Summary

• Fixes PR comment behavior inon-failure mode to update existing comments when issues are resolved
• Adds comprehensive test coverage for comment-pr functionality
• FixesMark previous PR comment as outdated #628 andUpdate previous comment when failure is resolved #647

Changes

• Modifiedcomment-pr.ts to handle success cases in on-failure mode by updating existing comments
• AddedhasExistingComment helper function to check for existing dependency review comments
• Added comprehensive test suite covering all comment modes and scenarios

Test plan

• All existing tests pass
• New tests cover all comment modes (always, never, on-failure)
• Tests verify proper comment creation, updating, and skipping behavior
• Edge cases handled (non-PR context, multiple comments)

Demo

Live demonstration of the enhanced functionality:

Demo 1: Enhancedon-failure mode behavior

sgmurphy/fictional-garbanzo#1

• Demonstrates improved comment behavior inon-failure mode
• Shows comment creation when vulnerabilities are found
• Shows comment updating (not creating new ones) when vulnerabilities are resolved
• Prevents comment spam by reusing existing comments

Demo 2:never mode validation

sgmurphy/fictional-garbanzo#2

• Validates thatcomment-summary-in-pr: never properly suppresses all comments
• Even with vulnerabilities present, no PR comments are created
• Ensures "never" mode works correctly with the enhanced logic