ci: bump pnpm/action-setup from 4 to 6 #6
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CLA Assistant | |
| # Gates merges on a signed Contributor License Agreement. | |
| # | |
| # Uses CLA Assistant Lite (contributor-assistant/github-action): signatures are | |
| # stored as a JSON file committed to a branch of THIS repo (no third-party | |
| # service holds the data). Contributors sign by commenting the configured phrase | |
| # on their PR; the action records it and flips the check green. | |
| # | |
| # SETUP REQUIRED before this can work: | |
| # 1. Create a token with repo write access and add it as the `PERSONAL_ACCESS_TOKEN` | |
| # secret (a fine-grained PAT or the release GitHub App token both work). The | |
| # default GITHUB_TOKEN is also passed, but a PAT is needed to commit the | |
| # signature file back to the repo. | |
| # 2. Create the `cla-signatures` branch (e.g. an empty orphan branch) so the | |
| # action has somewhere to write `signatures/version1/cla.json`. | |
| # 3. Finalise CLA.md (legal review) — it's the document contributors agree to. | |
| on: | |
| issue_comment: | |
| types: [created] | |
| pull_request_target: | |
| types: [opened, closed, synchronize] | |
| permissions: | |
| actions: write | |
| contents: write | |
| pull-requests: write | |
| statuses: write | |
| jobs: | |
| cla: | |
| runs-on: ubuntu-latest | |
| # Only act on the signature comment or on PR events (not every comment). | |
| if: (github.event.issue.pull_request && contains(github.event.comment.body, 'I have read the CLA Document and I hereby sign the CLA')) || github.event_name == 'pull_request_target' | |
| steps: | |
| - uses: contributor-assistant/github-action@v2.6.1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }} | |
| with: | |
| path-to-signatures: "signatures/version1/cla.json" | |
| path-to-document: "https://github.com/devicecloud-dev/dcd-cli/blob/dev/CLA.md" | |
| branch: "cla-signatures" | |
| # PR target branches the CLA applies to. | |
| allowlist: dependabot[bot],renovate[bot],*[bot] | |
| # Customise the bot's prompts if desired: | |
| custom-notsigned-prompt: "Thanks for your contribution! Please sign our Contributor License Agreement before we can merge. Comment the line below to sign:" | |
| custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA" | |
| custom-allsigned-prompt: "All contributors have signed the CLA. ✍️ ✅" |