feat(code-review): pass confirmed=true when posting inline comments#33472
Merged
km-anthropic merged 1 commit intomainfrom Mar 12, 2026
Merged
feat(code-review): pass confirmed=true when posting inline comments#33472km-anthropic merged 1 commit intomainfrom
km-anthropic merged 1 commit intomainfrom
Conversation
km-anthropic
force-pushed
the
kashyap/code-review-batch-output
branch
from
b6c1491 to
bdb0425
Compare
The inline-comment MCP tool now requires confirmed=true to post (otherwise calls are buffered). This structurally prevents subagent test/probe comments from reaching customer PRs — subagents that inherit the tool and probe it without confirmed=true see their calls harmlessly buffered. Backward compatible: against older versions of claude-code-action that don't know the param, the extra field is ignored and the comment posts as before.
km-anthropic
force-pushed
the
kashyap/code-review-batch-output
branch
from
bdb0425 to
db8834b
Compare
km-anthropic
changed the title
sid374
approved these changes
Mar 12, 2026
This was referenced Mar 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Subagents inherit
mcp__github_inline_comment__create_inline_commentand post test/probe comments on customer PRs after hitting GraphQL permission errors. Recurring since Dec 2025 despite prompt-level guards.Fix
The inline-comment MCP tool (via anthropics/claude-code-action#1048) now has a
confirmedparameter:confirmed: true→ posts immediatelyconfirmed: false→ always bufferedThis PR updates step 9 to pass
confirmed: truewhen posting final review comments.Subagent probes that don't pass
confirmedeither:Why this works for existing customers
Both claude-code-action (via
@v1tag) and this skill (loaded at runtime from plugin marketplace) auto-update. Existing customers with old workflow YAML get the fix without re-installing.Backward compatibility
Against older versions of claude-code-action that don't have the
confirmedparam, Zod strips unknown fields and the comment posts as before.Companion action PR: anthropics/claude-code-action#1048