Apply automatic Ruff fixes to pull requests

Author: wolph

.github/workflows/autofix.yml

@@ -0,0 +1,36 @@
+# Ruff rewrites quote styles and capitalises docstrings without any help
+# from a person, so a contributor should never have to. This hands those
+# fixes to the autofix.ci app, which commits them to the pull request
+# branch, forks included. The existing lint gate still reports any
+# findings that ruff cannot fix.
+#
+# The filename and the workflow name are both fixed by autofix.ci, which
+# uses them to identify the workflow it trusts. Renaming either one stops
+# the app from accepting the patch.
+name: autofix.ci # needed to securely identify the workflow
+
+on:
+  pull_request:
+  push:
+    branches: [develop, master]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  autofix:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          python-version: '3.13'
+      - run: uvx --with tox-uv tox -e ruff-fix
+      - uses: autofix-ci/action@c5b2d67aa2274e7b5a18224e8171550871fc7e4a # v1.3.4

.github/workflows/ci.yml

@@ -45,7 +45,13 @@ jobs:
       - uses: astral-sh/setup-uv@v8.2.0
         with:
           cache-suffix: lint
+      - name: Apply Ruff fixes to pull requests
+        if: github.event_name == 'pull_request'
+        run: uvx --with tox-uv tox -e ruff-fix
       - run: uvx --with tox-uv tox -e lint
+        env:
+          RUFF_OUTPUT_FORMAT: >-
+            ${{ github.event_name == 'pull_request' && 'github' || 'full' }}
 
   type-check:
     runs-on: ubuntu-latest

CONTRIBUTING.md

@@ -85,3 +85,16 @@ Lastly we test the types using `pyright`:
 ```bash
 $ pyright
 ```
+
+## Automatic formatting
+
+Pull requests apply Ruff fixes before the lint check. With the autofix.ci
+app installed for this repository, those fixes are committed to the pull
+request branch, including forks. Findings Ruff cannot fix still fail CI.
+Push builds check the committed files without applying fixes.
+
+Apply the same fixes locally with:
+
+```console
+uvx --with tox-uv tox -e ruff-fix
+```

tox.ini

@@ -46,6 +46,7 @@ pass_env = COVERAGE_FILE
 commands = pytest --cov-fail-under=0 {posargs}
 
 [testenv:lint]
+pass_env = RUFF_OUTPUT_FORMAT
 runner = uv-venv-runner
 dependency_groups = dev
 commands =
@@ -85,3 +86,14 @@ uv_sync_locked = false
 commands =
     coverage erase
     pytest --cov=python_utils --cov-report=term-missing --cov-fail-under=100
+
+
+[testenv:ruff-fix]
+labels = fix
+description = Apply the available Ruff fixes
+skip_install = true
+runner = uv-venv-runner
+dependency_groups = dev
+commands =
+    ruff check --fix --exit-zero .
+    ruff format .