Skip to content

Conversation

@kvaps
Copy link
Member

@kvaps kvaps commented Dec 25, 2025

Signed-off-by: Andrei Kvapil [email protected]

Summary by CodeRabbit

  • New Features

    • Added SHA-256 checksum verification to the installation script for enhanced security.
  • Documentation

    • Updated all project references and installation documentation to reflect the new project name.
  • Chores

    • Modified release workflow to trigger only on version tag pushes, removing pull request triggers.

✏️ Tip: You can customize this high-level summary in your review settings.

@coderabbitai
Copy link

coderabbitai bot commented Dec 25, 2025

📝 Walkthrough

Walkthrough

This pull request renames the project from cozypkg to cozyhr across configuration, module declaration, CLI identifiers, documentation, and installation scripts. The install script is enhanced with SHA-256 checksum verification for downloaded artifacts before extraction.

Changes

Cohort / File(s) Summary
Release Workflow
.github/workflows/release.yml
Removes the pull_request trigger, preserving only the push trigger for tag-based releases matching the v*.*.* pattern.
Module & CLI Updates
go.mod, main.go
Updates module path to github.com/cozystack/cozyhr; renames CLI identifiers, help text, annotation keys, and version metadata from cozypkg to cozyhr.
Installation Script
hack/install.sh
Renames all cozypkg references to cozyhr; introduces checksum verification workflow: downloads cozyhr-checksums.txt, extracts and validates SHA-256 of the tarball, and aborts on mismatch.
Documentation
README.md
Updates titles, installation examples, URLs, object names, and usage references from cozypkg to cozyhr.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰 From cozypkg to cozyhr we leap with glee,
A rename across the whole family tree!
With checksums now guarding each download's way,
Our install is safer each blessed day! ✓

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The pull request title accurately describes the main change across all modified files—renaming the project from cozypkg to cozyhr throughout the codebase, documentation, and configuration.
Docstring Coverage ✅ Passed Docstring coverage is 86.67% which is sufficient. The required threshold is 80.00%.
✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch cozyhr

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@gemini-code-assist
Copy link

Summary of Changes

Hello @kvaps, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on a comprehensive rebranding effort, changing the project's name from cozypkg to cozyhr. This involves updating all instances of the old name in the project's documentation, Go module definition, installation scripts, and core application code to ensure consistency and reflect the new identity.

Highlights

  • Project Renaming: The project has been renamed from cozypkg to cozyhr across all relevant files and documentation.
  • Documentation Update: The README.md file has been updated to reflect the new project name, including usage examples, installation instructions, and a note about the former name.
  • Go Module Path Change: The Go module path in go.mod has been updated to github.com/cozystack/cozyhr.
  • Installation Script Modifications: The hack/install.sh script has been adjusted to use the new cozyhr name for binary files, checksums, and GitHub release URLs.
  • Internal Code References: All internal references within main.go, including command usage, version output, event sources, and annotation keys, have been updated to cozyhr.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Signed-off-by: Andrei Kvapil <[email protected]>
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request correctly renames the project from cozypkg to cozyhr. The changes are applied consistently throughout the codebase, including the Go module name, user-facing strings in the CLI, documentation, and installation scripts. The addition of a note in the README.md about the name change is a good touch for user awareness. The changes are well-executed and I see no issues.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
hack/install.sh (1)

52-54: Portability concern: sha256sum may not be available on macOS.

macOS uses shasum -a 256 instead of sha256sum. This will cause the script to fail on macOS with the error "Required command 'sha256sum' not found."

🔎 Proposed fix for cross-platform compatibility
-for cmd in uname mktemp tar sha256sum; do
-  command -v "$cmd" >/dev/null 2>&1 || error "Required command '$cmd' not found."
-done
+for cmd in uname mktemp tar; do
+  command -v "$cmd" >/dev/null 2>&1 || error "Required command '$cmd' not found."
+done
+
+# Detect checksum tool
+if command -v sha256sum >/dev/null 2>&1; then
+  checksum() { sha256sum "$1" | awk '{print $1}'; }
+elif command -v shasum >/dev/null 2>&1; then
+  checksum() { shasum -a 256 "$1" | awk '{print $1}'; }
+else
+  error "Neither sha256sum nor shasum is available."
+fi

Then update line 98:

-ACTUAL_SUM=$(sha256sum "$TMPDIR/$TAR_FILE" | awk '{print $1}')
+ACTUAL_SUM=$(checksum "$TMPDIR/$TAR_FILE")
🧹 Nitpick comments (1)
README.md (1)

12-39: Consider adding language specifier to fenced code block.

The fenced code block lacks a language specifier. Adding one (e.g., text or plaintext) would satisfy linters and improve rendering consistency.

🔎 Proposed fix
-```
+```text
 Cozy wrapper around Helm and Flux CD for local development
📜 Review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between a8a9003 and e6759f1.

📒 Files selected for processing (5)
  • .github/workflows/release.yml
  • README.md
  • go.mod
  • hack/install.sh
  • main.go
💤 Files with no reviewable changes (1)
  • .github/workflows/release.yml
🧰 Additional context used
🪛 markdownlint-cli2 (0.18.1)
README.md

12-12: Fenced code blocks should have a language specified

(MD040, fenced-code-language)

🔇 Additional comments (10)
go.mod (2)

1-1: Module path rename looks correct.

The module path is consistently updated from cozypkg to cozyhr.


3-3: Go version 1.25.0 is valid. As of December 2025, the Go 1.25.x line is the current stable release series (with 1.25.5 being the latest patch). No action required unless you intend to update to the latest patch level.

Likely an incorrect or invalid review comment.

hack/install.sh (2)

92-104: Good security enhancement with checksum verification.

The SHA-256 checksum verification before extraction is a solid security improvement that helps protect against corrupted or tampered downloads.


75-82: Renaming references updated consistently.

All tarball names, URLs, binary references, and user-facing messages are consistently updated from cozypkg to cozyhr.

Also applies to: 88-90, 109-111, 125-130

main.go (4)

86-99: CLI identifiers consistently renamed.

The root command, version template, and version output are all correctly updated to use cozyhr.

Also applies to: 121-127


393-404: Breaking change: annotation key renamed.

The annotation key changed from cozypkg.cozystack.io/values-files to cozyhr.cozystack.io/values-files. Existing HelmReleases using the old annotation key will no longer be recognized. Consider documenting this in the README or release notes.


722-724: Event source component updated.

The Kubernetes event source component is correctly updated to cozyhr.


644-645: Command doc comments consistently updated.

All command function doc comments are correctly updated to reference cozyhr instead of cozypkg.

Also applies to: 712-713, 786-787, 820-821, 829-830, 838-839, 1075-1076, 1095-1096, 1309-1310

README.md (2)

1-3: Helpful transition note for existing users.

Adding the note about the former name cozypkg is a good practice for users who may be familiar with the old project name.


43-48: Installation references updated correctly.

The GitHub releases URL and install script URL are both correctly updated to point to the cozyhr repository.

@kvaps kvaps merged commit e39f72f into main Dec 25, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants