Repository navigation
chore(web)(deps): bump the web-minor-patch group in /web with 20 updates #211
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # CLA gate: every outside contributor signs CLA.md once, by comment, on | ||
|
Check warning on line 1 in .github/workflows/cla.yml
|
||
| # their first pull request. contributor-assistant records the signature | ||
| # in a JSON file on the `cla-signatures` branch (the `main` ruleset | ||
| # forbids direct pushes, so signatures cannot live on `main`). | ||
| # | ||
| # Trigger choice — `pull_request_target` is safe HERE because this job | ||
| # never checks out or executes code from the pull request; the action | ||
| # only calls the GitHub API. Do not add an `actions/checkout` of the PR | ||
| # head to this workflow. | ||
| # | ||
| # The `cla` job is a required status in the `main` ruleset, next to | ||
| # `CI Gate`. A required check must also report on the merge queue's | ||
| # temporary branch, or every queue entry waits for it until the queue | ||
| # times out. The `merge_group` trigger makes the job report there. The | ||
| # action step does not run for that event: the pull request already | ||
| # passed the check before it entered the queue. | ||
| name: CLA | ||
| on: | ||
| issue_comment: | ||
| types: [created] | ||
| pull_request_target: | ||
| types: [opened, closed, synchronize] | ||
| merge_group: | ||
| permissions: | ||
| actions: write | ||
| contents: write | ||
| pull-requests: write | ||
| statuses: write | ||
| jobs: | ||
| cla: | ||
| if: >- | ||
| (github.event.comment.body == 'recheck' || | ||
| github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || | ||
| github.event_name == 'pull_request_target' || | ||
| github.event_name == 'merge_group' | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: CLA assistant | ||
| if: github.event_name != 'merge_group' | ||
| uses: contributor-assistant/github-action@v2.6.1 | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | ||
| with: | ||
| path-to-signatures: signatures/version1/cla.json | ||
| path-to-document: https://github.com/cortexapps/engrams/blob/main/CLA.md | ||
| branch: cla-signatures | ||
| # Org bots never sign. Members of cortexapps sign once like | ||
| # everyone else; their employer terms are covered by section 4. | ||
| allowlist: dependabot[bot],engrams-agent[bot],engrams-automerge[bot],engrams-bot[bot] | ||
| create-file-commit-message: "chore(cla): create the signature file" | ||
| signed-commit-message: "chore(cla): $contributorName signed the CLA in #$pullRequestNo" | ||
| custom-notsigned-prcomment: >- | ||
| Thank you for the pull request. Before we can merge it, please read | ||
| [CLA.md](https://github.com/cortexapps/engrams/blob/main/CLA.md) and sign it by | ||
| posting the comment below. This is a license, not a copyright transfer; you keep | ||
| ownership of your work. | ||
| lock-pullrequest-aftermerge: false | ||
