[PR #249] [MERGED] ci(cursor-review): bump Cursor CLI pin to 2026.08.25-3e8eec8 #252

New issue

Closed

opened 2026-10-26 22:37:48 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:37:48 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/github-workflows/pull/249
Author: @cloud-code-bot[bot]
Created: 8/31/2026
Status: ✅ Merged
Merged: 9/2/2026
Merged by: @mattmillerai

Base: main ← Head: ci/bump-cursor-cli-pin

📝 Commits (1)

39929e3 ci(cursor-review): bump Cursor CLI pin to 2026.08.25-3e8eec8

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cursor-review.yml (+2 -2)

📄 Description

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).


Version	`2026.08.11-e8db854` → `2026.08.25-3e8eec8`
sha256 (linux/x64 `agent-cli-package.tar.gz`)	`7a212e5a17ff9316f5acc78808e33c536940d5455645022e6388d99ba48c8425`
nixpkgs cross-check	not-yet-available — nixpkgs is still on `2026.08.11-e8db854`, so this digest is trust-on-first-use
smoke test	passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.25-3e8eec8`

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/github-workflows/pull/249 **Author:** [@cloud-code-bot[bot]](https://github.com/apps/cloud-code-bot) **Created:** 8/31/2026 **Status:** ✅ Merged **Merged:** 9/2/2026 **Merged by:** [@mattmillerai](https://github.com/mattmillerai) **Base:** `main` ← **Head:** `ci/bump-cursor-cli-pin` --- ### 📝 Commits (1) - [`39929e3`](https://github.com/Comfy-Org/github-workflows/commit/39929e38b8ac0f8e17dfc27511536a167df054be) ci(cursor-review): bump Cursor CLI pin to 2026.08.25-3e8eec8 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cursor-review.yml` (+2 -2) </details> ### 📄 Description Moves the Cursor CLI pin `cursor-review.yml` installs from (BE-5869). | | | |---|---| | Version | `2026.08.11-e8db854` → `2026.08.25-3e8eec8` | | sha256 (linux/x64 `agent-cli-package.tar.gz`) | `7a212e5a17ff9316f5acc78808e33c536940d5455645022e6388d99ba48c8425` | | nixpkgs cross-check | not-yet-available — nixpkgs is still on `2026.08.11-e8db854`, so this digest is trust-on-first-use | | smoke test | passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.08.25-3e8eec8` | **You are the trust anchor for this digest.** Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during [this run](https://github.com/Comfy-Org/github-workflows/actions/runs/33401427825) — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can. Merging this bumps `cursor-review.yml`, which triggers `bump-cursor-review-callers.yml` and rolls the SHA-pinned caller fleet forward. _Opened by the `bump-cursor-cli-pin` workflow._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:37:48 +00:00