Compliance: non-stub-pr-review-mention.yml

[don-petry]

Compliance Finding

Category: ci-workflows
Severity: error
Check: non-stub-pr-review-mention.yml

Detail

Centralized workflow pr-review-mention.yml references the reusable but is not pinned to @v2 (org standard). Replace with the canonical stub from standards/workflows/pr-review-mention.yml which delegates to petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@v2.

Standard Reference

standards/ci-standards.md#centralization-tiers

Remediation

Please review the linked standard and bring this repository into compliance.

See the full standards documentation for implementation guidance.

---

This issue was automatically created by the weekly compliance audit.

[don-petry]

Dev-Lead Implementation Plan

Issue: #330 — Compliance: non-stub-pr-review-mention.yml

Scope

Replace the SHA-pinned uses: reference in .github/workflows/pr-review-mention.yml with the org-standard semantic tag @v2.

Implementation Checklist

• .github/workflows/pr-review-mention.yml — change uses: line from ...@376a4fcb1117444595e3e702fa450873d0e54310 # v2 to ...@v2

Tests to Write

• N/A — pure CI configuration change with no observable behavioral change in the local test suite (TDD exception per AGENTS.md for behavior-preserving config fixes)

Test Command

npm test

[don-petry]

Dev-Lead: Implementation Complete

Plan Execution

• .github/workflows/pr-review-mention.yml — replaced SHA-pinned uses: reference with @v2 semantic tag

TDD Exception

Pure CI configuration change (no logic, no observable behavior change in the local test suite). No new tests written per the TDD exception clause.

Test Results

Test Suites: 12 passed, 12 total
Tests:       301 passed, 301 total
Snapshots:   0 total
Time:        4.181 s
Ran all test suites.

Files Changed

• .github/workflows/pr-review-mention.yml: changed uses: from ...@376a4fcb1117444595e3e702fa450873d0e54310 # v2 to ...@v2, matching the canonical stub at petry-projects/.github/standards/workflows/pr-review-mention.yml

Notes

• Pre-existing prettier warning in .github/workflows/ci-failure-analyst.yml is unrelated to this issue and was present before this change.

[don-petry]

Weekly Compliance Audit (2026-05-29)

This finding is still open.

Detail: Centralized workflow pr-review-mention.yml references the reusable but is not pinned to @v2 (org standard). Replace with the canonical stub from standards/workflows/pr-review-mention.yml which delegates to petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@v2.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

Already working on this: an open PR exists for issue #330.

[don-petry]

Weekly Compliance Audit (2026-05-30)

This finding is still open.

Detail: Centralized workflow pr-review-mention.yml references the reusable but is not pinned to @v2 (org standard). Replace with the canonical stub from standards/workflows/pr-review-mention.yml which delegates to petry-projects/.github/.github/workflows/pr-review-mention-reusable.yml@v2.

Standard: standards/ci-standards.md#centralization-tiers

[don-petry]

@dev-lead

[don-petry]

@don-petry-dev-lead