From bdbfa285dbc9bbf5ca60c6f92eab68798715d731 Mon Sep 17 00:00:00 2001
From: Iain McGinniss <309153+iainmcgin@users.noreply.github.com>
Date: Thu, 7 May 2026 17:36:14 +0000
Subject: [PATCH] ci(cla): bump cla-github-action pin to v3.0.0

iainmcgin/cla-github-action now has a tagged release (v3.0.0); update the
SHA pin to the release commit and annotate with the tag name so auditors
can cross-reference the pinned SHA against a published release.

Diff from the previous pin (5b54183 -> 3e58ace) is the CHANGELOG release
note only; no code change.
---
 .github/workflows/cla.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml
index 8754218..9d0e2f3 100644
--- a/.github/workflows/cla.yaml
+++ b/.github/workflows/cla.yaml
@@ -24,7 +24,7 @@ jobs:
         # co-author of at least one commit), Co-authored-by trailer support,
         # email-based allowlist matching, automatic retry of transient
         # GitHub 5xx errors, and actionable unlinked-email guidance.
-        uses: iainmcgin/cla-github-action@5b54183037a58ba5ade5ea9b3e1872d969730f77 # master (sha-pinned)
+        uses: iainmcgin/cla-github-action@3e58ace6af840f66fcd80f68c08d76559140df5e # v3.0.0 (sha-pinned)
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with: