Hugh Hackman
1c5eb52490
Previously the jq logic checked if *any* review from CTO/QA had state == APPROVED. This allowed a PR to pass dual-approval even if the reviewer subsequently requested changes — because the earlier approval was still in the review history. Fix: filter reviews by user, take the last one, and check its state. This ensures a CHANGES_REQUESTED review after an approval correctly blocks the check. Co-Authored-By: Paperclip <noreply@paperclip.ing>