--generate-notes uses the commit graph, not semver ordering (#61)

Signed-off-by: Derek Misler <derek.misler@docker.com>

Author: derekmisler

.github/workflows/release.yml

@@ -75,7 +75,8 @@ jobs:
           done
 
           echo "version=$NEW_VERSION" >> $GITHUB_OUTPUT
-          echo "New version: $NEW_VERSION"
+          echo "previous=${LATEST_TAG}" >> $GITHUB_OUTPUT
+          echo "New version: $NEW_VERSION (previous: ${LATEST_TAG:-none})"
 
       # CI cannot push commits to main (branch protection). Instead, we create
       # a detached release commit with pinned refs, reachable only via tags.
@@ -128,8 +129,14 @@ jobs:
       - name: Create GitHub Release
         env:
           VERSION: ${{ steps.version.outputs.version }}
+          PREVIOUS: ${{ steps.version.outputs.previous }}
           GH_TOKEN: ${{ secrets.RELEASE_TOKEN }}
-        run: gh release create "$VERSION" --generate-notes --latest
+        run: |
+          ARGS=(--generate-notes --latest)
+          if [ -n "$PREVIOUS" ]; then
+            ARGS+=(--notes-start-tag "$PREVIOUS")
+          fi
+          gh release create "$VERSION" "${ARGS[@]}"
 
       - name: Update latest tag
         env:

.github/workflows/review-pr.yml

@@ -194,7 +194,7 @@ jobs:
   manual-review:
     if: |
       github.event.issue.pull_request &&
-      contains(github.event.comment.body, '/review') &&
+      startsWith(github.event.comment.body, '/review') &&
       (github.event.comment.user.type != 'Bot' || github.event.comment.user.login == 'docker-agent[bot]')
     runs-on: ubuntu-latest
     env:

.github/workflows/self-review-pr.yml

@@ -105,7 +105,7 @@ jobs:
   # Triggers when someone comments /review on a PR
   # ==========================================================================
   manual-review:
-    if: github.event.issue.pull_request && contains(github.event.comment.body, '/review')
+    if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/review')
     runs-on: ubuntu-latest
     env:
       HAS_APP_SECRETS: ${{ secrets.CAGENT_REVIEWER_APP_ID != '' }}

action.yml

@@ -475,7 +475,6 @@ runs:
           exit 1
         fi
         echo "verbose-log-file=$VERBOSE_LOG_FILE" >> $GITHUB_OUTPUT
-        echo "verbose-log-timestamp=$(date +%s%N)" >> $GITHUB_OUTPUT
         echo "Verbose log file: $VERBOSE_LOG_FILE"
 
         # Build command arguments array (SECURE: no eval!)
@@ -702,7 +701,7 @@ runs:
       if: always() && steps.run-agent.outputs.verbose-log-file != ''
       uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
-        name: cagent-verbose-log-${{ github.run_id }}-${{ github.run_attempt }}-${{ steps.run-agent.outputs.verbose-log-timestamp }}
+        name: cagent-verbose-log-${{ github.run_id }}-${{ github.run_attempt }}-${{ github.job }}
         path: ${{ steps.run-agent.outputs.verbose-log-file }}
         retention-days: 14
         if-no-files-found: ignore

review-pr/README.md

@@ -125,7 +125,7 @@ permissions:
 
 jobs:
   review:
-    if: github.event.issue.pull_request && contains(github.event.comment.body, '/review')
+    if: github.event.issue.pull_request && startsWith(github.event.comment.body, '/review')
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4