From 32098574a48e5cdfd4d8f787cfac8a5a1453444d Mon Sep 17 00:00:00 2001 From: ajianaz Date: Sat, 29 Aug 2026 18:45:14 +0700 Subject: [PATCH] fix(ci): CLA check skips bot PRs with exact allowlist MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Same fix as uteke#1148 / vecq#14: dependabot PRs report their login as 'dependabot[bot]' in github.event.pull_request.user.login (REST form), so bot PRs (e.g. #10) failed cla-check. This workflow version had no bot allowlist at all — add the job-level skip with exact bot logins plus legacy app/ forms as fallback. --- .github/workflows/cla-check.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/cla-check.yml b/.github/workflows/cla-check.yml index f0fa96a..1afc8d5 100644 --- a/.github/workflows/cla-check.yml +++ b/.github/workflows/cla-check.yml @@ -11,6 +11,7 @@ permissions: jobs: cla-check: + if: "!contains(fromJSON('[\"dependabot[bot]\", \"renovate[bot]\", \"github-actions[bot]\", \"app/dependabot\", \"app/renovate\"]'), github.event.pull_request.user.login)" runs-on: ubuntu-latest steps: - name: Fetch & check CLA signature