MHSanaei a716122ef2 feat(ci): let the review bot read the discussion, the issue and xray-core ...

The bot never read the replies under its own findings, so a finding a
maintainer had already declined came back on the next `@claude review`.
It now reads every comment and inline thread first: a maintainer's answer
settles a finding for good, anyone else's is a claim checked against the
code, and the summary gives each earlier finding a disposition. It also
reads the issue the PR claims to fix and reports a partial fix.

REVIEW.md asks for an upstream symbol behind every wire-format claim, but
the job had no xray-core source (#6718's review said so). The module the
base go.mod pins is now unpacked into a hidden dir in the base workspace;
nothing from pr-head runs.

REVIEW.md gains the rules only /senior-review carried: keep read,
reproduced and inferred claims apart, evidence for performance findings,
a traced trust boundary for security ones, and duplicated logic as a
finding. The summary now says each inline finding in one line.

2026-10-02 16:11:08 +02:00

..

claude

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

ISSUE_TEMPLATE

fix(ci): resync the bot prompts with the repo and close the gaps an audit found

2026-08-17 02:41:21 +02:00

workflows

feat(ci): let the review bot read the discussion, the issue and xray-core

2026-10-02 16:11:08 +02:00

dependabot.yml

Security hardening: sessions, SSRF, CSP nonce, CSRF logout, trusted proxies (#4275)

2026-05-13 12:52:52 +02:00

FUNDING.yml

chore(github): overhaul issue and PR templates

2026-05-24 22:14:28 +02:00

pull_request_template.md

chore(github): overhaul issue and PR templates

2026-05-24 22:14:28 +02:00