Merge branch 'main' into issue-2664-same-repo-shortcut-comment-sender

Author: chmouel

.golangci.yml

@@ -90,6 +90,8 @@ linters:
         path: _test\.go
       - path: pkg/resolve/resolve.go
         text: don't use `init` function
+      - path: pkg/llm/providers/
+        text: don't use `init` function
       - linters:
           - revive
         path: pkg/errors/

.tekton/linter.yaml

@@ -281,7 +281,7 @@ spec:
                   target=x86_64-unknown-linux-gnu
                 fi
                 version=$(curl -H "Authorization: Bearer ${HUB_TOKEN}" -L -s https://api.github.com/repos/zizmorcore/zizmor/releases/latest | python3 -c 'import sys, json; print(json.load(sys.stdin)["tag_name"])')
-                curl -sH "Authorization: Bearer ${HUB_TOKEN}" -L "https://github.com/zizmorcore/zizmor/releases/download/${version}/zizmor-${target}.tar.gz" | tar -xz -C /tmp/ --strip-components=1 -f-
+                curl -sH "Authorization: Bearer ${HUB_TOKEN}" -L "https://github.com/zizmorcore/zizmor/releases/download/${version}/zizmor-${target}.tar.gz" | tar -xz -C /tmp/ -f-
                 /tmp/zizmor .github/workflows/
 
             - name: ruff-lint

config/300-repositories.yaml

@@ -398,8 +398,8 @@ spec:
                                   Model specifies which LLM model to use for this role (optional).
                                   You can specify any model supported by your provider.
                                   If not specified, provider-specific defaults are used:
-                                  - OpenAI: gpt-5-mini
-                                  - Gemini: gemini-2.5-flash-lite
+                                  - OpenAI: gpt-5.4-mini
+                                  - Gemini: gemini-3.1-flash-lite-preview
                                 type: string
                               name:
                                 description: Name is a unique identifier for this analysis role

docs/content/docs/api/settings.md

@@ -264,8 +264,8 @@ Defines the base prompt template that Pipelines-as-Code sends to the LLM.
 {{< param name="roles[].model" type="string" id="param-roles-model" >}}
 Specifies the LLM model for this role. If omitted, Pipelines-as-Code uses provider-specific defaults:
 
-- OpenAI: `gpt-5-mini`
-- Gemini: `gemini-2.5-flash-lite`
+- OpenAI: `gpt-5.4-mini`
+- Gemini: `gemini-3.1-flash-lite-preview`
 {{< /param >}}
 
 {{< param name="roles[].on_cel" type="string" id="param-roles-on-cel" >}}

docs/content/docs/guides/llm-analysis/_index.md

@@ -26,8 +26,8 @@ Additional output destinations (`check-run` and `annotation`) and structured JSO
 
 Pipelines-as-Code supports two LLM providers:
 
-- **OpenAI** -- Default model: `gpt-5-mini`
-- **Google Gemini** -- Default model: `gemini-2.5-flash-lite`
+- **OpenAI** -- Default model: `gpt-5.4-mini`
+- **Google Gemini** -- Default model: `gemini-3.1-flash-lite-preview`
 
 You can specify any model your chosen provider supports. See [Model Selection]({{< relref "/docs/guides/llm-analysis/model-and-triggers#model-selection" >}}) for guidance on choosing the right model.
 
@@ -53,7 +53,7 @@ spec:
         key: "token"
       roles:
         - name: "failure-analysis"
-          model: "gpt-5-mini"  # Optional: specify model (uses provider default if omitted)
+          model: "gpt-5.4-mini"  # Optional: specify model (uses provider default if omitted)
           prompt: |
             You are a DevOps expert. Analyze this failed pipeline and:
             1. Identify the root cause
@@ -129,3 +129,4 @@ When you set `commit_content: true`, Pipelines-as-Code includes the following fi
 - Pipelines-as-Code **intentionally excludes email addresses** from the commit context to protect personally identifiable information (PII) when sending data to external LLM providers.
 - Fields appear only if your Git provider makes them available. Some providers supply limited information (for example, Bitbucket Cloud provides only the author name).
 - Author and committer may be the same person or different (for example, when using `git commit --amend` or rebasing).
+asing).

docs/content/docs/guides/llm-analysis/model-and-triggers.md

@@ -9,8 +9,8 @@ This page explains how to choose the right LLM model for each analysis role and
 
 Each analysis role can specify a different model. Choosing the right model lets you balance cost against analysis depth. If you do not specify a model, Pipelines-as-Code uses provider-specific defaults:
 
-- **OpenAI**: `gpt-5-mini`
-- **Gemini**: `gemini-2.5-flash-lite`
+- **OpenAI**: `gpt-5.4-mini`
+- **Gemini**: `gemini-3.1-flash-lite-preview`
 
 ### Specifying Models
 
@@ -37,7 +37,7 @@ settings:
         model: "gpt-5"
         prompt: "Analyze security failures..."
 
-      # Use default model (gpt-5-mini) for general analysis
+      # Use default model (gpt-5.4-mini) for general analysis
       - name: "general-failure"
         # No model specified - uses provider default
         prompt: "Analyze this failure..."

pkg/apis/pipelinesascode/v1alpha1/types_llm.go

@@ -63,8 +63,8 @@ type AnalysisRole struct {
 	// Model specifies which LLM model to use for this role (optional).
 	// You can specify any model supported by your provider.
 	// If not specified, provider-specific defaults are used:
-	// - OpenAI: gpt-5-mini
-	// - Gemini: gemini-2.5-flash-lite
+	// - OpenAI: gpt-5.4-mini
+	// - Gemini: gemini-3.1-flash-lite-preview
 	// +optional
 	Model string `json:"model,omitempty"`