chore(deps): update qodo-ai/pr-agent action to v0.44.0 by renovate[bot] · Pull Request #299 · a5chin/python-uv

renovate · 2026-08-30T22:32:28Z

This PR contains the following updates:

Package	Type	Update	Change
qodo-ai/pr-agent	action	minor	`v0.43.0` → `v0.44.0`

Release Notes

qodo-ai/pr-agent (qodo-ai/pr-agent)

`v0.44.0`

Compare Source

⚠️ Important Changes

GitHub App webhooks now require a configured secret (#2595): get_body() no longer accepts unsigned webhooks — a deployment without GITHUB.WEBHOOK_SECRET set is rejected with HTTP 403 instead of trusting every caller. Set the secret on your GitHub App and in your config before upgrading. The same PR escapes attacker-controlled webhook fields that were interpolated into CLI command strings.
Dependency management migrated to uv (#2509): requirements.txt, requirements-dev.txt, and the legacy setup.py are gone — dependencies now live in pyproject.toml with a committed uv.lock. Set up a dev environment with uv sync and run tools via uv run. Optional features are now extras (lambda, langchain — uv sync --extra <name>) or a dependency group (similar-issue — uv sync --group similar-issue), and Docker images install from the lockfile with uv sync --frozen. Installing from PyPI with pip install pr-agent still works.
Linting consolidated on Ruff (#2880): flake8 and the standalone isort pre-commit hook were removed. Contributors should run uv run ruff check --fix on touched files before committing.
Dependency pins relaxed to patched ranges (#2881): exact pins were loosened so downstream consumers can pick up security updates; LiteLLM was also upgraded to v1.98.0 (#2794).

🚀 Features

feat(models): add OpenRouter router model support by @PeterDaveHello in #2893
feat(litellm): support Claude adaptive thinking by @Kyzcreig in #2531
Support triggering commands via review assignment in Gitlab by @igoraj in #2388
feat(models): support Grok 4.5/4.6 on xAI and OpenRouter by @PeterDaveHello in #2871
feat(ask): make the ask heading configurable by @oleksii-tumanov in #2823
feat: add opt-in estimated API cost reporting by @elijahchancey in #2817
feat(improve): make suggestions heading configurable by @oleksii-tumanov in #2820
feat(gitlab): resolve the agent's own outdated inline threads by @Arta-shoja in #2774
feat(gitlab): batch-publish committable code suggestions as one review by @nlinakis-xm in #2635
feat(review): make the review heading configurable by @oleksii-tumanov in #2797
feat(ask): resolve review threads via /ask_line by @rophy in #2796
feat(models): add Bedrock Grok 4.3 support by @swayamg20 in #2588
feat(cli): add structured JSON output for local reviews by @Kyzcreig in #2532
enable bedrock access through private VPC endpoint by @luisrviz in #2663

🐛 Bug Fixes

fix(pr_agent/servers/gerrit_server.py): requiring credentials on the webhook route by @dwin-gharibi in #2728
fix: harden webhook auth and CLI argument injection vectors by @wjc2821296948 in #2595
fix: preserve YAML keys and values during fallback parsing by @yifanxiong272 in #2877
fix: surface the triggering workflow's conclusion in workflow_run reviews by @afonsojanu in #2848
fix(improve): avoid false failure after inline publish by @Fnine59 in #2886
fix(github): handle pull requests without commits by @Fnine59 in #2888
fix: add None safety for optional fields in GitLab webhook handlers by @wishhyt in #2276
fix(improve): avoid false failure after successful publish by @Fnine59 in #2882
fix(polling): enforce process limit before spawning by @PeterDaveHello in #2872
fix(improve): clean up progress comment on cancellation by @junnhwan in #2850
Fix: log dropped inline comments by @raappo in #2876
fix(mosaico): preserve request errors around Langfuse spans by @junnhwan in #2865
fix: skip non-UTF-8 files in Local Git and Gerrit diffs by @oleksii-tumanov in #2858
fix(codecommit): skip non-UTF-8 files in diffs by @oleksii-tumanov in #2860
fix: YAML parser error from diff-style lines in nested lists by @isExample in #2061
fix: demote openrouter reasoning_effort warning to info for non-none values by @Newer1107 in #2866
fix(skills): respect per-command settings in request-scoped cache by @junnhwan in #2857
fix(ask-line): enforce conversation history token budget by @junnhwan in #2862
fix: show partial code suggestion coverage by @YaoSong808 in #2863
fix(suggestions): retain successful chunks after partial failure by @junnhwan in #2829
fix(openrouter): normalize reasoning controls by @PeterDaveHello in #2837
fix: accept case-insensitive YAML fence labels by @alexsmolya in #2842
fix(gerrit): align diff metadata and filtering by @lxingy3 in #2836
fix: preserve target indentation in improve suggestions by @Oxygen56 in #2429
fix(describe): clean up progress comments on failure and cancellation by @junnhwan in #2833
fix(github): release cancelled push-trigger waiters by @junnhwan in #2827
fix(agent): preserve asyncio cancellation at request boundary by @junnhwan in #2832
fix(suggestions): only offer applicable changes by @TLA020 in #2649
fix(ask_line): skip the model call when no hunk lines are selected by @Evhye38496 in #2807
fix: propagate exception from verified inline comment publishing by @karesansui-u in #2258
fix(github): handle null GraphQL fields in fetch_sub_issues by @erkdgn in #2785
fix(agent): preserve quoted webhook command arguments by @junnhwan in #2813
fix: fall back for oversized Claude token requests by @junnhwan in #2811
fix: recognize generated descriptions with leading content by @bunnysayzz in #2667
fix: accept whitespace between code fence and yaml info string by @bunnysayzz in #2622
fix(gitlab): support numeric project ID merge request URLs by @waewoo in #2719
fix(gitlab): restore ticket context in reviews by @Fnine59 in #2802
fix(gitlab): strip sub-path prefix when parsing merge request URLs by @Evhye38496 in #2806
fix(pr_agent/algo/file_filter.py): warning when an ignore pattern cannot compile by @dwin-gharibi in #2748
fix(pr_agent/algo/pr_processing.py): coercing patch_extra_lines settings to int by @dwin-gharibi in #2740
fix(pr_agent/algo/pr_processing.py): filling token counts before sorting the compressed diff by @dwin-gharibi in #2734
fix(pr_agent/servers/bitbucket_app.py): building the secret provider per process by @dwin-gharibi in #2736
fix(review): publish failure result for manual runs by @oleksii-tumanov in #2795
fix(pr_agent/algo/utils.py): clamping the review effort score to its scale by @dwin-gharibi in #2760
fix(pr_agent/algo/git_patch_processing.py): skipping lines that are not unified hunk headers by @dwin-gharibi in #2755
fix(azure): handle commits without changes by @junnhwan in #2786
fix(bitbucket-server): preserve MOVE rename semantics in pull request diffs by @junnhwan in #2801
fix(repo-context): propagate provider fetch errors by @junnhwan in #2793
fix(pr_agent/algo/skills_loader.py): keeping truncated skills inside the token budget by @dwin-gharibi in #2770
fix(pr_agent/tools/pr_add_docs.py): range-checking the model's line numbers by @dwin-gharibi in #2758
fix: /ask on outdated review comments crashes with TypeError by @rophy in #2784
fix(codecommit): include deleted files in review diffs by @Fnine59 in #2789
fix: add config.max_output_tokens so completion calls carry an output token limit by @IsmaelMartinez in #2632
fix(ask): stop discarding GitLab answers that mention quick actions (#2302) by @IsmaelMartinez in #2628
fix(pr_agent/algo/token_handler.py): coercing the token estimate factor to float by @dwin-gharibi in #2742
fix(pr_agent/algo/ai_handlers/langchain_ai_handler.py): moving the Runnable import inside the guard by @dwin-gharibi in #2732
fix(bitbucket): propagate repo context fetch errors by @junnhwan in #2791
fix(gitea): strip the full /api/v1/repos prefix when parsing URLs by @jamesbraid in #2780
fix: sanitize illegal control characters before YAML parsing by @kate1128 in #2618
fix(pr_agent/algo/utils.py): rendering nested config values as yaml by @dwin-gharibi in #2752
fix(pr_agent/algo/utils.py): guarding the empty relevant line lookup by @dwin-gharibi in #2772
fix(pr_agent/algo/utils.py): rendering the review without mutating the caller's data by @dwin-gharibi in #2764
fix(pr_agent/algo/utils.py): accepting a single ticket compliance entry by @dwin-gharibi in #2762
fix(pr_agent/algo/utils.py): skipping a malformed contribution time estimate by @dwin-gharibi in #2746
fix(pr_agent/algo/utils.py): reporting an unreadable token budget instead of ignoring it by @dwin-gharibi in #2744
fix(pr_agent/algo/utils.py): coercing configured token limits to int by @dwin-gharibi in #2738
fix(pr_agent/git_providers/github_provider.py): normalising inverted line ranges in links by @dwin-gharibi in #2766
fix(pr_agent/git_providers/github_provider.py): keying global settings on the host by @dwin-gharibi in #2750
fix(github-provider): preserve old_filename and content on renames by @AmirF194 in #2776
Fix Azure diff fallback logging by @LunaMeerkats in #2869
fix(repo-context): separate cache entries by source branch by @junnhwan in #2856
fix(gitlab): retry overflowed merge request diffs by @junnhwan in #2810
Fix/litellm custom provider override by @Taooo-habitus in #2344
Update event handling for pull request updates by @michaelwellsjr in #2637
fix(pr_agent/tools/pr_code_suggestions.py): coercing the per-chunk suggestion count by @dwin-gharibi in #2754
Fix deferred LiteLLM callback draining by @PeterDaveHello in #2614
fix(review): remove stale progress comments by @oleksii-tumanov in #2788
fix(labels): escape single quotes in custom label descriptions by @gvago in #2320
fix: avoid UnboundLocalError in _calc_claude_tokens error handler by @karesansui-u in #2256

⚡ Performance

perf(bitbucket): offload blocking HTTP from async handlers by @PeterDaveHello in #2873

📚 Documentation

docs: avoid duplicating the pre-commit hook list by @PeterDaveHello in #2892
docs: consolidate agent instructions in AGENTS.md by @PeterDaveHello in #2822
docs(usage-guide): document OrcaRouter as an OpenAI-compatible gateway by @nissrin2020ali-ux in #2834
docs: restore pip install pr-agent now that PyPI publishing has resumed by @naorpeled in #2777

🧹 Maintenance

chore(deps): Upgrade vulnerable transitive dependencies by @PeterDaveHello in #2891
chore: unify ruff version in pre-commit and deps by @even-even in #2889
ci: smoke-start github_app container so a broken launcher fails CI by @VedantMadane in #2825
chore: up pre-commit-hooks version and fixes by @even-even in #2668
chore(deps): relax exact pins to patched ranges for consumer security updates by @naorpeled in #2881
chore: consolidate linting on ruff, replace flake8 by @naorpeled in #2880
chore: migrate dependency management to uv by @shmulc8 in #2509
chore(deps): Upgrade security dependencies by @PeterDaveHello in #2808
chore(deps): bump Python base image from 3.12.13 to 3.12.14 by @PeterDaveHello in #2809
chore(deps): Upgrade LiteLLM to the latest stable v1.98.0 by @PeterDaveHello in #2794
chore: bump version from 0.41.0 to 0.43.0 by @naorpeled in #2778

New Contributors

@kate1128 made their first contribution in The-PR-Agent#2618
@jamesbraid made their first contribution in The-PR-Agent#2780
@junnhwan made their first contribution in The-PR-Agent#2791
@luisrviz made their first contribution in The-PR-Agent#2663
@oleksii-tumanov made their first contribution in The-PR-Agent#2788
@rophy made their first contribution in The-PR-Agent#2784
@swayamg20 made their first contribution in The-PR-Agent#2588
@Evhye38496 made their first contribution in The-PR-Agent#2806
@waewoo made their first contribution in The-PR-Agent#2719
@michaelwellsjr made their first contribution in The-PR-Agent#2637
@erkdgn made their first contribution in The-PR-Agent#2785
@nlinakis-xm made their first contribution in The-PR-Agent#2635
@Taooo-habitus made their first contribution in The-PR-Agent#2344
@Arta-shoja made their first contribution in The-PR-Agent#2774
@elijahchancey made their first contribution in The-PR-Agent#2817
@alexsmolya made their first contribution in The-PR-Agent#2842
@YaoSong808 made their first contribution in The-PR-Agent#2863
@Newer1107 made their first contribution in The-PR-Agent#2866
@nissrin2020ali-ux made their first contribution in The-PR-Agent#2834
@LunaMeerkats made their first contribution in The-PR-Agent#2869
@raappo made their first contribution in The-PR-Agent#2876
@shmulc8 made their first contribution in The-PR-Agent#2509
@igoraj made their first contribution in The-PR-Agent#2388
@afonsojanu made their first contribution in The-PR-Agent#2848
@yifanxiong272 made their first contribution in The-PR-Agent#2877
@wjc2821296948 made their first contribution in The-PR-Agent#2595
@VedantMadane made their first contribution in The-PR-Agent#2825

Full Changelog: The-PR-Agent/pr-agent@v0.43.0...v0.44.0

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

Branch creation
- Between 12:00 AM and 11:59 PM (* 0-23 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested a review from a5chin as a code owner August 30, 2026 22:32

renovate Bot added the renovate label Aug 30, 2026

github-actions Bot approved these changes Aug 30, 2026

View reviewed changes

chore(deps): update qodo-ai/pr-agent action to v0.44.0

b4d682c

renovate Bot force-pushed the renovate/qodo-ai-pr-agent-0.x branch from 4c5827b to b4d682c Compare August 30, 2026 22:32

renovate Bot merged commit 1c3824f into develop Aug 30, 2026
4 checks passed

renovate Bot deleted the renovate/qodo-ai-pr-agent-0.x branch August 30, 2026 22:33

Navigation Menu

chore(deps): update qodo-ai/pr-agent action to v0.44.0 - #299

chore(deps): update qodo-ai/pr-agent action to v0.44.0#299
renovate[bot] merged 1 commit into
developfrom
renovate/qodo-ai-pr-agent-0.x

renovate Bot commented Aug 30, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Aug 30, 2026

Release Notes

v0.44.0

⚠️ Important Changes

🚀 Features

🐛 Bug Fixes

⚡ Performance

📚 Documentation

🧹 Maintenance

New Contributors

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v0.44.0`