ci(release): enforce changed-scope Ruff gate

2026-09-13 15:41:35 +09:00
parent 1010d257ad
commit 4520fbbfbd
5 changed files with 147 additions and 89 deletions
@@ -15,6 +15,8 @@ jobs:
      contents: read
    steps:
      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+        with:
+          fetch-depth: 0
      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
        with:
          python-version: "3.11"
@@ -23,14 +25,10 @@ jobs:
      - run: uv run pytest -q
      - name: Honest scoped lint for release additions
        run: uv run ruff check --select F,I app/db/migrations.py scripts/image_release.py scripts/ruff_ratchet.py tests/release
-      - name: Reject increases over the v0.2.1 Ruff debt baseline
+      - name: Reject Ruff findings introduced by v0.3.0 or its patch
        run: |
-          set +e
-          uv run ruff check . --output-format=json > ruff-diagnostics.json
-          ruff_status=$?
-          set -e
-          test "$ruff_status" -eq 0 -o "$ruff_status" -eq 1
-          uv run python scripts/ruff_ratchet.py ruff-diagnostics.json
+          uv run python scripts/ruff_ratchet.py --base v0.2.1
+          uv run python scripts/ruff_ratchet.py --base v0.3.0
      - name: Validate container contracts without registry writes
        run: uv run pytest -q tests/release
      - name: Build and smoke exact pull-request or main source image