Configuration used: Path: .coderabbit.yml

Review profile: CHILL

Plan: Pro

Run ID: 9fe86054-7616-4cfa-bedf-8228f5c01b8f

Reviewing files that changed from the base of the PR and between fc1c278 and 8e48008.

• .github/workflows/pr-auto-commit.yaml
• .github/workflows/pr-format.yaml

Walkthrough

Removed the vulnerable pr-auto-commit.yaml workflow that auto-committed formatting changes to PRs, replacing it with a new pr-format.yaml workflow that performs format checks and posts non-invasive formatting suggestions via reviewdog instead.

Changes

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

• Prevent shell injection #7310 — Modifies the same pr-auto-commit.yaml workflow to address HEAD ref handling concerns.
• Ruff as part of PR auto-format #6421 — Updates GitHub Actions formatting workflows with Ruff integration changes.
• Update CI auto-formate #6237 — Removes the pr-auto-commit auto-commit workflow and replaces it with a format-check workflow approach.

Suggested reviewers

• ShaharNaveh

Poem

🐰 A workflow once pushed with secrets so near,
Now safely suggests—without commit or fear!
Reviewdog whispers formatting advice,
No shell injections, no malicious splice,
The rabbit hops on, the pipeline is bright! ✨

• Create PR with unit tests
• Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

• X
• Mastodon
• Reddit
• LinkedIn

Comment @coderabbitai help to get the list of available commands and usage tips.