Skip to content

ci: bump cla-github-action to 1ecf0d2f (impersonation guard, co-author trailers) #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
iainmcgin merged 1 commit into from
Apr 30, 2026
Merged

ci: bump cla-github-action to 1ecf0d2f (impersonation guard, co-author trailers) #73

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions .github/workflows/cla.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,10 +19,11 @@ jobs:
- name: "CLA Assistant"
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
# Upstream contributor-assistant/github-action was archived 2026-03-23
# still on Node 20 (deprecated 2026-06-02). This fork bumps the
# runtime to Node 24 and fixes a false-failure where the check
# would go red after logging "All contributors have signed".
uses: iainmcgin/cla-github-action@eeb7f3ffa305b600c6e873578b9ea78ca11a5f3e # v2.7.1
# still on Node 20 (deprecated 2026-06-02). This fork bumps to Node 24
# and adds: an impersonation guard (PR opener must be an author or
# co-author of at least one commit), Co-authored-by trailer support,
# and actionable unlinked-email guidance.
uses: iainmcgin/cla-github-action@1ecf0d2f19b665777f5b0cda149104238cc6c493
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down
Loading