v0.0.15

xreview: remove the dry-run mechanism (#50). The bot now always posts its structured verdict as one sticky PR comment when a review produces one; a no-verdict run still posts nothing. The injection risk from the sandbox agent's vended token is unchanged and independent of posting mode — keep xreview on first-party/trusted content until a server-side shell gate is verified (see .github/seidroid/xreview/README.md).

v0.0.14

Adds the seidroid xreview reusable workflow (.github/workflows/seidroid-xreview.yml): on-demand, sandbox-backed agentic PR review, triggered by a seidroid xreview PR comment. A reviewed repo wires a thin caller that uses: it and pins this ref. Ships dry-run by default. See .github/seidroid/xreview/.

v0.0.13

What's Changed

• Bump actions/setup-go from 6 to 7 by @dependabot[bot] in #44
• Bump marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5 by @dependabot[bot] in #43
• Bump korthout/backport-action from 4.5.2 to 4.6.0 by @dependabot[bot] in #42
• Bump actions/github-script from 8 to 9 by @dependabot[bot] in #41
• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #40
• Add the ability to skip ai review by label by @masih in #45

Full Changelog: v0.0.12...v0.0.13

v0.0.12

What's Changed

• Bump actions/checkout from 6 to 7 by @dependabot[bot] in #36
• Bump goreleaser/goreleaser-action from 6 to 7 by @dependabot[bot] in #37
• Bump actions/github-script from 8 to 9 by @dependabot[bot] in #30
• Implement reusable AI review pipeline by @masih in #38

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• Add version and release_created outputs to release-publish by @monty-sei in #39

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• Bump korthout/backport-action from 4.3.0 to 4.5.2 by @dependabot[bot] in #34
• Bump marocchino/sticky-pull-request-comment from 3.0.2 to 3.0.4 by @dependabot[bot] in #31
• Add reusable goreleaser-release workflow by @monty-sei in #35

New Contributors

• @monty-sei made their first contribution in #35

Full Changelog: v0.0.9...v0.0.10

v0.0.9

What's Changed

• chore: update gorelease to fix nil pointer panic on Go 1.26 by @bdchatham in #24
• Bump korthout/backport-action from 4.1.0 to 4.3.0 by @dependabot[bot] in #27
• Bump actions/create-github-app-token from 2 to 3 by @dependabot[bot] in #25
• Bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #22
• Check team membership before actioning backport by comment by @masih in #28
• Bump marocchino/sticky-pull-request-comment from 2.9.4 to 3.0.2 by @dependabot[bot] in #26

New Contributors

• @bdchatham made their first contribution in #24

Full Changelog: v0.0.8...v0.0.9

v0.0.8

What's Changed

• Simplify the matrix config for go test by @masih in #21

Full Changelog: v0.0.7...v0.0.8

v0.0.7

What's Changed

• Refine go lint to skip go.sum check when not needed by @masih in #19
• Bump korthout/backport-action from 4.0.1 to 4.1.0 by @dependabot[bot] in #18
• Bump actions/create-github-app-token from 1 to 2 by @dependabot[bot] in #17
• Add a basic reusable go test workflow by @masih in #20

Full Changelog: v0.0.6...v0.0.7

v0.0.6

What's Changed

• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #15
• Bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in #14
• Point default backport actions to Platform Code Agent by @masih in #16

Full Changelog: v0.0.5...v0.0.6