[PR #265] [MERGED] ci(cursor-review): bump Cursor CLI pin to 2026.09.02-c22c1a3 #268

New issue

Closed

opened 2026-10-26 22:37:55 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:37:55 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/github-workflows/pull/265
Author: @cloud-code-bot[bot]
Created: 9/7/2026
Status: ✅ Merged
Merged: 9/8/2026
Merged by: @mattmillerai

Base: main ← Head: ci/bump-cursor-cli-pin

📝 Commits (1)

2f243f2 ci(cursor-review): bump Cursor CLI pin to 2026.09.02-c22c1a3

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cursor-review.yml (+2 -2)

📄 Description

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).


Version	`2026.08.25-3e8eec8` → `2026.09.02-c22c1a3`
sha256 (linux/x64 `agent-cli-package.tar.gz`)	`b73b59854762535c0fc20d7ccc51c3b5a356a851491088d60a362be48750f53c`
nixpkgs cross-check	not-yet-available — nixpkgs is still on `2026.08.31-4057e58`, so this digest is trust-on-first-use
smoke test	passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.09.02-c22c1a3`

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/github-workflows/pull/265 **Author:** [@cloud-code-bot[bot]](https://github.com/apps/cloud-code-bot) **Created:** 9/7/2026 **Status:** ✅ Merged **Merged:** 9/8/2026 **Merged by:** [@mattmillerai](https://github.com/mattmillerai) **Base:** `main` ← **Head:** `ci/bump-cursor-cli-pin` --- ### 📝 Commits (1) - [`2f243f2`](https://github.com/Comfy-Org/github-workflows/commit/2f243f2929c85d77529d851c70be2433709fb0f8) ci(cursor-review): bump Cursor CLI pin to 2026.09.02-c22c1a3 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cursor-review.yml` (+2 -2) </details> ### 📄 Description Moves the Cursor CLI pin `cursor-review.yml` installs from (BE-5869). | | | |---|---| | Version | `2026.08.25-3e8eec8` → `2026.09.02-c22c1a3` | | sha256 (linux/x64 `agent-cli-package.tar.gz`) | `b73b59854762535c0fc20d7ccc51c3b5a356a851491088d60a362be48750f53c` | | nixpkgs cross-check | not-yet-available — nixpkgs is still on `2026.08.31-4057e58`, so this digest is trust-on-first-use | | smoke test | passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.09.02-c22c1a3` | **You are the trust anchor for this digest.** Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during [this run](https://github.com/Comfy-Org/github-workflows/actions/runs/34131747873) — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can. Merging this bumps `cursor-review.yml`, which triggers `bump-cursor-review-callers.yml` and rolls the SHA-pinned caller fleet forward. _Opened by the `bump-cursor-cli-pin` workflow._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:37:55 +00:00