From 2d9b7db386c17ade4a50f73d59d7f80aee7eeefd Mon Sep 17 00:00:00 2001 From: Chirag Aggarwal Date: Sat, 3 Oct 2026 08:23:58 +0100 Subject: [PATCH] ci: stop the review CLI from updating itself mid-run The ocr launcher spawns a detached `npm i -g @alibaba-group/open-code-review@latest` whenever a newer release exists. Since 1.12.10 and 1.12.11 shipped, that reinstall races the action's own ocr calls, so the review step fails with "binary not found" or "Cannot find module /usr/local/bin/ocr". OCR_NO_UPDATE turns the check off and keeps the CLI on the pinned 1.12.9. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/review.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml index 7d6ba32e..c060a474 100644 --- a/.github/workflows/review.yml +++ b/.github/workflows/review.yml @@ -105,6 +105,12 @@ jobs: # request, which is what makes pull_request_target safe here. - id: review uses: alibaba/open-code-review@bccbc15f785269400735d5255540c231e6c02b6d # ratchet:alibaba/open-code-review@v1.12.9 + env: + # The ocr launcher otherwise runs a detached `npm i -g ...@latest` + # whenever a newer release exists, which reinstalls the CLI while + # the action is still calling it (MODULE_NOT_FOUND mid-step), and + # would move it off the pinned ocr_version below. + OCR_NO_UPDATE: '1' with: llm_url: ${{ secrets.OCR_LLM_URL }} llm_auth_token: ${{ secrets.OCR_LLM_AUTH_TOKEN }}