본문으로 건너뛰기
cccskills
무료GitHub에 공개

review-renovate

Review Renovate pull requests that update GitHub Actions. Verify pinned commits against upstream version tags, inspect release notes for breaking changes, and check existing workflow settings before giving a clear recommendation on whether to merge.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

원문원문 설명 보기

Review Renovate bot PRs that update GitHub Actions dependencies. Verifies supply chain integrity by checking pinned commit SHAs against upstream tagged releases, reviews changelogs for breaking changes, and confirms compatibility with existing workflow configurations. Use when a Renovate PR updates GitHub Actions in .github/workflows/.

연동 도구GitHub
설치 방법 보기

이럴 때 유용합니다

  • Reviewing GitHub Actions updates proposed by Renovate
  • Verifying pinned commits against upstream version tags
  • Checking breaking changes and workflow compatibility
  • Deciding whether an update is ready to merge

포함된 파일(1)

  • SKILL.md2.5 KB

SKILL.md(원문)

설치하기 전에 에이전트에게 전달되는 지시 내용을 확인할 수 있습니다.

Review Renovate GitHub Actions PRs

You are reviewing a Renovate bot PR that updates GitHub Actions dependencies. Your job is to verify supply chain integrity and ensure the upgrades won't break CI/CD workflows.

Inputs

You will be given a PR number or URL. Use gh CLI to fetch PR details and diff.

Steps

1. Fetch PR metadata and diff

gh pr view <PR> --json title,body,files,commits,author,headRefName
gh pr diff <PR>

Confirm the PR author is app/renovate. If not, flag this immediately — it may not be an automated dependency update.

2. Identify all action version changes

From the diff, extract each changed action:

  • Full action name (e.g., oven-sh/setup-bun)
  • Old version tag and pinned SHA
  • New version tag and pinned SHA
  • Update type (patch, minor, major)

3. Verify pinned SHAs against upstream tags

For every action being updated, verify both old and new SHAs match the claimed version tags:

gh api repos/{owner}/{repo}/git/ref/tags/{version} --jq '.object.sha'

Compare each result against the SHA in the workflow file. If any SHA does not match, stop and report a supply chain integrity failure. Do not approve the PR.

4. Review changelogs for breaking changes

From the PR body (Renovate includes release notes), check each updated action for:

  • Removed inputs or outputs that the workflows currently use
  • Changed default behavior for inputs the workflows rely on
  • New required inputs
  • Major version bumps (these almost always have breaking changes)

5. Check workflow compatibility

Read the affected workflow files and verify:

  • No removed or renamed inputs are being used
  • No changed defaults affect current behavior
  • The action's runtime requirements are still met (e.g., Node.js version compatibility)

6. Report findings

Present a summary table:

ActionOldNewTypeSHA verified
.........patch/minor/majoryes/NO

Then state:

  • Whether all SHAs are verified
  • Whether any breaking changes were found
  • Whether the workflows remain compatible
  • A clear safe to merge or do not merge recommendation

리뷰

아직 리뷰가 없습니다. 사용해 본 소감을 남겨 주세요.

댓글

로그인 없이 쓸 수 있습니다. 사용 후기, 질문, 작동하지 않은 환경 등을 편하게 남겨 주세요.

아직 댓글이 없습니다. 첫 댓글을 남겨 보세요.

보내면 바로 공개됩니다. 이메일 주소나 전화번호 같은 개인 정보는 쓰지 마세요. URL은 2개까지입니다.

0 / 1,000자

이 양식은 reCAPTCHA로 보호되며 Google 개인정보처리방침 및 서비스 약관이 적용됩니다.

같은 저장소의 스킬

Use Plannotator to review plans, code changes, documents, and running local apps in a browser. This reference covers returning feedback to agents, browsing past decisions, sharing guided code reviews, and leaving questions for later replies.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Reviewing and approving plans or specifications
  • Reviewing local code changes or pull requests
  • Annotating documents or running local apps
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

Open documents, text configuration files, HTML, URLs, or folders in Plannotator for browser review. The agent responds to returned annotations and can use an approval session when you need to accept a plan, specification, or document.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Adding document feedback in a browser
  • Reviewing text configuration files or HTML
  • Approving a generated plan or specification
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

Open files, folders, or URLs in Plannotator’s annotation interface, then have the agent address the returned comments. Use it to review Markdown, plain-text configuration files, or HTML through a shared feedback workflow.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Reviewing a Markdown document
  • Commenting on configuration files
  • Opening a folder for annotation
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

Review Markdown files, HTML files, URLs, or folders in Plannotator’s annotation interface. The agent responds to requested changes and distinguishes them from approvals, optional approval notes, and sessions closed without feedback.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Reviewing a Markdown document
  • Collecting comments on HTML or web pages
  • Opening a folder for annotation
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

Analyze rejected plans and reviewer feedback to identify recurring concerns, changing expectations, and concrete prompt improvements. Produce an HTML dashboard from Plannotator archives, or use Claude Code plan rejection reasons when those archives are unavailable.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Finding recurring reasons for plan rejection
  • Understanding how review expectations changed
  • Deriving planning instructions from past feedback
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

Open the assistant’s latest rendered message in Plannotator and return specific annotations for revision. The skill distinguishes requested edits from approval, approval with notes, and a closed session, so each review result receives the appropriate response.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

  • Annotate the assistant’s latest response for revision
  • Approve a response without requesting further work
  • Approve with notes to guide subsequent work
backnotprop/plannotator9.5천2026년 10월 18일 업데이트

backnotprop의 스킬 모두 보기

이 스킬의 문제 신고