update

Signed-off-by: Andreas Fehlner <fehlner@arcor.de>

Author: andife

.github/workflows/pr_checks.yml

@@ -22,7 +22,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      pull-requests: write
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
@@ -40,6 +39,13 @@ jobs:
           set +e
           lintrunner f --all-files -v
           exit 0
-      - uses: parkerbxyz/suggest-changes@bd099ea0d10f0e9efeb9e46d604bbe6d7a80bc34
+      - name: Save PR number and diff
+        run: |
+          mkdir -p ./pr_artifacts
+          echo "${{ github.event.pull_request.number }}" > ./pr_artifacts/pr_number
+          git diff > ./pr_artifacts/lintrunner.diff
+      - name: Upload artifacts
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
-          comment: 'You can commit the suggested changes from lintrunner.'
+          name: pr-artifacts
+          path: pr_artifacts/

.github/workflows/pr_checks_comment.yml

@@ -0,0 +1,60 @@
+# Copyright (c) ONNX Project Contributors
+#
+# SPDX-License-Identifier: Apache-2.0
+
+name: PR Checks Comment
+
+on:
+  workflow_run:
+    workflows: ["PR Checks"]
+    types:
+      - completed
+
+permissions:
+  contents: read
+
+jobs:
+  suggest-changes:
+    name: Suggest fixes
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.event == 'pull_request'
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - name: Download artifacts
+        id: download
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
+        continue-on-error: true
+        with:
+          name: pr-artifacts
+          path: pr_artifacts/
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Get PR number
+        if: steps.download.outcome == 'success'
+        id: pr
+        run: echo "number=$(cat pr_artifacts/pr_number)" >> "$GITHUB_OUTPUT"
+      - name: Check if diff is empty
+        if: steps.download.outcome == 'success'
+        id: diff
+        run: |
+          if [ -s pr_artifacts/lintrunner.diff ]; then
+            echo "has_changes=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "has_changes=false" >> "$GITHUB_OUTPUT"
+          fi
+      - name: Checkout PR
+        if: steps.download.outcome == 'success' && steps.diff.outputs.has_changes == 'true'
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          ref: refs/pull/${{ steps.pr.outputs.number }}/head
+          persist-credentials: false
+      - name: Apply lintrunner fixes
+        if: steps.download.outcome == 'success' && steps.diff.outputs.has_changes == 'true'
+        run: git apply pr_artifacts/lintrunner.diff
+      - name: Suggest changes
+        if: steps.download.outcome == 'success' && steps.diff.outputs.has_changes == 'true'
+        uses: parkerbxyz/suggest-changes@bd099ea0d10f0e9efeb9e46d604bbe6d7a80bc34
+        with:
+          comment: 'You can commit the suggested changes from lintrunner.'