It looks like when the bot updates PR comments with new commit information it takes the previous incoming commit sha and uses that as the new "starting" commit sha instead of preserving the real starting commit sha.
See dotnet/aspnetcore#57742 for example. It currently links to dotnet/runtime@c4792a2...39c84a3 but it should be dotnet/runtime@ce8f49e...39c84a3.