[renovate]

This PR contains the following updates:

Package	Type	Update	Change
nsheaps/agents (changelog)	workflow	digest	c431513 → b770c57
nsheaps/ai-mktpl (changelog)	action	digest	3b7aed6 → 1c6208f

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • "after 10am and before 4pm every weekday"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Plugin Version Preview

Preview only — plugin versions and marketplace.json are bumped automatically on merge to main, not in this PR. Manual bumps to higher versions are preserved. See the file annotations for the pending change on each plugin.json.

Plugin	Base	Current	Action
review-utils	0.2.15	0.2.16	Auto-bumped

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

Dismissed: new commits since last approval require re-review.

[henry-nsheaps]

✅ Approve — routine Renovate digest bump, incremental delta is a litellm dep bump + release automation; pinned callee content byte-identical for both pins

• ✅ Both new SHAs resolve to real commits in their source repos (nsheaps/* org, trusted)
• ✅ Full 40-char SHA pins + # main trailing comments preserved — convention intact
• ✅ Pinned callee content is byte-identical at both ends for both entries (verified via compare file lists)
• ✅ Incremental delta since prior approval is 2 commits (litellm dep bump + release-automation bump), none touch pinned callee paths

Click to expand for full details

What this PR changes

Two SHA pin bumps on branch renovate/nsheaps-squink-github-actions (HEAD 3bfffd6c):

1. .github/workflows/dispatch-review.yaml L68 — self-ref to nsheaps/agents/.github/workflows/review-dispatch.yaml: c431513 → b770c57
2. plugins/claude-code/review-utils/actions/run-agent/action.yaml L239 — nsheaps/ai-mktpl/.github/actions/interpolate-prompt: 3b7aed6 → 1c6208f

Both already pin by full SHA with a # main trailing comment, matching the strategy documented inline at dispatch-review.yaml ~L61 ("pin by SHA, track main").

SHA verification

Pin	Target commit	Date	Nature
b770c57 (new agents self-ref)	chore: release v0.3.169 [skip ci]	2026-10-20	Release automation
c431513 (old agents self-ref)	Fix release workflows closing unrelated formula PRs (#374)	2026-10-15	Baseline
1c6208f (new ai-mktpl)	chore: mise run lint	2026-10-19	Automation lint
3b7aed6 (old ai-mktpl)	chore: mise run lint	2026-10-12	Baseline

Callee-content invariance (the key check)

Neither bump changes the actual code the pin executes:

• agents self-ref c431513 → b770c57 — 3-commit delta touching only .github/workflows/dispatch-review.yaml, CHANGELOG.md, mise.toml. The pin here points to review-dispatch.yaml (a different file), which is byte-identical at both ends.
• ai-mktpl 3b7aed6 → 1c6208f — 21-commit delta spanning 12 files ({.claude/skills/nsheaps-claude-marketplaces/SKILL.md, .github/workflows/cd.yaml, .github/workflows/dispatch-review.yaml, .github/workflows/sync-mirror.yaml, CLAUDE.md, docs/mirror-sync.md, mise.toml, mise/tasks/sync-mirror, mise/tests/sync-mirror.test.sh, package.json, plugins/mise/README.md, yarn.lock}) — none under .github/actions/interpolate-prompt/, so the pinned composite action is byte-identical.

Delta vs. previously-dismissed reviews

Most recent prior approval targeted HEAD 59dc98a1 with agents self-ref 2319800 and ai-mktpl 1c6208f. The current PR shifts those forward by:

• agents self-ref: 2319800 → b770c57 — 2 additional commits: 689edc2 (chore(deps): update dependency pipx:litellm to v1.102.0 (#377) — mise.toml only) and b770c57 (release automation — CHANGELOG.md only). Neither touches review-dispatch.yaml.
• ai-mktpl: unchanged (1c6208f).

Nothing in the incremental delta reopens any question that wasn't already resolved in prior approvals.

How this was assessed

• Fetched both file patches via GitHub API; confirmed each edit is a single-line SHA replacement with no incidental changes.
• Resolved both new SHAs (b770c57, 1c6208f) against their source repos (gh api repos/.../commits/<sha>) to confirm they exist and read their metadata.
• Ran compare for both pin ranges (old...new) end-to-end and enumerated the touched files to confirm the pinned callee paths are unchanged across the entire bump.
• Compared the incremental delta against the previously-approved HEAD (2319800 → b770c57) to confirm the only new content is a benign litellm dep bump plus release-automation CHANGELOG update.
• Minimized the remaining non-minimized prior review; the other five were already minimized.

Risk assessment

Minimal. Both pins are full-SHA, both targets are from the trusted nsheaps/* org, the diff is 2 lines with no incidental edits, and the pinned callee content doesn't actually change between old and new SHAs for either entry.

Follow-ups:

• None.

---

References

• Workflow run: https://github.com/nsheaps/.ai-agent-henry/actions/runs/39518732493
• ai-mktpl range: nsheaps/ai-mktpl@3b7aed6...1c6208f
• agents self-ref range: c431513...b770c57
• agents self-ref incremental (prev approved HEAD → new): 2319800...b770c57