fix: implement PR commit message retrieval and validation

.pre-commit-config.yaml

@@ -1,5 +1,6 @@
 # https://pre-commit.com/
 ci:
+    autofix_prs: true
     autofix_commit_msg: 'ci: auto fixes from pre-commit.com hooks'
     autoupdate_commit_msg: 'ci: pre-commit autoupdate'
 

main.py

@@ -36,6 +36,30 @@ def log_env_vars():
     print(f"PR_COMMENTS = {PR_COMMENTS}\n")
 
 
+def get_pr_commit_messages() -> list[str]:
+    """Get all commit messages for the current PR (pull_request event only).
+
+    In a pull_request event, actions/checkout checks out a synthetic merge
+    commit (HEAD = merge of PR branch into base). HEAD^1 is the base branch
+    tip, HEAD^2 is the PR branch tip. So HEAD^1..HEAD^2 gives all PR commits.
+    """
+    if os.getenv("GITHUB_EVENT_NAME", "") != "pull_request":
+        return []
+    try:
+        result = subprocess.run(
+            ["git", "log", "--pretty=format:%B%x00", "HEAD^1..HEAD^2"],
+            stdout=subprocess.PIPE,
+            stderr=subprocess.PIPE,
+            encoding="utf-8",
+            check=False,
+        )
+        if result.returncode == 0 and result.stdout:
+            return [m.rstrip("\n") for m in result.stdout.split("\x00") if m.rstrip("\n")]
+    except Exception:
+        pass
+    return []
+
+
 def run_commit_check() -> int:
     """Runs the commit-check command and logs the result."""
     args = [
@@ -58,13 +82,43 @@ def run_commit_check() -> int:
         if value == "true"
     ]
 
-    command = ["commit-check"] + args
-    print(" ".join(command))
+    total_rc = 0
     with open("result.txt", "w") as result_file:
-        result = subprocess.run(
+        if MESSAGE == "true":
+            pr_messages = get_pr_commit_messages()
+            if pr_messages:
+                # In PR context: check each commit message individually to avoid
+                # only validating the synthetic merge commit at HEAD.
+                for msg in pr_messages:
+                    result = subprocess.run(
+                        ["commit-check", "--message"],
+                        input=msg,
+                        stdout=result_file,
+                        stderr=subprocess.PIPE,
+                        text=True,
+                        check=False,
+                    )
+                    total_rc += result.returncode
+
+                # Run non-message checks (branch, author) once
+                other_args = [a for a in args if a != "--message"]
+                if other_args:
+                    command = ["commit-check"] + other_args
+                    print(" ".join(command))
+                    other_result = subprocess.run(
+                        command, stdout=result_file, stderr=subprocess.PIPE, check=False
+                    )
+                    total_rc += other_result.returncode
+
+                return total_rc
+
+        # Non-PR context or message disabled: run all checks at once
+        command = ["commit-check"] + args
+        print(" ".join(command))
+        default_result = subprocess.run(
             command, stdout=result_file, stderr=subprocess.PIPE, check=False
         )
-        return result.returncode
+        return default_result.returncode
 
 
 def read_result_file() -> str | None:

requirements.txt

@@ -1,5 +1,5 @@
 # Install commit-check CLI
 # For details please see: https://github.com/commit-check/commit-check
-commit-check==2.4.2
+commit-check==2.4.3
 # Interact with the GitHub API.
 PyGithub==2.8.1