This release includes 1 security fix for security teams reviewing exposed deployments.
Published 22d
Developer Productivity
✓ No known CVEs patched
This release patches 1 known CVE
Topics
code-review
codereview
coding-assistant
devtools
gpt-4
openai
+2 more
pull-request
pull-requests
Affected surfaces
auth
Summary
AI summaryBroad release touches 🚀 Features, 🐛 Bug Fixes, ✨ Highlights, and feat.
Full changelog
✨ Highlights
- 📄 Repo context in prompts — PR-Agent now feeds
AGENTS.mdto/review,/describe, and/improveby default, so the AI picks up your project conventions out of the box. (#2387) - 🧩 Agent Skills (
SKILL.md) — package reusable, domain-specific guidance and expose it to the AI by pointing[skills] pathsat it. (#2385) - 🏢 Organization-level settings — manage configuration for a whole org from a single
pr-agent-settingsrepo, on GitHub, GitLab, and Bitbucket. (#2504) - 🛡️ Restricted mode — run with reduced GitHub permissions, skipping actions that require elevated access. (#2491)
- ☑️ GitHub Checks output — publish review/describe/improve results as GitHub Checks instead of PR comments. (#2492)
[!NOTE]
Upgrade notes
AGENTS.mdis now included in AI prompts by default (#2387) — setrepo_context_files = []to opt out.
What's Changed
🚀 Features
- Add newly released Claude Sonnet 5 model support by @PeterDaveHello in #2486
- feat: allow overriding Claude extended-thinking models by @naorpeled in #2503
- feat: support GitHub organization-level global settings by @naorpeled in #2504
- feat: include per-repo context files (AGENTS.md, CLAUDE.md, etc.) as AI prompt context by @avidspartan1 in #2387
- feat: add restricted mode for reduced GitHub permissions (#2279) by @utsab345 in #2491
- feat: support GitHub Checks API as output mechanism (#1400) by @utsab345 in #2492
- feat(skills): agent-skills (SKILL.md) format support for review/improve/describe by @IsmaelMartinez in #2385
- feat(ask): add extra_instructions support for /ask (#2473) by @rosspeili in #2482
🐛 Bug Fixes
- fix(azure-devops): implement incremental review (-i) support (#2379) by @agonzalesipcoop-cmyk in #2381
- fix(security): do not log merged repo settings dict (may contain secrets) by @naorpeled in #2505
- fix(litellm): detect GPT-5 family when model has openai/ or azure/ prefix by @sizickp in #2401
- fix(gitea): tolerate binary file payloads (#2380) by @raywcm in #2440
- fix: /answer command sends swapped question/answer strings to the LLM by @victorljii in #2495
- fix(github_action): handle synchronize event for push trigger (#2455) by @utsab345 in #2490
- fix: resolve google-cloud-storage dependency conflict on Python 3.13+ (#2480) by @utsab345 in #2485
- fix(bitbucket-server): log missing .pr_agent.toml as info, not error by @naorpeled in #2497
Full Changelog: https://github.com/The-PR-Agent/pr-agent/compare/v0.38.0...v0.39.0
Security Fixes
- fix(security): do not log merged repo settings dict (may contain secrets)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About The-PR-Agent/pr-agent
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]