From 0eb554a8bbea70c6ec0a44bd7a384bc5ba43d2b5 Mon Sep 17 00:00:00 2001 From: Iain McGinniss <309153+iainmcgin@users.noreply.github.com> Date: Thu, 30 Apr 2026 23:40:43 +0000 Subject: [PATCH] ci: bump cla-github-action to 73f6929 (email-based allowlist) The new revision adds email-based matching to the allowlist so that synthetic Co-authored-by trailers from AI assistants can be filtered without tracking changing display names. Allowlist 'noreply@anthropic.com' to suppress the AI co-author identity used by Claude and similar tools; the PR opener still has to sign the CLA. --- .github/workflows/cla.yaml | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/.github/workflows/cla.yaml b/.github/workflows/cla.yaml index 285f726..b1a8247 100644 --- a/.github/workflows/cla.yaml +++ b/.github/workflows/cla.yaml @@ -22,12 +22,17 @@ jobs: # still on Node 20 (deprecated 2026-06-02). This fork bumps to Node 24 # and adds: an impersonation guard (PR opener must be an author or # co-author of at least one commit), Co-authored-by trailer support, - # and actionable unlinked-email guidance. - uses: iainmcgin/cla-github-action@1ecf0d2f19b665777f5b0cda149104238cc6c493 + # email-based allowlist matching, and actionable unlinked-email + # guidance. + uses: iainmcgin/cla-github-action@73f6929f697892cfd60edf04bae4f28ac2909b08 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: path-to-document: "https://github.com/${{ github.repository }}/blob/main/CLA.md" path-to-signatures: "signatures/cla.json" branch: "cla-signatures" - allowlist: "iainmcgin,asacamano,dependabot[bot],github-actions[bot],renovate[bot]" + # noreply@anthropic.com is the email AI assistants use on + # Co-authored-by trailers (e.g. Claude). Allowlisting it suppresses + # the synthetic co-author from the CLA check; the PR opener still + # has to sign. + allowlist: "iainmcgin,asacamano,dependabot[bot],github-actions[bot],renovate[bot],noreply@anthropic.com"