From 18ab6cbba715064bf35174f5a44c63524ba32b33 Mon Sep 17 00:00:00 2001
From: Shivam Saini <51438830+shivamsn97@users.noreply.github.com>
Date: Thu, 6 Aug 2026 19:35:41 +0530
Subject: [PATCH] ci: pin ruff so the lint gate is reproducible
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The lint job installed ruff unpinned, so it ran whatever version was
newest at the time. ruff 0.16 enables rules that did not exist at 0.6 and
reports 126 findings on an untouched tree, which turned the gate red on
main with no change to the code — and made every open PR look broken.

Pins the range the framework repo already uses for its dev dependency.
Adopting a newer ruff is worth doing, but as its own change, alongside
the findings it reports.
---
 .github/workflows/ci.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5c06355..7d11933 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,7 +16,12 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-      - run: pip install ruff
+      # Pinned deliberately: an unpinned install takes whatever ruff is
+      # newest, so a release that adds rules turns this gate red with no
+      # change to the code (0.16 raised 126 findings on an untouched tree).
+      # Matches the framework repo's dev pin; bump it as its own change,
+      # together with the findings the new version reports.
+      - run: pip install "ruff>=0.6,<0.7"
       - run: ruff check packages/pyxle-db/pyxle_db packages/pyxle-auth/pyxle_auth packages/pyxle-mail/pyxle_mail
 
   test: