diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml
index 285f726..b1a8247 100644
--- a/.github/workflows/cla.yaml
+++ b/.github/workflows/cla.yaml
@@ -22,12 +22,17 @@ jobs:
         # still on Node 20 (deprecated 2026-06-02). This fork bumps to Node 24
         # and adds: an impersonation guard (PR opener must be an author or
         # co-author of at least one commit), Co-authored-by trailer support,
-        # and actionable unlinked-email guidance.
-        uses: iainmcgin/cla-github-action@1ecf0d2f19b665777f5b0cda149104238cc6c493
+        # email-based allowlist matching, and actionable unlinked-email
+        # guidance.
+        uses: iainmcgin/cla-github-action@73f6929f697892cfd60edf04bae4f28ac2909b08
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           path-to-document: "https://github.com/${{ github.repository }}/blob/main/CLA.md"
           path-to-signatures: "signatures/cla.json"
           branch: "cla-signatures"
-          allowlist: "iainmcgin,asacamano,dependabot[bot],github-actions[bot],renovate[bot]"
+          # noreply@anthropic.com is the email AI assistants use on
+          # Co-authored-by trailers (e.g. Claude). Allowlisting it suppresses
+          # the synthetic co-author from the CLA check; the PR opener still
+          # has to sign.
+          allowlist: "iainmcgin,asacamano,dependabot[bot],github-actions[bot],renovate[bot],noreply@anthropic.com"