chore: adopt widened comment-hygiene policy and re-pin ci-workflows @9567b8b#9
Conversation
…9567b8b Re-sync modules/comment-hygiene/comment-hygiene-patterns.sh to the standards SSOT: the policy now also flags cc-issue, GitHub closing-keyword+#N, issue/issues/tracked refs, owner/repo#N and GH-N, and scans block (/* *) and HTML (<!--) comment lines. Re-pin every melodic-software/ci-workflows action and reusable-workflow ref to current main so the matching coarse prefilter, git-tracked file walks and inline PR annotations activate alongside the widened policy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 60506106e4
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| # LETTERS-NUMBER shape collides with technical tokens (UTF-8, SHA-256, | ||
| # ISO-8601, RFC-2119, CVE-2025-…, P-256) and POSIX ERE cannot exclude them. | ||
| # Deferred until a Jira-using consumer supplies an explicit project-key list. | ||
| done < <(awk '/^[[:space:]]*(\/\/|#|\/\*|\*|<!--)/ { print NR ":" $0 }' <<<"$content") |
There was a problem hiding this comment.
When this policy is used by the bumped comment-hygiene action, the prefilter also admits leading * lines for the default .js/.ts/.py file set, so this validator now treats real code that starts with an operator/star as a comment. A valid generator method or unpacking line such as *todo() {} or *todo, rest = seq is not a comment, but nocasematch makes the existing TODO marker rule report it and fail CI. Please narrow the block-comment continuation case, for example to * followed by whitespace, so non-comment code that begins with *todo is not blocked.
Useful? React with 👍 / 👎.
What
modules/comment-hygiene/comment-hygiene-patterns.shto thestandardsSSOT (blob7ebe897). The widened policy now also flagscc-issue, GitHub closing-keyword+#N,issue/issues/trackedrefs,owner/repo#NandGH-N, and scans block (/* *) and HTML (<!--) comment lines.melodic-software/ci-workflowsaction and reusable-workflow ref (ci.yml,link-check.yml) to currentmain(9567b8b, 2026-06-24).Why
No Dependabot exists for vendored configs, so the patterns re-sync is manual. Re-pinning to current ci-workflows main activates the matching coarse prefilter, git-tracked file walks, and inline PR annotations alongside the widened policy. Dependabot would later bump the SHA pins on its own cycle; this brings them current now.
Verification
git rev-parse :…==7ebe897,i/lf).9567b8b.