chore(deps): bump Codium-ai/pr-agent from 009ba5a116c4d3273368a6dc53a4efdb7904d519 to 0bd56c0508504c718cc03d504cd4ceb6725ba3c7

[dependabot]

Bumps Codium-ai/pr-agent from 009ba5a116c4d3273368a6dc53a4efdb7904d519 to 0bd56c0508504c718cc03d504cd4ceb6725ba3c7.

Changelog

Sourced from Codium-ai/pr-agent's changelog.

2023-08-03

Optimized

• Optimized PR diff processing by introducing caching for diff files, reducing the number of API calls.
• Refactored load_large_diff function to generate a patch only when necessary.
• Fixed a bug in the GitLab provider where the new file was not retrieved correctly.

2023-08-02

Enhanced

• Updated several tools in the pr_agent package to use commit messages in their functionality.
• Commit messages are now retrieved and stored in the vars dictionary for each tool.
• Added a section to display the commit messages in the prompts of various tools.

2023-08-01

Enhanced

• Introduced the ability to retrieve commit messages from pull requests across different git providers.
• Implemented commit messages retrieval for GitHub and GitLab providers.
• Updated the PR description template to include a section for commit messages if they exist.
• Added support for repository-specific configuration files (.pr_agent.yaml) for the PR Agent.
• Implemented this feature for both GitHub and GitLab providers.
• Added a new configuration option 'use_repo_settings_file' to enable or disable the use of a repo-specific settings file.

2023-07-30

Enhanced

• Added the ability to modify any configuration parameter from 'configuration.toml' on-the-fly.
• Updated the command line interface and bot commands to accept configuration changes as arguments.
• Improved the PR agent to handle additional arguments for each action.

2023-07-28

Improved

• Enhanced error handling and logging in the GitLab provider.
• Improved handling of inline comments and code suggestions in GitLab.
• Fixed a bug where an additional unneeded line was added to code suggestions in GitLab.

2023-07-26

Added

• New feature for updating the CHANGELOG.md based on the contents of a PR.
• Added support for this feature for the Github provider.
• New configuration settings and prompts for the changelog update feature.

Commits

• 0bd56c0 chore(release): bump version to 0.35.0 [skip ci]
• a85a3b6 fix: try_fix_yaml failed on snippets with prefix oryml (#2097)
• 6cb7737 ci: publish multi-arch (linux/amd64, linux/arm64) Docker images (#2396)
• fd9cd6e fix(sambanova): correct context windows, add MiniMax-M2.7, cover key forwardi...
• b9b9cd3 feat(progress-comment): make GIF URL and width configurable (#2224)
• 4eb813a ci: pin all GitHub Actions to commit SHAs (#2395)
• ea6e50f feat(providers): add Sambanova (#2313)
• 8d02f20 fix(github-action): handle string "false" for ENABLE_OUTPUT setting (#2319)
• a28a5f2 fix: replace old qodo-ai/pr-agent refs with new the-pr-agent/pr-agent (#2392)
• e13da4f fix: raise HTTPException instead of returning it in Gerrit server (#2277)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

This PR is an automated Dependabot bump of the Codium-ai/pr-agent GitHub Action from commit 009ba5a to 0bd56c0 (v0.35.0), picking up several fixes and features including multi-arch Docker image publishing, a YAML parsing fix, a new SambaNova provider, and configurable progress-comment GIF settings.

• The action SHA is kept pinned to a specific commit, which is the correct security practice for third-party GitHub Actions.
• No workflow trigger rules, permissions, or environment variables were changed.

Confidence Score: 5/5

Safe to merge — a single-line SHA bump of a pinned third-party GitHub Action with no changes to workflow logic, permissions, or environment variables.

The only change is updating the pinned commit SHA for Codium-ai/pr-agent to v0.35.0. The workflow's triggers, job permissions, and environment configuration are untouched. SHA pinning is preserved, which guards against tag-mutation supply-chain attacks.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/pr-agent.yml	Bumps the pinned Codium-ai/pr-agent action SHA from 009ba5a to 0bd56c0 (v0.35.0); no other changes to the workflow configuration.

_{Reviews (2): Last reviewed commit: "Merge branch 'main' into dependabot/gith..." | Re-trigger Greptile}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
lucky	Ready	Preview, Comment	May 16, 2026 1:57pm

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud