[PR #335] [MERGED] ci(cursor-review): bump Cursor CLI pin to 2026.10.01-e373342 #337

New issue

Closed

opened 2026-10-26 22:38:39 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-26 22:38:39 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/github-workflows/pull/335
Author: @cloud-code-bot[bot]
Created: 9/21/2026
Status: ✅ Merged
Merged: 10/8/2026
Merged by: @mattmillerai

Base: main ← Head: ci/bump-cursor-cli-pin

📝 Commits (1)

2b83393 ci(cursor-review): bump Cursor CLI pin to 2026.10.01-e373342

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/cursor-review.yml (+2 -2)

📄 Description

Moves the Cursor CLI pin cursor-review.yml installs from (BE-5869).


Version	`2026.09.10-fd3934a` → `2026.10.01-e373342`
sha256 (linux/x64 `agent-cli-package.tar.gz`)	`a79726c6e644520e993970be4c45775a6889802b67abe461a677a53219ae28e8`
nixpkgs cross-check	matched — nixpkgs records the same digest for `2026.10.01-e373342`
smoke test	passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.10.01-e373342`

You are the trust anchor for this digest. Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during this run — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can.

Merging this bumps cursor-review.yml, which triggers bump-cursor-review-callers.yml and rolls the SHA-pinned caller fleet forward.

Opened by the bump-cursor-cli-pin workflow.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/github-workflows/pull/335 **Author:** [@cloud-code-bot[bot]](https://github.com/apps/cloud-code-bot) **Created:** 9/21/2026 **Status:** ✅ Merged **Merged:** 10/8/2026 **Merged by:** [@mattmillerai](https://github.com/mattmillerai) **Base:** `main` ← **Head:** `ci/bump-cursor-cli-pin` --- ### 📝 Commits (1) - [`2b83393`](https://github.com/Comfy-Org/github-workflows/commit/2b83393ceb52c85087e20d93d0e5ab49021e407e) ci(cursor-review): bump Cursor CLI pin to 2026.10.01-e373342 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/cursor-review.yml` (+2 -2) </details> ### 📄 Description Moves the Cursor CLI pin `cursor-review.yml` installs from (BE-5869). | | | |---|---| | Version | `2026.09.10-fd3934a` → `2026.10.01-e373342` | | sha256 (linux/x64 `agent-cli-package.tar.gz`) | `a79726c6e644520e993970be4c45775a6889802b67abe461a677a53219ae28e8` | | nixpkgs cross-check | matched — nixpkgs records the same digest for `2026.10.01-e373342` | | smoke test | passed — `install-cursor-cli.sh` installed this artifact and the binary self-reported `2026.10.01-e373342` | **You are the trust anchor for this digest.** Cursor publishes no checksums for these artifacts, so the sha256 above is simply what the CDN served during [this run](https://github.com/Comfy-Org/github-workflows/actions/runs/37323380165) — trust-on-first-use. Corroborate it before merging (the nixpkgs row above, or a second independent download); nothing downstream can. Merging this bumps `cursor-review.yml`, which triggers `bump-cursor-review-callers.yml` and rolls the SHA-pinned caller fleet forward. _Opened by the `bump-cursor-cli-pin` workflow._ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-26 22:38:39 +00:00

closed this issue
added the
pull-request
label

No labels

cursor-review-catalog-drift

groom

pull-request

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Comfy-Org/github-workflows#337

No description provided.

Rows
Columns