chore: add autofix.ci workflow by jdx · Pull Request #705 · jdx/hk

jdx · 2026-02-25T03:12:21Z

Summary

Adds autofix.ci GitHub Actions workflow that automatically fixes linting/formatting issues in PRs
Runs mise run render ::: lint-fix to regenerate docs and apply hk fix --all --slow
Uses autofix-ci/action@v1.3.3 to commit fixes back to the PR branch
Skips bot PRs (renovate, mend)
Matches the pattern used in pitchfork and fnox

Test plan

actionlint passes
prettier passes
Verify autofix runs on a subsequent PR

🤖 Generated with Claude Code

Note

Low Risk
CI-only change that adds an automated fixer/committer workflow; main risk is unexpected auto-commits or longer PR CI times, with no production/runtime impact.

Overview
Adds a new .github/workflows/autofix.yml workflow that runs on pull_request to main and automatically applies repo fixes (via mise + bun i and mise run render ::: lint-fix) and commits them back to the PR using autofix-ci/action.

The job uses Rust caching, checks out submodules, enforces concurrency cancellation, and skips running for renovate[bot] and mend[bot] PRs.

^{Written by Cursor Bugbot for commit f05bdbe. This will update automatically on new commits. Configure here.}

Automatically fix linting and formatting issues in PRs using autofix-ci/action. Runs `mise run render ::: lint-fix` to regenerate docs and apply `hk fix --all --slow`. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

gemini-code-assist · 2026-02-25T03:12:25Z

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

cursor · 2026-02-25T03:13:56Z

+    branches: [main]
+
+permissions:
+  contents: read


Autofix workflow lacks commit permissions

Medium Severity

autofix.yml sets permissions.contents to read, but autofix-ci/action needs write access to push fix commits back to the PR branch. This prevents the workflow from performing its core behavior, so it runs but cannot apply or publish autofixes.

Additional Locations (1)

.github/workflows/autofix.yml#L32-L33

greptile-apps · 2026-02-25T03:14:43Z

Greptile Summary

Adds autofix.ci workflow to automatically fix linting and formatting issues in PRs

Runs mise run render ::: lint-fix to regenerate docs and apply fixes
Uses pinned action versions with commit SHAs for security
Skips bot PRs (renovate, mend)
Critical issue: Workflow will fail because autofix-ci/action needs contents: write and pull-requests: write permissions to commit fixes back to the PR, but currently only has contents: read

Confidence Score: 2/5

This PR will not work as intended due to incorrect permissions configuration
The workflow contains a critical logic error where the permissions are set to contents: read but the autofix-ci/action requires write access to push commits back to the PR. This will cause the workflow to fail when it tries to commit fixes. Once the permissions are corrected to contents: write and pull-requests: write, the workflow should function properly.
.github/workflows/autofix.yml requires immediate attention to fix permissions

Important Files Changed

Filename	Overview
.github/workflows/autofix.yml	New autofix workflow added but has critical permission issue - requires `contents: write` and `pull-requests: write` instead of `contents: read`

_{Last reviewed commit: f05bdbe}

greptile-apps

_{1 file reviewed, 1 comment}

_{Edit Code Review Agent Settings | Greptile}

greptile-apps · 2026-02-25T03:14:47Z

+permissions:
+  contents: read


The autofix-ci/action requires write permissions to push fixes back to the PR. This will fail with contents: read.

Suggested change

permissions:

contents: read

permissions:

contents: write

pull-requests: write

greptile-apps · 2026-02-25T03:19:15Z

Greptile Summary

Adds autofix.ci GitHub Actions workflow that automatically fixes linting/formatting issues in PRs targeting main. The workflow runs on pull requests (excluding bot PRs from renovate/mend), executes mise run render ::: lint-fix to regenerate docs and apply hk fix --all --slow, then commits fixes back to the PR branch using autofix-ci/action@v1.3.3.

Key changes:

New .github/workflows/autofix.yml workflow with 10min timeout, Rust caching, and concurrency control
mise.lock updated by the autofix bot itself (added communique tool), demonstrating the workflow is functional
Workflow uses pinned action SHAs for security and matches patterns used in other repos (pitchfork, fnox)

Note on permissions: Previous review thread mentioned contents: read permission issue. However, autofix-ci/action uses GitHub App authentication with its own credentials, not the workflow's GITHUB_TOKEN, so the contents: read permission is actually correct for this use case.

Confidence Score: 5/5

This PR is safe to merge with minimal risk - it's a CI-only change with no runtime impact
The workflow is a CI-only addition that matches established patterns from other repos. The autofix bot has already successfully run (evidenced by the mise.lock commit), validating the configuration works. The workflow uses pinned action SHAs, includes appropriate bot filtering, and has no impact on production code or runtime behavior.
No files require special attention

Important Files Changed

Filename	Overview
.github/workflows/autofix.yml	Adds autofix.ci workflow to auto-commit lint/format fixes on PRs; uses correct action patterns and bot filtering
mise.lock	Auto-generated lockfile updated by autofix.ci bot to add communique tool dependency

_{Last reviewed commit: 24f6eb1}

greptile-apps · 2026-02-25T03:23:20Z

Greptile Summary

Adds an autofix.ci GitHub Actions workflow that automatically applies linting and formatting fixes to pull requests. The workflow triggers on PRs to main, runs mise run render ::: lint-fix to regenerate documentation and apply hk fix --all --slow, then commits any changes back to the PR using the autofix-ci/action. It skips bot PRs (renovate, mend) and uses concurrency cancellation to avoid redundant runs.

The workflow has already run successfully (as evidenced by commits 85d2976 and 24f6eb1), proving the implementation works correctly. The mise.lock changes are auto-generated platform additions from running the workflow.

Note: The previous comment about contents: read causing failures is incorrect - autofix.ci uses a GitHub App with its own authentication token, so the workflow-level contents: read permission is appropriate and does not interfere with the action's ability to push commits.

Confidence Score: 5/5

This PR is safe to merge - it's a CI-only workflow addition with no production impact
The workflow adds automation for code quality without affecting runtime behavior. The implementation has already been proven to work (commits from autofix.ci bot exist in the PR). The permissions are correctly configured despite the previous comment's concern - autofix.ci uses its own GitHub App token. The workflow includes safety features like bot filtering and timeout limits.
No files require special attention

Important Files Changed

Filename	Overview
.github/workflows/autofix.yml	Adds GitHub Actions workflow to automatically fix linting/formatting issues on PRs using `autofix.ci`
mise.lock	Auto-generated lockfile updated with additional platform targets for existing tools

_{Last reviewed commit: 85d2976}

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [hk](https://github.com/jdx/hk) | minor | `1.36.0` → `1.38.0` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>jdx/hk (hk)</summary> ### [`v1.38.0`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1380---2026-03-06) [Compare Source](jdx/hk@v1.37.0...v1.38.0) ##### 🚀 Features - **(hook)** add `fail_on_fix` option by [@jdx](https://github.com/jdx) in [#725](jdx/hk#725) ##### 🐛 Bug Fixes - **(builtins)** remove redundant check/check\_diff from builtins by [@nkakouros](https://github.com/nkakouros) in [#726](jdx/hk#726) ##### 📦️ Dependency Updates - update anthropics/claude-code-action digest to [`26ec041`](jdx/hk@26ec041) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#720](jdx/hk#720) - update jdx/mise-action digest to [`e79ddf6`](jdx/hk@e79ddf6) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#721](jdx/hk#721) - update actions-rust-lang/setup-rust-toolchain digest to [`a0b538f`](jdx/hk@a0b538f) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#719](jdx/hk#719) - update rust crate tokio to v1.50.0 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#722](jdx/hk#722) ### [`v1.37.0`](https://github.com/jdx/hk/blob/HEAD/CHANGELOG.md#1370---2026-03-03) [Compare Source](jdx/hk@v1.36.0...v1.37.0) ##### 🚀 Features - **(hook)** add env support to hooks by [@jdx](https://github.com/jdx) in [#709](jdx/hk#709) - parse Go-style diffs by [@jdx](https://github.com/jdx) in [#704](jdx/hk#704) ##### 🐛 Bug Fixes - **(builtins)** strip extra trailing newlines in end-of-file-fixer by [@jdx](https://github.com/jdx) in [#708](jdx/hk#708) - **(docs)** correctly document what --all is about by [@nkakouros](https://github.com/nkakouros) in [#715](jdx/hk#715) - **(git)** exclude untracked files from unstaged\_files set by [@nkakouros](https://github.com/nkakouros) in [#716](jdx/hk#716) - **(hkrc)** config format and load order by [@ivy](https://github.com/ivy) in [#710](jdx/hk#710) - **(release)** write release notes to file instead of capturing stdout by [@jdx](https://github.com/jdx) in [#688](jdx/hk#688) - **(release)** make release notes editorialization non-blocking by [@jdx](https://github.com/jdx) in [#690](jdx/hk#690) - **(step)** gate check\_diff forced check\_first on Fix mode only by [@nkakouros](https://github.com/nkakouros) in [#717](jdx/hk#717) ##### 📚 Documentation - **(shanty)** add audio player with sea shanty recording by [@jdx](https://github.com/jdx) in [67a25ad](jdx/hk@67a25ad) - document config file search paths by [@ivy](https://github.com/ivy) in [#701](jdx/hk#701) - require AI disclosure on GitHub comments by [@jdx](https://github.com/jdx) in [#703](jdx/hk#703) ##### 🔍 Other Changes - replace gen-release-notes script with communique by [@jdx](https://github.com/jdx) in [#700](jdx/hk#700) - add autofix.ci workflow by [@jdx](https://github.com/jdx) in [#705](jdx/hk#705) ##### 📦️ Dependency Updates - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#686](jdx/hk#686) - update taiki-e/upload-rust-binary-action digest to [`f391289`](jdx/hk@f391289) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#692](jdx/hk#692) - update anthropics/claude-code-action digest to [`c22f7c3`](jdx/hk@c22f7c3) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#691](jdx/hk#691) - update rust crate libc to v0.2.181 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#694](jdx/hk#694) - update rust crate clap to v4.5.58 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#693](jdx/hk#693) - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#695](jdx/hk#695) - update anthropics/claude-code-action digest to [`edd85d6`](jdx/hk@edd85d6) by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#698](jdx/hk#698) - update rust crate clap to v4.5.60 by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#699](jdx/hk#699) - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#702](jdx/hk#702) - lock file maintenance by [@renovate\[bot\]](https://github.com/renovate\[bot]) in [#711](jdx/hk#711) ##### New Contributors - [@ivy](https://github.com/ivy) made their first contribution in [#710](jdx/hk#710) - [@nkakouros](https://github.com/nkakouros) made their first contribution in [#715](jdx/hk#715) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

chore: add autofix.ci workflow

f05bdbe

Automatically fix linting and formatting issues in PRs using autofix-ci/action. Runs `mise run render ::: lint-fix` to regenerate docs and apply `hk fix --all --slow`. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

cursor Bot reviewed Feb 25, 2026

View reviewed changes

greptile-apps Bot reviewed Feb 25, 2026

View reviewed changes

[autofix.ci] apply automated fixes

24f6eb1

[autofix.ci] apply automated fixes (attempt 2/3)

85d2976

jdx merged commit dc8ff4a into main Feb 25, 2026
18 checks passed

jdx deleted the add-autofix-ci branch February 25, 2026 11:43

jdx mentioned this pull request Feb 25, 2026

chore: release v1.38.0 #687

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: add autofix.ci workflow#705

chore: add autofix.ci workflow#705
jdx merged 3 commits intomainfrom
add-autofix-ci

jdx commented Feb 25, 2026 •

edited by cursor Bot

Loading

Uh oh!

gemini-code-assist Bot commented Feb 25, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Feb 25, 2026

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Uh oh!

greptile-apps Bot left a comment

Uh oh!

greptile-apps Bot Feb 25, 2026

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

jdx commented Feb 25, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Uh oh!

gemini-code-assist Bot commented Feb 25, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Feb 25, 2026

Choose a reason for hiding this comment

Autofix workflow lacks commit permissions

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Greptile Summary

Confidence Score: 2/5

Important Files Changed

Uh oh!

greptile-apps Bot left a comment

Choose a reason for hiding this comment

Uh oh!

greptile-apps Bot Feb 25, 2026

Choose a reason for hiding this comment

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

greptile-apps Bot commented Feb 25, 2026

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

jdx commented Feb 25, 2026 •

edited by cursor Bot

Loading