chore: update tend workflows (0.3.5 → 0.3.7)

.github/workflows/tend-ci-fix.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -35,17 +35,16 @@ jobs:
       pull-requests: write
       actions: read
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted

.github/workflows/tend-mention-relay.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent

.github/workflows/tend-mention.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -54,12 +54,13 @@ jobs:
       url: ${{ steps.check.outputs.url }}
       ts: ${{ steps.check.outputs.ts }}
     steps:
-      - uses: astral-sh/setup-uv@v10.2.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         id: tend_uv
         env:
           UV_NO_MODIFY_PATH: "1"
         with:
-          version: "0.12.19"
+          version: "0.12.22"
+          checksum: ${{ runner.arch == 'ARM64' && '6f66a14e8239871fb477f9746c941fedfa77e8fe28a8bc7c07e1dc7f53a66712' || 'b9980552309f09c15172b8be828555e375097f16deb459795ce7bfd200380f0b' }}
           enable-cache: false
           ignore-empty-workdir: true
       - name: Verify bot engagement
@@ -337,16 +338,15 @@ jobs:
           # the API record — the dispatch payload never carries one to spoof.
           EVENT_TS: ${{ github.event.comment.updated_at || needs.verify.outputs.ts || github.event.issue.updated_at }}
 
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted
@@ -357,25 +357,25 @@ jobs:
           checkout_mode: mention
           base_branch: ${{ github.event.repository.default_branch }}
           prompt: >-
+            /tend-ci-runner:mention
+
             ${{ steps.delay.outputs.seconds
             && format('This job started {0}s after the triggering event (over ~40s means it was queued). ',
-            steps.delay.outputs.seconds) || '' }}Before acting,
-            check recent comments: exit silently if the bot already responded
-            to the trigger; handle any other unaddressed comments too.
+            steps.delay.outputs.seconds) || '' }}
 
             ${{ github.event_name == 'issues'
-              && format('An issue was updated with a mention of you ({0}). Read it and respond.', github.event.issue.html_url)
+              && format('An issue was updated with a mention of you ({0}).', github.event.issue.html_url)
               || (github.event.client_payload.kind == 'pull_request_review_comment' && needs.verify.outputs.reason == 'mention'
-                && format('You were mentioned in an inline review comment on PR #{0} ({1}, comment ID {2}). Read the full context, then respond. If changes are requested, make them, commit, and push.', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
+                && format('You were mentioned in an inline review comment on PR #{0} ({1}, comment ID {2}).', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
               || (github.event.client_payload.kind == 'pull_request_review_comment'
-                && format('An inline review comment was posted on a PR where you previously participated (PR #{0}, {1}, comment ID {2}). Read the full context. Only respond if the comment is directed at you or requests changes.', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
+                && format('An inline review comment was posted on a PR where you previously participated (PR #{0}, {1}, comment ID {2}).', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
               || (github.event.client_payload.kind == 'pull_request_review' && needs.verify.outputs.reason == 'mention'
-                && format('A review was submitted on PR #{0} that mentions you ({1}, review ID {2}). Read the review and full context, then respond. If changes were requested, make them, commit, and push.', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
+                && format('A review was submitted on PR #{0} that mentions you ({1}, review ID {2}).', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
               || (github.event.client_payload.kind == 'pull_request_review'
-                && format('A review was submitted on a PR where you previously participated (PR #{0}, {1}, review ID {2}). Read the review and full context. If it requests changes or asks questions, respond appropriately. Exit silently for a plain approval, a review with no actionable content, or one between other participants.', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
+                && format('A review was submitted on a PR where you previously participated (PR #{0}, {1}, review ID {2}).', github.event.client_payload.pr, needs.verify.outputs.url, github.event.client_payload.id))
               || (contains(github.event.comment.body, '@worktrunk-bot')
-                && format('You were mentioned in a comment ({0}). Read the full context and respond. If changes are requested, make them, commit, and push.', github.event.comment.html_url))
-              || format('A user commented on an issue/PR where you previously participated ({0}). Read the full context. Only respond if the comment is directed at you, asks a question you can help with, or requests changes you can make. If the conversation is between other participants, exit silently.', github.event.comment.html_url)
+                && format('You were mentioned in a comment ({0}).', github.event.comment.html_url))
+              || format('A user commented on an issue/PR where you previously participated ({0}).', github.event.comment.html_url)
             }}
 
       - name: Remove the eyes reaction

.github/workflows/tend-nightly.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -26,17 +26,16 @@ jobs:
       actions: read
       issues: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted

.github/workflows/tend-notifications.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -29,12 +29,13 @@ jobs:
       actions: read
       issues: write
     steps:
-      - uses: astral-sh/setup-uv@v10.2.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         id: tend_uv
         env:
           UV_NO_MODIFY_PATH: "1"
         with:
-          version: "0.12.19"
+          version: "0.12.22"
+          checksum: ${{ runner.arch == 'ARM64' && '6f66a14e8239871fb477f9746c941fedfa77e8fe28a8bc7c07e1dc7f53a66712' || 'b9980552309f09c15172b8be828555e375097f16deb459795ce7bfd200380f0b' }}
           enable-cache: false
           ignore-empty-workdir: true
       - name: Check for unread notifications and conflicted PRs
@@ -223,19 +224,18 @@ jobs:
               raise SystemExit(main())
           TEND_PY
 
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         if: steps.check.outputs.count != '0' || steps.check.outputs.conflict_count != '0' || github.event_name == 'workflow_dispatch'
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
         if: steps.check.outputs.count != '0' || steps.check.outputs.conflict_count != '0' || github.event_name == 'workflow_dispatch'
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
         if: steps.check.outputs.count != '0' || steps.check.outputs.conflict_count != '0' || github.event_name == 'workflow_dispatch'
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         if: steps.check.outputs.count != '0' || steps.check.outputs.conflict_count != '0' || github.event_name == 'workflow_dispatch'
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}

.github/workflows/tend-review-runs.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -26,17 +26,16 @@ jobs:
       actions: read
       issues: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted

.github/workflows/tend-review.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -45,16 +45,15 @@ jobs:
       # The runner checkout stays on the PR base tree for `setup:` and
       # local actions' POST chains; the harness moves the agent's view of it to
       # the PR's topology.
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted

.github/workflows/tend-triage.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -38,17 +38,16 @@ jobs:
           TARGET: issues/${{ github.event.issue.number }}
           GITHUB_TOKEN: ${{ secrets.TEND_BOT_TOKEN }}
 
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted

.github/workflows/tend-weekly.yaml

@@ -1,4 +1,4 @@
-# Generated by tend 0.3.5. Regenerate with: uvx tend@latest init
+# Generated by tend 0.3.7. Regenerate with: uvx tend@latest init
 #
 # Do not edit this file directly — it will be overwritten on regeneration.
 # To change this workflow, edit .config/tend.yaml. To change what the agent
@@ -26,17 +26,16 @@ jobs:
       actions: read
       issues: write
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main
           fetch-depth: 0
-          fetch-tags: true
           token: ${{ secrets.TEND_BOT_TOKEN }}
 
       - uses: ./.github/actions/tend-setup
       - run: for t in cargo-insta cargo-nextest pre-commit nu nix; do command -v "$t" >/dev/null || { echo "::error::tend setup is missing $t; see Sandbox toolchain in .github/AGENTS.md"; exit 1; }; done
 
-      - uses: max-sixty/tend/claude@0.3.5
+      - uses: max-sixty/tend/claude@0.3.7
         with:
           github_token: ${{ secrets.TEND_BOT_TOKEN }}
           merge: restricted