Skip to content

ci: enable autofix.ci - #1835

Merged
ryoppippi merged 1 commit into
mainfrom
codex/ci-autofix
Oct 8, 2026
Merged

ryoppippi merged 1 commit into
mainfrom
codex/ci-autofix

Conversation

@ryoppippi

@ryoppippi ryoppippi commented Oct 7, 2026 •

Copy link
Copy Markdown
Member

Adds an autofix.ci workflow that runs the repository's pinned Nix formatting and lint fixes on pull request head commits, then publishes the changes through the installed GitHub App. The runner keeps read-only permissions, and Autofix's cancellation of other CI workflows is disabled.

Formatting changes under .github are discarded because autofix.ci rejects fixes containing those paths; the existing CI preflight continues to validate them. The normal treefmt exclusions remain intact, including generated Bun files.

Validation:

  • direnv exec . just fmt
  • direnv exec . nix fmt -- --no-cache followed by git restore --worktree -- .github (no unexpected changes)
  • direnv exec . nix build --no-link .#checks.aarch64-darwin.treefmt .#checks.aarch64-darwin.gitleaks
  • Commit hooks passed.

Summary by cubic

Enables autofix.ci so formatting and lint fixes are applied automatically to pull request head commits.

  • Runs the repository's pinned Nix formatting and linting, then publishes the fixes through the GitHub App.
  • The runner keeps read-only permissions, and Autofix's cancellation of other CI workflows is disabled.
  • Fixes under .github are discarded because autofix.ci rejects them; the existing CI preflight continues to validate those paths.
  • Treefmt exclusions, including generated Bun files, remain intact.

Written for commit 5ac0c22. Summary will update on new commits.

View guided diff Turn on auto-fix

Summary by CodeRabbit

  • Chores
    • Pull requests now receive automated formatting checks. Applicable fixes are submitted automatically, while overlapping runs for the same pull request are canceled to avoid redundant updates.

@ryoppippi

Copy link
Copy Markdown
Member Author

@coderabbitai @cubic-dev-ai Please review the latest commit, especially the PR head checkout, read-only runner permissions, preservation of treefmt exclusions, and handling of .github formatting changes.

@coderabbitai

coderabbitai Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: bcd33c18-05f5-48cd-94b1-a1518119a35b
📥 Commits

Reviewing files that changed from the base of the PR and between 34d2c88 and 5ac0c22.

📒 Files selected for processing (1)
  • .github/workflows/autofix.yaml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.


📝 Walkthrough

Walkthrough

Adds a pull-request workflow that runs nix fmt -- --no-cache and submits remaining fixes through autofix.ci. The workflow uses read-only contents permission, a 20-minute timeout, and per-pull-request concurrency cancellation.

Changes

Formatting workflow

Layer / File(s) Summary
Run formatting and submit fixes
.github/workflows/autofix.yaml
The workflow checks out the pull request head without persisting credentials, sets up the Nix cache, runs formatting, restores .github changes, and submits remaining fixes through autofix.ci. It also sets read-only contents permission, a 20-minute timeout, and per-pull-request concurrency cancellation.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to 5ac0c

The formatting workflow is ready to merge after normal checks; no actionable issue remains.

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the main change: enabling the autofix.ci workflow.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@cubic-dev-ai

cubic-dev-ai Bot commented Oct 7, 2026

Copy link
Copy Markdown
Contributor

@coderabbitai @cubic-dev-ai Please review the latest commit, especially the PR head checkout, read-only runner permissions, preservation of treefmt exclusions, and handling of .github formatting changes.

@ryoppippi I have started the AI code review. It will take a few minutes to complete.

@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
ccusage-guide 5ac0c22 Commit Preview URL

Branch Preview URL
Oct 07 2026, 03:38 PM

@coderabbitai

coderabbitai Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

@ryoppippi I’ll review the latest commit, with focus on:

  • PR head checkout.
  • Read-only runner permissions.
  • Preservation of treefmt exclusions.
  • Handling of .github formatting changes.
⚠️ Action not completed

Already reviewed the last commit. Use @coderabbitai full review to rerun a review of the entire changeset.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@pullfrog pullfrog Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ No new issues found.

Reviewed changes — reviewed 5ac0c22 against base 34d2c88 (1 file, 1 commit).

  • New autofix.ci workflow — checks out the PR head SHA read-only, runs the pinned nix fmt tree, restores .github paths that autofix.ci rejects, and pushes remaining fixes through the GitHub App with fail-fast: false.
  • Least-privilege wiring — job keeps contents: read with persist-credentials: false, matching the read-only scan/preflight pattern in ci.yaml; the App (not the runner token) performs the push.
  • Verified against vendor contract — action pin c5b2d67 matches the documented v1.3.4 release and fail-fast: false correctly disables the default behavior of cancelling sibling CI runs.

One operational note, not a blocker: the autofix.ci GitHub App must be installed on the repo or this step fails on every PR. .github formatting fixes are intentionally discarded here and remain covered by the existing preflight check, which is the correct fallback.

Pullfrog  | View workflow run | Using muse-spark-1.3-contributor (free via Pullfrog for OSS) | 𝕏

@cubic-dev-ai cubic-dev-ai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 1 file

View guided diff | Turn on auto-fix | Re-trigger cubic

@pkg-pr-new

pkg-pr-new Bot commented Oct 8, 2026

Copy link
Copy Markdown

Open in StackBlitz

ccusage

npx https://pkg.pr.new/ccusage@1835

@ccusage/ccusage-darwin-arm64

npx https://pkg.pr.new/@ccusage/ccusage-darwin-arm64@1835

@ccusage/ccusage-darwin-x64

npx https://pkg.pr.new/@ccusage/ccusage-darwin-x64@1835

@ccusage/ccusage-linux-arm64

npx https://pkg.pr.new/@ccusage/ccusage-linux-arm64@1835

@ccusage/ccusage-linux-x64

npx https://pkg.pr.new/@ccusage/ccusage-linux-x64@1835

@ccusage/ccusage-win32-x64

npx https://pkg.pr.new/@ccusage/ccusage-win32-x64@1835

commit: 5ac0c22

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

ccusage performance comparison

PR SHA: 5ac0c22cfda6
Base SHA: 34d2c884164f

Performance comparison skipped.

Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided.

Base package: 34d2c884164f

@github-actions

github-actions Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

ccusage performance comparison

PR SHA: 5ac0c22cfda6
Base SHA: 34d2c884164f

Performance comparison skipped.

Base package URL was not ready before 300.000s. Fixture performance comparison requires a base package when --base-dir is not provided.

Base package: 34d2c884164f

@ryoppippi
ryoppippi merged commit f3cdcbe into main Oct 8, 2026
56 of 58 checks passed
@ryoppippi
ryoppippi deleted the codex/ci-autofix branch October 8, 2026 17:10
@github-actions github-actions Bot mentioned this pull request Oct 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant