fix(ci): compile scope globs exactly as the engine does

[sileht]

mergify ci scopes matched scope globs with globset, the engine with
its own brace expansion plus Python's glob.translate. Even with *
bounded and ? matching characters, the two dialects still disagreed on
ASCII patterns, so one config could select different files in CI and in
the merge queue:

• [^x] negated in globset, it is a class holding ^ and x for the
  engine;
• a class spanning a separator (x[a/b]y) was a class in globset, the
  engine splits the pattern on separators first, so it is literal text;
• \ was an escape in globset, it is a path separator for the engine.

Replace globset with engine_glob, a port of the engine's
globs.expand_braces and of glob.translate(recursive=True, include_hidden=True, seps=["/", "\\"]), emitting a regex crate
pattern. engine_glob_cases.json holds patterns and paths with the
verdicts the engine itself gives, generated by engine_glob_cases.py
from the engine's globs.py on Python 3.14 with the regex module,
and a test checks this side reproduces every one. A local run of the
same comparison over ~190,000 random pattern/path pairs found no other
difference.

The one deliberate divergence: the regex module reads [:name:]
inside a set as a POSIX class, which swallows the glob class's closing
bracket. The engine then rejects the pattern or matches something
meaningless; the CLI refuses it as a configuration error. A regex that
fails to compile is a bug in the port, so it is reported as such rather
than as the user's config.

This also matches ? and [...] per character on non-ASCII paths,
which #1883 (MRGFY-10066)
did on top of globset; that pull request is closed in favour of this one.

Fixes MRGFY-10075
Fixes MRGFY-10066

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

[mergify]

Merge Protections

🟢 All 6 merge protections satisfied — ready to merge.

Show 6 satisfied protections

🟢 🤖 Continuous Integration

• all of:
  • check-success=ci-gate

🟢 👀 Review Requirements

• any of:
  • #approved-reviews-by>=2
  • author = dependabot[bot]
  • author = mergify-ci-bot
  • author = renovate[bot]

🟢 Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?:

🟢 🔎 Reviews

• #changes-requested-reviews-by = 0
• #review-requested = 0
• #review-threads-unresolved = 0

🟢 📕 PR description

• body ~= (?ms:.{48,})

🟢 🚦 Auto-queue

When all merge protections are satisfied, this pull request will be queued automatically.

[Copilot]

Copilot review overview

🔵 Needs a closer look

The cross-language compiler controls CI job selection, so its engine-parity guarantees warrant final human validation.

Review effort: Balanced
Findings: None

What changed in this PR

Aligns mergify ci scopes glob matching with the engine so CI and the merge queue select files consistently.

Changes:

• Replaces globset with a compiler supporting engine brace, separator, and Unicode semantics, with explicit POSIX-class rejection.
• Adds engine-generated parity fixtures and a regeneration script.

File	Description
crates/​mergify-ci/​src/​scopes_detect/​mod.rs	Registers the compiler module.
crates/​mergify-ci/​src/​scopes_detect/​matching.rs	Integrates regex matching and compiler errors.
crates/​mergify-ci/​src/​scopes_detect/​engine_glob.rs	Implements engine-compatible translation and parity tests.
crates/​mergify-ci/​src/​scopes_detect/​engine_glob_cases.py	Generates expected engine verdicts.
crates/​mergify-ci/​src/​scopes_detect/​engine_glob_cases.json	Records matching and rejection cases.
crates/​mergify-ci/​src/​scopes_detect/​changed_files.rs	Updates Unicode-matching documentation only.
crates/​mergify-ci/​Cargo.toml	Replaces globset with regex.
Cargo.toml	Removes the workspace globset dependency.
Cargo.lock	Updates dependencies accordingly.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[sileht]

Revision history

#	Type	Changes	Reason	Date
1	initial	706de25		2026-10-06 05:50 UTC
2	rebase	706de25 → a639e45 (rebase only)		2026-10-06 05:50 UTC

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-10-06 07:39 UTC · Rule: default · triggered by merge protections
• ✅ Checks skipped · PR is already up-to-date
• ✅ Merged — 2026-10-06 07:39 UTC · at 1d677f94d7fb07502ac738c072de0fc7973bb337 · squash

This pull request spent 11 seconds in the queue, including 1 second running CI.

Required conditions to merge

• github-review-approved [🛡 GitHub branch protection]
  • fix(ci): compile scope globs exactly as the engine does #1888
• github-review-approved [🛡 GitHub repository ruleset rule Require pull request for default branch]
  • fix(ci): compile scope globs exactly as the engine does #1888
• all of [🛡 Merge Protections rule Enforce conventional commit]:
  • title ~= ^(fix|feat|internal|docs|style|refactor|perf|test|build|ci|chore|revert|ui)(?:\(.+\))?!?:
    • fix(ci): compile scope globs exactly as the engine does #1888
• all of [🛡 Merge Protections rule 👀 Review Requirements]:
  • any of:
    • #approved-reviews-by>=2
      • fix(ci): compile scope globs exactly as the engine does #1888
    • author = dependabot[bot]
      • fix(ci): compile scope globs exactly as the engine does #1888
    • author = mergify-ci-bot
      • fix(ci): compile scope globs exactly as the engine does #1888
    • author = renovate[bot]
      • fix(ci): compile scope globs exactly as the engine does #1888
• all of [🛡 Merge Protections rule 📕 PR description]:
  • body ~= (?ms:.{48,})
    • fix(ci): compile scope globs exactly as the engine does #1888
• all of [🛡 Merge Protections rule 🔎 Reviews]:
  • #changes-requested-reviews-by = 0
    • fix(ci): compile scope globs exactly as the engine does #1888
  • #review-requested = 0
    • fix(ci): compile scope globs exactly as the engine does #1888
  • #review-threads-unresolved = 0
    • fix(ci): compile scope globs exactly as the engine does #1888
• all of [🛡 Merge Protections rule 🤖 Continuous Integration]:
  • all of:
    • check-success=ci-gate