PR-review markers now validate a method field, allowing only read actions live and create actions in stamps.
What's wrong with this entry?
The validator for the PR-review anchor and stamp islands now recognises a method input key and applies narrower rules to it.
- a case-insensitive
methodkey regex was added; a method key must hold a string value - in the live binding only a get-shaped word may ride it, in the stamp only a create-shaped one
- method keys are excluded from the checks requiring the input to carry the PR owner, repo and number
- two of the embedded sha256 constants used by this subsystem changed value in this build
live.input carries a non-string value under the method key
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.219
PR-review anchor repo names reject "." and ".."
Both mention code review
-
v2.1.219
Composed PR-review publish refusal explains whether it is a live switch
Both mention code review
-
v2.1.239
Code review findings now carry a short summary and a category
Both mention code review