From a461da14dde5832d28dbc139a47d2b39db79f1d1 Mon Sep 17 00:00:00 2001 From: Alex Bit Date: Fri, 30 Oct 2026 11:34:26 -0700 Subject: [PATCH 1/5] Add react-codemod to Codex review pin sync matrix. Keep /codex-review command workflow pins updated alongside the other managed consumer repositories. Co-authored-by: Cursor --- .github/workflows/sync-action-pins.yml | 3 +++ README.md | 1 + 2 files changed, 4 insertions(+) diff --git a/.github/workflows/sync-action-pins.yml b/.github/workflows/sync-action-pins.yml index ce199fd..57a3904 100644 --- a/.github/workflows/sync-action-pins.yml +++ b/.github/workflows/sync-action-pins.yml @@ -27,6 +27,9 @@ jobs: - repo: codemod/codemod-app repo_name: codemod-app command_workflow_template: examples/codex-review-command.yml + - repo: codemod/react-codemod + repo_name: react-codemod + command_workflow_template: examples/codex-review-command.yml permissions: contents: read steps: diff --git a/README.md b/README.md index 40190a4..d3e59b9 100644 --- a/README.md +++ b/README.md @@ -185,6 +185,7 @@ This repository includes `.github/workflows/sync-action-pins.yml` to keep the Co - `codemod/arc-codemods` - `codemod/codemod` - `codemod/codemod-app` +- `codemod/react-codemod` It runs on pushes to `main` and on manual dispatch. For each target repository, it: From c0853f558f180b9e7e9a3e528758c50b9e006405 Mon Sep 17 00:00:00 2001 From: Alex Bit Date: Fri, 30 Oct 2026 11:53:11 -0700 Subject: [PATCH 2/5] Rename Azure OpenAI endpoint secret to AZURE_OPENAI_ENDPOINT. Keep example workflows and docs aligned with the shorter secret name. Co-authored-by: Cursor --- .github/workflows/fork-review.yml | 4 ++-- .github/workflows/review.yml | 4 ++-- README.md | 4 ++-- action.yml | 4 ++-- examples/codex-review-command-arc-codemods.yml | 4 ++-- examples/codex-review-command.yml | 4 ++-- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/fork-review.yml b/.github/workflows/fork-review.yml index 263de21..443a726 100644 --- a/.github/workflows/fork-review.yml +++ b/.github/workflows/fork-review.yml @@ -152,7 +152,7 @@ jobs: shell: bash env: AZURE_OPENAI_API_KEY: ${{ secrets.azure_openai_api_key }} - AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} + AZURE_OPENAI_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} CODEX_VERSION: ${{ inputs.codex_version }} run: | @@ -164,7 +164,7 @@ jobs: missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("secret azure_openai_api_key") - [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml index 3ce08eb..c077ed4 100644 --- a/.github/workflows/review.yml +++ b/.github/workflows/review.yml @@ -158,13 +158,13 @@ jobs: - name: Validate Azure OpenAI configuration env: AZURE_OPENAI_API_KEY: ${{ secrets.azure_openai_api_key }} - AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} + AZURE_OPENAI_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} run: | missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("secret azure_openai_api_key") - [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/README.md b/README.md index d3e59b9..16739e4 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ Composite GitHub Action for running [`openai/codex-action`](https://github.com/o In the calling repository, configure: - Secret: `AZURE_OPENAI_API_KEY` -- Secret: `AZURE_OPENAI_RESPONSES_ENDPOINT` +- Secret: `AZURE_OPENAI_ENDPOINT` - A model/deployment name to pass as `codex_model` For Azure, the endpoint must be the full Responses API URL, for example: @@ -70,7 +70,7 @@ jobs: pr_number: ${{ github.event.pull_request.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} node_version: "24" pnpm_version: "10.19.0" install_command: pnpm install --frozen-lockfile diff --git a/action.yml b/action.yml index daa5e0b..6050d9c 100644 --- a/action.yml +++ b/action.yml @@ -209,13 +209,13 @@ runs: shell: bash env: AZURE_OPENAI_API_KEY: ${{ inputs.azure_openai_api_key }} - AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ inputs.azure_openai_responses_endpoint }} + AZURE_OPENAI_ENDPOINT: ${{ inputs.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} run: | missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("input azure_openai_api_key") - [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("input azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("input azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/examples/codex-review-command-arc-codemods.yml b/examples/codex-review-command-arc-codemods.yml index a8c9bd9..f1b9fee 100644 --- a/examples/codex-review-command-arc-codemods.yml +++ b/examples/codex-review-command-arc-codemods.yml @@ -104,7 +104,7 @@ jobs: pr_number: ${{ github.event.issue.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} node_version: "24" pnpm_version: "10.15.0" install_command: pnpm install --no-frozen-lockfile --ignore-scripts @@ -149,4 +149,4 @@ jobs: Ignore style-only nits and do not review intentionally vulnerable input fixtures as if they were production code. secrets: azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} diff --git a/examples/codex-review-command.yml b/examples/codex-review-command.yml index 08750d7..7689513 100644 --- a/examples/codex-review-command.yml +++ b/examples/codex-review-command.yml @@ -104,7 +104,7 @@ jobs: pr_number: ${{ github.event.issue.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} node_version: "24" # Read pnpm from the reviewed checkout's packageManager field. pnpm_version: "" @@ -146,4 +146,4 @@ jobs: Follow repository-specific review guidance from the trusted base checkout when present. secrets: azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} From a3de7ad0fcc99ba203aa43a2b8b34515a96fc446 Mon Sep 17 00:00:00 2001 From: Alex Bit Date: Fri, 30 Oct 2026 11:53:48 -0700 Subject: [PATCH 3/5] Update fork-review test for AZURE_OPENAI_ENDPOINT rename. --- tests/fork-review.test.cjs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fork-review.test.cjs b/tests/fork-review.test.cjs index 010f8a0..7a9487e 100644 --- a/tests/fork-review.test.cjs +++ b/tests/fork-review.test.cjs @@ -191,7 +191,7 @@ test('runtime version validation accepts only exact stable versions', () => { for (const version of ['0.160.0', '1.2.3', '', 'latest', '^0.160.0', '0.160.0 || touch marker']) { const result = spawnSync('bash', ['-c', validation], { encoding: 'utf8', env: { PATH: process.env.PATH, CODEX_VERSION: version, - AZURE_OPENAI_API_KEY: 'fake', AZURE_OPENAI_RESPONSES_ENDPOINT: 'fake', AZURE_OPENAI_CODEX_MODEL: 'fake', + AZURE_OPENAI_API_KEY: 'fake', AZURE_OPENAI_ENDPOINT: 'fake', AZURE_OPENAI_CODEX_MODEL: 'fake', } }); assert.equal(result.status === 0, ['0.160.0', '1.2.3'].includes(version), version); } From c2cb6646b0d9f1250ac0d9f39034cc44d56d7a35 Mon Sep 17 00:00:00 2001 From: Alex Bit Date: Fri, 30 Oct 2026 12:39:32 -0700 Subject: [PATCH 4/5] Revert "Update fork-review test for AZURE_OPENAI_ENDPOINT rename." This reverts commit a3de7ad0fcc99ba203aa43a2b8b34515a96fc446. --- tests/fork-review.test.cjs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tests/fork-review.test.cjs b/tests/fork-review.test.cjs index 7a9487e..010f8a0 100644 --- a/tests/fork-review.test.cjs +++ b/tests/fork-review.test.cjs @@ -191,7 +191,7 @@ test('runtime version validation accepts only exact stable versions', () => { for (const version of ['0.160.0', '1.2.3', '', 'latest', '^0.160.0', '0.160.0 || touch marker']) { const result = spawnSync('bash', ['-c', validation], { encoding: 'utf8', env: { PATH: process.env.PATH, CODEX_VERSION: version, - AZURE_OPENAI_API_KEY: 'fake', AZURE_OPENAI_ENDPOINT: 'fake', AZURE_OPENAI_CODEX_MODEL: 'fake', + AZURE_OPENAI_API_KEY: 'fake', AZURE_OPENAI_RESPONSES_ENDPOINT: 'fake', AZURE_OPENAI_CODEX_MODEL: 'fake', } }); assert.equal(result.status === 0, ['0.160.0', '1.2.3'].includes(version), version); } From 053d2baf6c4e10d79433459ec7e8634fc81f9c9b Mon Sep 17 00:00:00 2001 From: Alex Bit Date: Fri, 30 Oct 2026 12:39:32 -0700 Subject: [PATCH 5/5] Revert "Rename Azure OpenAI endpoint secret to AZURE_OPENAI_ENDPOINT." This reverts commit c0853f558f180b9e7e9a3e528758c50b9e006405. --- .github/workflows/fork-review.yml | 4 ++-- .github/workflows/review.yml | 4 ++-- README.md | 4 ++-- action.yml | 4 ++-- examples/codex-review-command-arc-codemods.yml | 4 ++-- examples/codex-review-command.yml | 4 ++-- 6 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/fork-review.yml b/.github/workflows/fork-review.yml index 443a726..263de21 100644 --- a/.github/workflows/fork-review.yml +++ b/.github/workflows/fork-review.yml @@ -152,7 +152,7 @@ jobs: shell: bash env: AZURE_OPENAI_API_KEY: ${{ secrets.azure_openai_api_key }} - AZURE_OPENAI_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} + AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} CODEX_VERSION: ${{ inputs.codex_version }} run: | @@ -164,7 +164,7 @@ jobs: missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("secret azure_openai_api_key") - [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/.github/workflows/review.yml b/.github/workflows/review.yml index c077ed4..3ce08eb 100644 --- a/.github/workflows/review.yml +++ b/.github/workflows/review.yml @@ -158,13 +158,13 @@ jobs: - name: Validate Azure OpenAI configuration env: AZURE_OPENAI_API_KEY: ${{ secrets.azure_openai_api_key }} - AZURE_OPENAI_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} + AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ secrets.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} run: | missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("secret azure_openai_api_key") - [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("secret azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/README.md b/README.md index 16739e4..d3e59b9 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,7 @@ Composite GitHub Action for running [`openai/codex-action`](https://github.com/o In the calling repository, configure: - Secret: `AZURE_OPENAI_API_KEY` -- Secret: `AZURE_OPENAI_ENDPOINT` +- Secret: `AZURE_OPENAI_RESPONSES_ENDPOINT` - A model/deployment name to pass as `codex_model` For Azure, the endpoint must be the full Responses API URL, for example: @@ -70,7 +70,7 @@ jobs: pr_number: ${{ github.event.pull_request.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} node_version: "24" pnpm_version: "10.19.0" install_command: pnpm install --frozen-lockfile diff --git a/action.yml b/action.yml index 6050d9c..daa5e0b 100644 --- a/action.yml +++ b/action.yml @@ -209,13 +209,13 @@ runs: shell: bash env: AZURE_OPENAI_API_KEY: ${{ inputs.azure_openai_api_key }} - AZURE_OPENAI_ENDPOINT: ${{ inputs.azure_openai_responses_endpoint }} + AZURE_OPENAI_RESPONSES_ENDPOINT: ${{ inputs.azure_openai_responses_endpoint }} AZURE_OPENAI_CODEX_MODEL: ${{ inputs.codex_model }} run: | missing=() [ -n "$AZURE_OPENAI_API_KEY" ] || missing+=("input azure_openai_api_key") - [ -n "$AZURE_OPENAI_ENDPOINT" ] || missing+=("input azure_openai_responses_endpoint") + [ -n "$AZURE_OPENAI_RESPONSES_ENDPOINT" ] || missing+=("input azure_openai_responses_endpoint") [ -n "$AZURE_OPENAI_CODEX_MODEL" ] || missing+=("input codex_model") if [ ${#missing[@]} -gt 0 ]; then diff --git a/examples/codex-review-command-arc-codemods.yml b/examples/codex-review-command-arc-codemods.yml index f1b9fee..a8c9bd9 100644 --- a/examples/codex-review-command-arc-codemods.yml +++ b/examples/codex-review-command-arc-codemods.yml @@ -104,7 +104,7 @@ jobs: pr_number: ${{ github.event.issue.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} node_version: "24" pnpm_version: "10.15.0" install_command: pnpm install --no-frozen-lockfile --ignore-scripts @@ -149,4 +149,4 @@ jobs: Ignore style-only nits and do not review intentionally vulnerable input fixtures as if they were production code. secrets: azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} diff --git a/examples/codex-review-command.yml b/examples/codex-review-command.yml index 7689513..08750d7 100644 --- a/examples/codex-review-command.yml +++ b/examples/codex-review-command.yml @@ -104,7 +104,7 @@ jobs: pr_number: ${{ github.event.issue.number }} codex_model: ${{ vars.AZURE_OPENAI_CODEX_MODEL }} azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }} node_version: "24" # Read pnpm from the reviewed checkout's packageManager field. pnpm_version: "" @@ -146,4 +146,4 @@ jobs: Follow repository-specific review guidance from the trusted base checkout when present. secrets: azure_openai_api_key: ${{ secrets.AZURE_OPENAI_API_KEY }} - azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_ENDPOINT }} + azure_openai_responses_endpoint: ${{ secrets.AZURE_OPENAI_RESPONSES_ENDPOINT }}