check for binaries in PR diff

[Soph]

Entire-Checkpoint: 3bec2ffc341d

---

Note

Medium Risk
Adds a new CI workflow that can block pull requests if the binary-size detection misclassifies files or the base/head SHAs aren’t available in the checkout, potentially causing unexpected PR failures.

Overview
Introduces a new GitHub Actions workflow (PR Binary Size) that runs on pull requests (and manually) to detect newly added/modified binary files over a configurable size limit (default 1 MiB).

Adds scripts/check-pr-binaries.sh, which diffs the PR range against the base SHA, identifies binary diffs via git diff --numstat, checks the blob size at HEAD, and fails the job with a clear error listing any oversized files.

^{Reviewed by Cursor Bugbot for commit 6d51671. Configure here.}

[Copilot]

Pull request overview

Adds a GitHub Actions safeguard to detect oversized binary files introduced by a pull request, using a repo script that inspects git diff output and fails the workflow when binaries exceed a size limit.

Changes:

• Introduce scripts/check-pr-binaries.sh to detect binary diffs and enforce a maximum blob size.
• Add .github/workflows/pr-binary-size.yml to run the binary-size check on PRs (and manual dispatch).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
scripts/check-pr-binaries.sh	Implements binary detection via git diff --numstat and checks blob sizes at the head ref.
.github/workflows/pr-binary-size.yml	Runs the script in CI for PRs with a 1MB default size limit.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 6d51671. Configure here.}