chore(deps): Bump stbenjam/skillsaw/review from 0.14.1 to 0.16.0

[dependabot]

Bumps stbenjam/skillsaw/review from 0.14.1 to 0.16.0.

Release notes

Sourced from stbenjam/skillsaw/review's releases.

v0.16.0

What's New

New features

• fail-on severity threshold — fail the run on violations at or above a chosen severity: fail-on: error|warning|info in .skillsaw.yaml, --fail-on on the CLI, or the fail-on GitHub Action input. strict: true is now shorthand for fail-on: warning. With fail-on: info, a zero-violation repo stays clean as new rules land, and every report format includes the info violations that caused a failure (#365, #368)
• content-inconsistent-terminology — individual term groups can now be configured via rule config (#367)

v0.15.0 — "Fable Ultra"

Our biggest release ever: 42 commits, 378 files changed, ~18.5k insertions since v0.14.1. The headline is a full plugin architecture for distributing lint rules as PyPI packages, alongside the removal of the built-in LLM fix engine, a new dead-file detection rule, and a long list of autofix, correctness, security, and performance fixes.

Highlights

Plugin architecture (#312, #311, #313, #314)

Rules can now be distributed as ordinary pip-installable packages via skillsaw.plugins entry points — reviewable, versioned, and auditable, unlike repo-local custom rule files.

• Rule plugins: any package exposing a skillsaw.plugins entry point contributes rules, namespaced and attributed (source: plugin:<name> in JSON output).
• Extension points: plugins can register custom repo types (SKILLSAW_REPO_TYPES) and lint-tree contributors (SKILLSAW_TREE_CONTRIBUTORS), pulling new file types into the parse tree and content linting.
• Plugin CLIs: skillsaw <name> dispatches to a plugin's skillsaw-<name> console script — registered plugins only; arbitrary executables on PATH are never run.
• Management: new skillsaw plugins command, --no-plugins flag, and plugins: {disable: [...]} config block. A plugin that fails to load reports a plugin-load-error violation instead of aborting the lint.
• GitHub Action: new plugins input installs plugins in CI (#314).
• Docs: a full authoring guide (docs/plugins.md), a scaffold example under examples/plugins/, and a skillsaw-create-plugin skill.

⚠️ Breaking: LLM fix engine removed (#310)

The built-in LLM autofix path is gone in favor of coding agents (see the skillsaw-fix skill and per-rule skillsaw explain guidance):

• Removed flags: skillsaw fix --llm/--ai, --model, --max-iterations, --all, -y/--yes, --workers, --patch-file, --apply-patch, and the hidden skillsaw lint --fix/--llm/--dry-run.
• Removed pip extras: skillsaw[llm], [vertexai], [bedrock] (installing them now fails).

... (truncated)

Commits

• b7cb23b [Auto] Bump version to 0.16.0 (#369)
• 21f2090 Add fail-on severity threshold for exit codes (#368)
• 17ed77b content-inconsistent-terminology: configure individual term groups (#367)
• a1d7340 [Auto] Bump version to 0.15.0 (#364)
• 58e8b05 docs site: visual refresh (material theme polish, homepage hero, readable rul...
• 08b03f4 Pre-0.15.0 bug sweep: plugin fault isolation, autofix corruption, rule accura...
• 5a15dc9 Merge pull request #361 from stbenjam/swap-example-plugin
• a03b167 docs: show sample output in the plugin subcommand example
• 2cec7c7 Swap skillsaw-typos for skillsaw-runbooks as the example plugin
• a941a5e Warning display: respect the file argument in the showwarning override (#360)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the pinned version of an automated review action used in the development workflow.
  • No user-facing behavior, app functionality, or workflow structure changed.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: cf0c9bea-9af7-4081-a748-a211b5302bae

📥 Commits

Reviewing files that changed from the base of the PR and between c3f880e and 42e9a1b.

📒 Files selected for processing (1)

• .github/workflows/lint-review.yml

---

Walkthrough

The lint-review GitHub Actions workflow's "Post review comments" step is updated to reference a newer pinned commit of the stbenjam/skillsaw/review action, replacing the previously pinned commit SHA. No other workflow logic is changed.

Changes

Workflow Action Pin Update

Layer / File(s)	Summary
Update pinned action reference .github/workflows/lint-review.yml	The uses: reference for the "Post review comments" step is bumped to a newer pinned commit of stbenjam/skillsaw/review.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• openshift-eng/ai-helpers#456: Also updates workflow steps to use the stbenjam/skillsaw review action for linting.
• openshift-eng/ai-helpers#534: Also bumps the pinned stbenjam/skillsaw/review action commit in the same workflow file.
• openshift-eng/ai-helpers#542: Also updates the pinned stbenjam/skillsaw/review action version in .github/workflows/lint-review.yml.

Suggested labels: approved

Suggested reviewers: brandisher, rvanderp3

🚥 Pre-merge checks | ✅ 10

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and clearly describes the dependency bump from stbenjam/skillsaw/review 0.14.1 to 0.16.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No Real People Names In Style References	✅ Passed	Only change is a workflow action SHA bump; no real-person names appear in style refs, examples, or docs.
No Assumed Git Remote Names	✅ Passed	Only the workflow action SHA changed; no hardcoded origin/upstream remote-name assumptions appear in the touched file.
Git Push Safety Rules	✅ Passed	The PR only bumps a GitHub Action reference in .github/workflows/lint-review.yml; it adds no git push, force-push, or main/master push behavior.
No Untrusted Mcp Servers	✅ Passed	Diff only bumps a GitHub Action ref; no new MCP server installs, npx MCP invocations, or untrusted repositories were added.
Ai-Helpers Overlap Detection	✅ Passed	PR only bumps a workflow action in .github/workflows/lint-review.yml; no plugins//commands, plugins//skills, or agents files are modified.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/github_actions/stbenjam/skillsaw/review-0.16.0

---

_{Comment @coderabbitai help to get the list of available commands.}

[cblecker]

/lgtm
/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cblecker, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• .github/OWNERS [cblecker]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment