chore(ci): pin mr-boxington-action v1.0.1

[jdx]

Pin the mbx setup composite to the tagged v1.0.1 action commit. This release authenticates release-metadata lookups with the workflow token, preventing the intermittent GitHub API 403s seen when many CLI jobs start together. The matching tag annotation also satisfies Zizmor’s ref-version check.

AI-assisted — Tool: Codex; model: openai/gpt-5; version: unavailable.

---

Note

Low Risk
CI-only dependency pin with no application or runtime behavior changes in this repo.

Overview
Updates the mbx composite action to use jdx/mr-boxington-action at v1.0.1 (commit 203ebddb…) instead of the previous v1 pin, for both the fork PR cache mirror step and the main setup step.

This targets intermittent GitHub API 403 errors when many jobs start at once, by using a release that authenticates release-metadata lookups with the workflow token. The v1.0.1 ref comment also aligns with Zizmor’s ref-version checks.

^{Reviewed by Cursor Bugbot for commit a1d84e4. Bugbot is set up for automated code reviews on this repo. Configure here.}

Summary by CodeRabbit

• Chores
  • Updated the pull request validation tooling to a newer patch release.
  • No user-facing feature or behavior changes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: 6df9e541-2a22-4528-8597-bfe629fd6bf8

📥 Commits

Reviewing files that changed from the base of the PR and between a82dedb and a1d84e4.

📒 Files selected for processing (1)

• .github/actions/mbx/action.yml

Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review.

---

📝 Walkthrough

Walkthrough

Both jdx/mr-boxington-action references now use commit 203ebddb3bdb1b3832473207d0a837b23b660563 (v1.0.1). Existing version and backend inputs remain unchanged.

Changes

mr-boxington-action update

Layer / File(s)	Summary
Update action pins .github/actions/mbx/action.yml	Both action usages use the v1.0.1 commit. The version: 0.5.4 and backend: github inputs remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to a1d84

This PR only pins the CI action to the v1.0.1 commit in two locations, with no application or runtime behavior changes; no actionable merge-blocking risk remains after normal checks and review.

Poem

A rabbit checks the pin
Two action steps now match
The old hash hops away
Version and backend stay
Clean workflow, quiet patch

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: pinning mr-boxington-action to version v1.0.1 in CI.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}