Skip to content

chore(ci): remove ai review workflows and publish caching#9211

Merged
saoudrizwan merged 2 commits intomainfrom
saoudrizwan/security-hardening-workflows
Feb 9, 2026
Merged

chore(ci): remove ai review workflows and publish caching#9211
saoudrizwan merged 2 commits intomainfrom
saoudrizwan/security-hardening-workflows

Conversation

@saoudrizwan
Copy link
Contributor

@saoudrizwan saoudrizwan commented Feb 9, 2026

Related Issue

Issue: N/A

Description

Removing the AI review/triage workflow files and removing caching from publish workflows.

Test Procedure

Not applicable.

Type of Change

  • 🏃 Workflow Changes

Pre-flight Checklist

  • Changes are limited to a single feature, bugfix or chore (split larger changes into separate PRs)
  • Tests are passing (npm test) and code is formatted and linted (npm run format && npm run lint)
  • I have created a changeset using npm run changeset (required for user-facing changes)
  • I have reviewed contributor guidelines

Screenshots

Not applicable.

Additional Notes

Removing workflow files and publish workflow caching.


Important

Remove AI review workflows and caching from publish workflows in CI/CD process.

  • Workflows Removed:
    • Deleted claude-issue-triage.yml, claude-pr-review.yml, and cline-pr-review.yml workflows.
  • Caching Removed:
    • Removed caching steps from npm-main.yaml, npm-nightly.yaml, publish-nightly.yml, and publish.yml workflows.
  • Misc:
    • No changes to the core functionality or application code.

This description was created by Ellipsis for ff395e0. You can customize this summary. It will automatically update as commits are pushed.

Copilot AI review requested due to automatic review settings February 9, 2026 23:42
@changeset-bot
Copy link

changeset-bot bot commented Feb 9, 2026

⚠️ No Changeset found

Latest commit: 8b7f7ab

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@saoudrizwan saoudrizwan merged commit 84fef6f into main Feb 9, 2026
2 checks passed
@saoudrizwan saoudrizwan deleted the saoudrizwan/security-hardening-workflows branch February 9, 2026 23:42
@cline-for-jetbrains-workflow
Copy link

JetBrains Plugin tests failed

⚠️ Action Required: This PR needs to be updated to ensure compatibility with both cline-core and JetBrains.

The changes in this PR are causing test failures in the JetBrains plugin integration. Please review and fix your changes to ensure they work properly with:

  • The cline-core functionality
  • JetBrains IDE integration

Please check the workflow logs for specific test failure details and update your PR accordingly.

Branch: saoudrizwan/security-hardening-workflows
Workflow: View run

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR simplifies the repository’s GitHub Actions setup by removing automated AI PR review/issue triage workflows and eliminating dependency caching from publish-related workflows.

Changes:

  • Removed AI review/triage workflow files (cline-pr-review, claude-pr-review, claude-issue-triage).
  • Removed actions/cache usage from extension publish and NPM publish workflows.
  • Adjusted install steps to run unconditionally (by removing cache-hit conditionals).

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 3 comments.

Show a summary per file
File Description
.github/workflows/publish.yml Removes dependency caching steps from the release publish workflow.
.github/workflows/publish-nightly.yml Removes dependency caching steps from the nightly extension publish workflow.
.github/workflows/npm-nightly.yaml Removes dependency caching step from the nightly NPM publish workflow.
.github/workflows/npm-main.yaml Removes dependency caching step from the main/manual NPM publish workflow.
.github/workflows/cline-pr-review.yml Deletes the Cline-based automated PR review workflow.
.github/workflows/claude-pr-review.yml Deletes the Claude-based automated PR review workflow.
.github/workflows/claude-issue-triage.yml Deletes the Claude-based automated issue triage workflow.
Comments suppressed due to low confidence (1)

.github/workflows/publish-nightly.yml:45

  • Check for recent commits currently uses exit 0, which only ends that step; the job will still proceed to install/build/publish. If the intent is to skip publishing when there were no commits, set an output (e.g., skip=true/false) and gate subsequent steps (or the whole job) with an if: condition based on that output.
            - name: Install root dependencies
              run: npm ci --include=optional

            - name: Install webview-ui dependencies
              run: cd webview-ui && npm ci --include=optional

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

key: ${{ runner.os }}-npm-${{ hashFiles('package-lock.json') }}

- name: Install root dependencies and CLI dependencies
if: steps.check_commits.outputs.skip != 'true'
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This step has an if: steps.check_commits.outputs.skip != 'true', but there is no check_commits step (or any other step with id: check_commits) in this workflow. Either add the missing step that sets the output, or remove the if: condition so the workflow logic is clear and intentional.

Suggested change
if: steps.check_commits.outputs.skip != 'true'

Copilot uses AI. Check for mistakes.
Comment on lines 47 to 48
- name: Install root dependencies
if: steps.root-cache.outputs.cache-hit != 'true'
run: npm install --include=optional
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR removes .github/workflows/cline-pr-review.yml, but the docs still reference that workflow and link to it (e.g., docs/cline-cli/samples/github-pr-review.mdx and docs/cline-cli/samples/model-orchestration.mdx). Consider updating those docs in the same PR (or keeping the workflow as a documented sample elsewhere) to avoid broken links/instructions.

Copilot uses AI. Check for mistakes.
Comment on lines 47 to 51
- name: Install root dependencies
if: steps.root-cache.outputs.cache-hit != 'true'
run: npm install --include=optional

- name: Install webview-ui dependencies
if: steps.webview-cache.outputs.cache-hit != 'true'
run: cd webview-ui && npm install --include=optional
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For CI/release builds, using npm install can produce non-deterministic results (it may update package-lock.json and does not strictly enforce lockfile resolution). This repo’s other workflows use npm ci, so consider switching both dependency install steps here to npm ci --include=optional for reproducible publishes.

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants