Update Managed Files

[ChiaAutomation]

Note

Medium Risk
Adds a new CI workflow that downloads and executes an external installer and posts automated comments using a repository secret; failures or mis-scoping could affect CI reliability and comment noise, and the remote install step increases supply-chain exposure.

Overview
Introduces a new GitHub Actions workflow, dependabot-cursor-review.yml, that triggers on Dependabot-authored PRs (or via manual workflow_dispatch) to generate an automated dependency-impact review.

The job parses the Dependabot PR body/title for upstream repo, release notes, commit info, and version metadata; checks out both the PR head and the upstream dependency repo; greps for local usage; runs Cursor CLI (agent) using secrets.CURSOR_API_KEY; and creates/updates a marked PR comment with the analysis output.

^{Written by Cursor Bugbot for commit b20caf6. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: Ripgrep not installed on runner, usage hints silently empty
  • Replaced the unavailable rg command with portable recursive grep so local usage hints are collected on default GitHub Ubuntu runners.

Or push these changes by commenting:

@cursor push 43e6240dd1

Preview (43e6240dd1)

diff --git a/.github/workflows/dependabot-cursor-review.yml b/.github/workflows/dependabot-cursor-review.yml
--- a/.github/workflows/dependabot-cursor-review.yml
+++ b/.github/workflows/dependabot-cursor-review.yml
@@ -222,7 +222,7 @@
             {
               echo "Search pattern: $PACKAGE_NAME"
               echo
-              rg -n --fixed-strings --hidden --glob '!.git' --glob '!node_modules' --glob '!.upstream-dependency/**' -- "$PACKAGE_NAME" . || true
+              grep -R -n --fixed-strings --exclude-dir=.git --exclude-dir=node_modules --exclude-dir=.upstream-dependency -- "$PACKAGE_NAME" . || true
             } > package_usage.txt
           fi

_{This Bugbot Autofix run was free. To enable autofix for future PRs, go to the Cursor dashboard.}