[dadadave80]

The review job fails on PRs with a large diff (for example #925, which deletes package-lock.json): /usr/bin/curl: Argument list too long. The whole request body was passed to curl as one command-line argument, which overflows the kernel's per-argument limit (128 KB).

• Write the JSON payload to /tmp/payload.json and send it with --data-binary @file.
• Cap the diff sent to the model at 200 KB as well as 3000 lines, since lockfile churn is noise for the reviewer.

auto-review.yml runs on pull_request_target, so it uses the workflow from main. #925's review check will pass after this merges and the job is re-run.

This PR changes a workflow, so the supply-chain review gate needs the supply-chain-reviewed label.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
heliobond	Ready	Preview	Oct 22, 2026 2:54pm UTC

[github-actions]

Thanks for your contribution! ❤️ It looks like this PR isn't linked to an issue yet. Please add Fixes #123 (or Closes #123) to the PR description, or link it via the Development sidebar on the right. Once linked, a maintainer will review your changes. No stress — we'll help fix things up if needed!