Require pre-commit for inferred backports (#7355)

# Description

Require inference-resolved release backports to pass the repository
pre-commit suite before the workflow can commit the resolution or open a
draft PR. The resolver prompt now calls out the pre-commit requirement.

If hooks make automatic fixes, the workflow stages only paths from the
original source PR, revalidates the candidate scope, and runs pre-commit
again. Any remaining failure stops the backport without creating a PR.

## Type of change

- Bug fix (non-breaking change which fixes an issue)

## Release backport

- [ ] <!-- backport-active-release --> Backport this pull request to the
active release branch after it merges into `develop`

Not applicable for this default-branch PR; a matching `develop` PR
carries the change to the active release branch.

## Validation

- `uv run isaaclab -f`
- Parsed the workflow YAML
- Checked the embedded pre-commit shell block with `bash -n`

## Checklist

- [x] I have read and understood the contribution guidelines
- [x] I have run the pre-commit checks
- [x] My changes generate no new warnings
- [x] No documentation, unit-test, or package changelog change is
required for this workflow-only fix
- [x] My name already exists in `CONTRIBUTORS.md`

Author: kellyguo11

.github/scripts/resolve_backport_conflicts.py

@@ -203,7 +203,7 @@ def _completion_payload(model: str, context: dict[str, Any]) -> dict[str, Any]:
 
 Return a complete final UTF-8 file body for every required write action. Return empty content for every required delete
 action. Use exactly the paths and required actions supplied. Do not add cleanup or changes unrelated to the source
-commit.
+commit. The final files must pass the repository's pre-commit hooks.
 
 Return only one JSON object without Markdown. It must satisfy this JSON Schema exactly:
 {json.dumps(schema, ensure_ascii=False, separators=(",", ":"))}"""

.github/workflows/backport-release-3.0.yml

@@ -245,6 +245,40 @@ jobs:
             --model "$primary_model" \
             --model "$fallback_model"
 
+      - name: Set up Python for inferred-resolution checks
+        if: steps.cherry_pick.outputs.conflict == 'true'
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # v5
+        with:
+          python-version: "3.12"
+
+      - name: Run pre-commit on inferred resolution
+        if: steps.cherry_pick.outputs.conflict == 'true'
+        working-directory: repository
+        env:
+          SKIP: check-changelog-fragments
+          SOURCE_PARENT: ${{ steps.source.outputs.source_parent }}
+          SOURCE_SHA: ${{ github.event.pull_request.merge_commit_sha }}
+          TARGET_SHA: ${{ steps.source.outputs.target_sha }}
+        run: |
+          set -euo pipefail
+          python -m pip install pre-commit==4.6.2
+
+          set +e
+          pre-commit run --show-diff-on-failure --color=always --all-files
+          pre_commit_status=$?
+          set -e
+
+          if [ "$pre_commit_status" -ne 0 ]; then
+            while IFS= read -r -d '' path; do
+              git add --all -- "$path"
+            done < <(git diff --no-renames --name-only -z "$SOURCE_PARENT" "$SOURCE_SHA" --)
+            python3 ../automation/.github/scripts/backport.py validate-candidate \
+              --source_parent "$SOURCE_PARENT" \
+              --source "$SOURCE_SHA" \
+              --target "$TARGET_SHA"
+            pre-commit run --show-diff-on-failure --color=always --all-files
+          fi
+
       - name: Validate and commit inferred resolution
         if: steps.cherry_pick.outputs.conflict == 'true'
         working-directory: repository