.com/webgrip/homelab-cluster/commit/7bf37bac91204057e26dc6567c98832512c2b791) fix manual renovate review workflow inputs ### 📊 Changes **1 file changed** (+9 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/renovate-review-manual.yml` (+9 -3) </details> ### 📄 Description The manual **AI dependency review** workflow was out of sync with `webgrip/.github/actions/renovate-review@main`, causing dispatches to fail before the review issue could be created. This updates the workflow to match the current action contract and required permissions. - **Workflow input contract** - Replace the obsolete `github-token` input with `agent-token` - Pass `COPILOT_AGENT_TOKEN` instead of `GITHUB_TOKEN` - Forward the required PR metadata expected by the shared action: - `pr-title` - `pr-author` - `base-ref` - **PR metadata capture** - Extend the `Validate PR` step to export additional outputs from the fetched PR: - title - author login - base branch - **Permissions alignment** - Grant `issues: write` so the shared action can create and assign the tracking issue - Reduce pull request permission scope to read-only, matching actual usage - Remove the unused `models: read` permission Example of the workflow call after this change: ```yaml - uses: webgrip/.github/actions/renovate-review@main with: agent-token: ${{ secrets.COPILOT_AGENT_TOKEN }} base-ref: ${{ steps.pr.outputs.base_ref }} pr-number: ${{ steps.pr.outputs.number }} pr-title: ${{ steps.pr.outputs.title }} pr-author: ${{ steps.pr.outputs.author }} repository: ${{ github.repository }} ``` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

ryangr0

2026-06-08 08:30:53 +00:00

closed this issue
added the
pull-request
label

No labels

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/homelab-cluster#244

No description provided.

Rows
Columns