build(deps): bump pullfrog/pullfrog from 0.1.53 to 0.1.56

[dependabot]

Bumps pullfrog/pullfrog from 0.1.53 to 0.1.56.

Release notes

Sourced from pullfrog/pullfrog's releases.

v0.1.56

📦 pullfrog 0.1.56

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.56

v0.1.55

📦 pullfrog 0.1.55

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.55

v0.1.54

📦 pullfrog 0.1.54

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.54

Commits

• 991f983 release: bump action to 0.1.56
• 511c4ef fix(#1151): re-land the model-introspection restore window, keyed on the repo...
• 25d6b77 models: re-point the deepseek-reasoner fallback assertion at the 0813 target
• 38c716c fix(test): start fixture runs outside the checkout, like production does (#1223)
• 5862b76 agent GitHub access: role-mirrored gh tool above triage, object-scoped tools ...
• ee82591 billing: stop the commercial gate refusing every preview and local deployment
• f1d217c hotfix: revert the model-introspection dirty window, release 0.1.55
• 5067a4b release: bump action to 0.1.54
• 6e50354 for-oss: derive the funded model menu instead of naming one stale model
• 693b2df never infer which credential failed from the provider's wording (#1217)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[deepsource-io]

DeepSource Code Review

We reviewed changes in fe46cdf...1c53279 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade

Security   Reliability   Complexity   Hygiene

Code Review Summary

Analyzer	Status	Updated (UTC)	Details
JavaScript		Aug 17, 2026 5:25a.m.	Review ↗
Python		Aug 17, 2026 5:25a.m.	Review ↗

---

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.