feat(auth-sidecar): inject AUTH_OIDC_COOKIE_DOMAIN from annotation

Empty when the annotation is unset = host-only = unchanged for every app. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-29 13:04:50 +02:00
4 changed files with 3 additions and 14 deletions
@@ -23,7 +23,7 @@ jobs:
      REVIEW__INLINE_COMMENT_FALLBACK: "false"
      # LLM configuration
      LLM__PROVIDER: CLAUDE
-      LLM__META__MODEL: claude-3-opus
+      LLM__META__MODEL: claude-sonnet-4-20250514
      LLM__META__MAX_TOKENS: "4096"
      LLM__HTTP_CLIENT__API_URL: https://api.anthropic.com
      LLM__HTTP_CLIENT__API_TOKEN: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -36,9 +36,6 @@ jobs:
        fetch-depth: 0
        token: ${{ secrets.AI_REVIEW_TOKEN }}

-    - name: Update submodules to remote
-      run: git submodule update --remote --merge
-
    - name: Run inline review
      uses: docker://nikitafilonov/ai-review:v0.64.0
      with:
@@ -1,5 +1,3 @@
 [submodule "shared-prompts"]
 	path = shared-prompts
 	url = https://git.forteapps.net/Forte/ai-review-prompts.git
-	branch = main
-
@@ -77,12 +77,6 @@ spec:
              mc rm --recursive --force --older-than 30d "obj/${S3_BUCKET}/_pgbackups/" || true
              echo "backup retention pass complete"
            env:
-            # mc writes its config under $MC_CONFIG_DIR; point it at the shared
-            # emptyDir (writable by uid 65532 via fsGroup). Without this it tries
-            # to mkdir /.mc on the read-only-to-nonroot root fs -> "mkdir /.mc:
-            # permission denied" and every run fails before uploading.
-            - name: MC_CONFIG_DIR
-              value: "/work/.mc"
            - name: S3_ENDPOINT
              valueFrom:
                secretKeyRef: { name: forte-drop-secrets, key: S3_ENDPOINT }
@@ -1326,7 +1326,7 @@ storage:
 - Shared configuration and prompts live in the `shared-prompts` Git submodule (→ `Forte/ai-review-prompts`)
 - Review mode: `ONLY_ADDED_WITH_CONTEXT` — reviews only new/changed lines plus surrounding context (token-efficient)
 - Agent mode: disabled (one-shot review, no multi-turn reasoning)
- LLM: Claude Sonnet (`claude-3-opus`)
+- LLM: Claude Sonnet (`claude-sonnet-4-20250514`)

 **Shared Prompts Structure** (submodule: `Forte/ai-review-prompts`):
 ```
@@ -1344,7 +1344,7 @@ shared-prompts/
 ```yaml
 llm:
  provider: CLAUDE
-  model: claude-3-opus
+  model: claude-sonnet-4-20250514
 vcs:
  provider: GITEA
 review: