chore(deps): update fro-bot/agent to v0.107.0

[mrbro-bot]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
fro-bot/agent	action	minor	v0.106.2 → v0.107.0

---

Release Notes

fro-bot/agent (fro-bot/agent)

v0.107.0

Compare Source

What's new

Authorized mentions on a PR can now submit PR reviews — approve, request changes, or re-review — rather than being limited to posting a comment. Previously, when a @fro-bot mention triggered a run on a PR, the agent could reach a review conclusion but the response validator would reject it: "verdict" is only valid for surface "pr-review", got "pr-comment". The turn was consumed, nothing was posted, and on repos where branch protection required Fro Bot's approval there was no in-band way to move a CHANGES_REQUESTED review back to APPROVED.

The fix introduces a pr-review-permitted surface distinct from the required-verdict pr-review surface used for pull_request triggers. A mention on a PR routes to this surface: if the agent produces a verdict the run submits a review; if it produces only prose the run posts a comment. The existing authorization gate — which already restricts mention runs to non-bot OWNER/MEMBER/COLLABORATOR authors — is unchanged, so no new permission machinery was added. The fork/self APPROVE guard and the head-SHA re-check are inherited by mention-initiated reviews.

As a structural hardening, every response-surface consumer now indexes a shared RESPONSE_SURFACE_POLICIES table checked with a satisfies Record<ResponseSurface, …> constraint, so an unhandled surface fails compilation rather than silently falling through to comment delivery. Additionally, a stray verdict on a comment-only surface now degrades gracefully — the frontmatter is dropped and the prose is posted with a warning — rather than discarding the entire agent turn. A new delivery-kind action output (review / comment / none) lets callers observe which path a run actually took. #​1507

Full changelog

0.107.0 (2026-08-31)

Features

• agent: let authorized mentions submit PR reviews (#​1507) (5e527f7), references #​1504

Documentation

• wiki: update project wiki (#​1509) (d9a88de)

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.