[PR #145] [MERGED] ci(cursor-review): bump Cursor CLI pin to 2026.08.04-aaa8809 #154

New issue

Closed

opened 2026-10-26 22:36:50 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:36:50 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/github-workflows/pull/145
Author: @cloud-code-bot[bot]
Created: 8/10/2026
Status: ✅ Merged
Merged: 8/10/2026
Merged by: @mattmillerai

Base: main ← Head: ci/bump-cursor-cli-pin

📝 Commits (1)

32c6a8d ci(cursor-review): bump Cursor CLI pin to 2026.08.04-aaa8809

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cursor-review.yml (+2 -2)

📄 Description

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).


Version	`2026.07.23-e383d2b` → `2026.08.04-aaa8809`
sha256 (linux/x64 `agent-cli-package.tar.gz`)	`e282068dcb5cdd668b8ce2e3456c58be13bb64a834e1ad49f8534b5cd7aa2fe5`
nixpkgs cross-check	not-yet-available — nixpkgs is still on `2026.07.23-e383d2b`, so this digest is trust-on-first-use
smoke test	passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.04-aaa8809`

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/github-workflows/pull/145 **Author:** [@cloud-code-bot[bot]](https://github.com/apps/cloud-code-bot) **Created:** 8/10/2026 **Status:** ✅ Merged **Merged:** 8/10/2026 **Merged by:** [@mattmillerai](https://github.com/mattmillerai) **Base:** `main` ← **Head:** `ci/bump-cursor-cli-pin` --- ### 📝 Commits (1) - [`32c6a8d`](https://github.com/Comfy-Org/github-workflows/commit/32c6a8d11f5df46197ce469298e2f76c088dfb4e) ci(cursor-review): bump Cursor CLI pin to 2026.08.04-aaa8809 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cursor-review.yml` (+2 -2) </details> ### 📄 Description Moves the Cursor CLI pin `cursor-review.yml` installs from (BE-5869). | | | |---|---| | Version | `2026.07.23-e383d2b` → `2026.08.04-aaa8809` | | sha256 (linux/x64 `agent-cli-package.tar.gz`) | `e282068dcb5cdd668b8ce2e3456c58be13bb64a834e1ad49f8534b5cd7aa2fe5` | | nixpkgs cross-check | not-yet-available — nixpkgs is still on `2026.07.23-e383d2b`, so this digest is trust-on-first-use | | smoke test | passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.04-aaa8809` | **You are the trust anchor for this digest.** Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during [this run](https://github.com/Comfy-Org/github-workflows/actions/runs/31398287833) — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can. Merging this bumps `cursor-review.yml`, which triggers `bump-cursor-review-callers.yml` and rolls the SHA-pinned caller fleet forward. _Opened by the `bump-cursor-cli-pin` workflow._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:36:50 +00:00