[PR #174] [MERGED] ci(cursor-review): bump Cursor CLI pin to 2026.08.11-e8db854 #184

New issue

Closed

opened 2026-10-26 22:37:07 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:37:07 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/github-workflows/pull/174
Author: @cloud-code-bot[bot]
Created: 8/17/2026
Status: ✅ Merged
Merged: 8/17/2026
Merged by: @mattmillerai

Base: main ← Head: ci/bump-cursor-cli-pin

📝 Commits (1)

3717b7a ci(cursor-review): bump Cursor CLI pin to 2026.08.11-e8db854

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cursor-review.yml (+2 -2)

📄 Description

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).


Version	`2026.08.04-aaa8809` → `2026.08.11-e8db854`
sha256 (linux/x64 `agent-cli-package.tar.gz`)	`bfff4bf6f4e9dd30c1d0ef0a70b6077b074015dd2948e4c50685d53afdcfce5a`
nixpkgs cross-check	matched — nixpkgs records the same digest for `2026.08.11-e8db854`
smoke test	passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.11-e8db854`

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/github-workflows/pull/174 **Author:** [@cloud-code-bot[bot]](https://github.com/apps/cloud-code-bot) **Created:** 8/17/2026 **Status:** ✅ Merged **Merged:** 8/17/2026 **Merged by:** [@mattmillerai](https://github.com/mattmillerai) **Base:** `main` ← **Head:** `ci/bump-cursor-cli-pin` --- ### 📝 Commits (1) - [`3717b7a`](https://github.com/Comfy-Org/github-workflows/commit/3717b7a31a236ebea8419d1e8016e73f480d92cd) ci(cursor-review): bump Cursor CLI pin to 2026.08.11-e8db854 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cursor-review.yml` (+2 -2) </details> ### 📄 Description Moves the Cursor CLI pin `cursor-review.yml` installs from (BE-5869). | | | |---|---| | Version | `2026.08.04-aaa8809` → `2026.08.11-e8db854` | | sha256 (linux/x64 `agent-cli-package.tar.gz`) | `bfff4bf6f4e9dd30c1d0ef0a70b6077b074015dd2948e4c50685d53afdcfce5a` | | nixpkgs cross-check | matched — nixpkgs records the same digest for `2026.08.11-e8db854` | | smoke test | passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.11-e8db854` | **You are the trust anchor for this digest.** Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during [this run](https://github.com/Comfy-Org/github-workflows/actions/runs/32038016116) — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can. Merging this bumps `cursor-review.yml`, which triggers `bump-cursor-review-callers.yml` and rolls the SHA-pinned caller fleet forward. _Opened by the `bump-cursor-cli-pin` workflow._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:37:07 +00:00