Repository navigation
ci: enable autofix.ci - #1835
Conversation
|
@coderabbitai @cubic-dev-ai Please review the latest commit, especially the PR head checkout, read-only runner permissions, preservation of treefmt exclusions, and handling of .github formatting changes. |
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configuration
📒 Files selected for processing (1)
Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review. 📝 WalkthroughWalkthroughAdds a pull-request workflow that runs ChangesFormatting workflow
Priority: ⬇️ Low Estimated code review effort: 2 (Simple) | ~10 minutes Change: Feature Merge Risk: ⚪ Minimal · up to The formatting workflow is ready to merge after normal checks; no actionable issue remains. 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
@ryoppippi I have started the AI code review. It will take a few minutes to complete. |
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
ccusage-guide | 5ac0c22 | Commit Preview URL Branch Preview URL |
Oct 07 2026, 03:38 PM |
|
|
There was a problem hiding this comment.
✅ No new issues found.
Reviewed changes — reviewed 5ac0c22 against base 34d2c88 (1 file, 1 commit).
- New
autofix.ciworkflow — checks out the PR head SHA read-only, runs the pinnednix fmttree, restores.githubpaths that autofix.ci rejects, and pushes remaining fixes through the GitHub App withfail-fast: false. - Least-privilege wiring — job keeps
contents: readwithpersist-credentials: false, matching the read-only scan/preflight pattern inci.yaml; the App (not the runner token) performs the push. - Verified against vendor contract — action pin
c5b2d67matches the documentedv1.3.4release andfail-fast: falsecorrectly disables the default behavior of cancelling sibling CI runs.
One operational note, not a blocker: the autofix.ci GitHub App must be installed on the repo or this step fails on every PR. .github formatting fixes are intentionally discarded here and remain covered by the existing preflight check, which is the correct fallback.
muse-spark-1.3-contributor (free via Pullfrog for OSS) | 𝕏
ccusage
@ccusage/ccusage-darwin-arm64
@ccusage/ccusage-darwin-x64
@ccusage/ccusage-linux-arm64
@ccusage/ccusage-linux-x64
@ccusage/ccusage-win32-x64
commit: |
ccusage performance comparisonPR SHA: Performance comparison skipped. Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided. Base package: |
ccusage performance comparisonPR SHA: Performance comparison skipped. Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided. Base package: |

Adds an
autofix.ciworkflow that runs the repository's pinned Nix formatting and lint fixes on pull request head commits, then publishes the changes through the installed GitHub App. The runner keeps read-only permissions, and Autofix's cancellation of other CI workflows is disabled.Formatting changes under
.githubare discarded because autofix.ci rejects fixes containing those paths; the existing CI preflight continues to validate them. The normal treefmt exclusions remain intact, including generated Bun files.Validation:
direnv exec . just fmtdirenv exec . nix fmt -- --no-cachefollowed bygit restore --worktree -- .github(no unexpected changes)direnv exec . nix build --no-link .#checks.aarch64-darwin.treefmt .#checks.aarch64-darwin.gitleaksSummary by cubic
Enables autofix.ci so formatting and lint fixes are applied automatically to pull request head commits.
.githubare discarded because autofix.ci rejects them; the existing CI preflight continues to validate those paths.Written for commit 5ac0c22. Summary will update on new commits.
Summary by CodeRabbit