chore(deps): bump traefik from v3.7.11 to v3.7.12 in /compose/production/traefik #316
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: "CLA Assistant" | |
| on: | |
| issue_comment: | |
| types: [created] | |
| pull_request_target: | |
| types: [opened, closed, synchronize] | |
| # Explicit permissions, in case the repo's default GITHUB_TOKEN permissions are read-only. | |
| permissions: | |
| actions: write | |
| contents: write # signatures are committed to the `cla-signatures` branch below | |
| pull-requests: write | |
| statuses: write | |
| jobs: | |
| CLAAssistant: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "CLA Assistant" | |
| if: > | |
| (github.event.comment.body == 'recheck' || | |
| github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || | |
| github.event_name == 'pull_request_target' | |
| # Pinned by commit SHA (tag v2.6.1), not a moving tag/branch ref — this | |
| # project is archived/read-only upstream, so treat the action itself as | |
| # a frozen dependency. https://github.com/contributor-assistant/github-action | |
| uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| path-to-signatures: "signatures/version1/cla.json" | |
| path-to-document: "https://github.com/Open-Source-Legal/OpenContracts/blob/main/CLA.md" | |
| # `main` is a protected branch (required PR reviews), and this action | |
| # signs contributors by committing directly to `branch` — protected | |
| # branches reject that push. Signatures live on a dedicated, | |
| # unprotected `cla-signatures` branch instead. One-time setup: create | |
| # an empty `cla-signatures` branch on the remote before this workflow | |
| # can commit a signature for the first time. | |
| branch: "cla-signatures" | |
| # Automated dependency-bump PRs (Dependabot) aren't a human agreeing | |
| # to anything — exempt them rather than block routine bumps. | |
| # | |
| # `claude` is the commit identity Claude Code's cloud/background | |
| # agent uses when it pushes directly to `claude/*` branches (see | |
| # CLAUDE.md's "Never credit Claude" rule — that governs interactive | |
| # sessions; this is the separate cloud-agent identity). Copyright in | |
| # those commits vests in whoever directed the tool — the repo | |
| # maintainer, who has already signed (see signatures/version1/cla.json | |
| # on the cla-signatures branch) — not in the automation account | |
| # itself, so it isn't a third party asserting authorship and doesn't | |
| # need its own signature. Exact username, no wildcard: a `claude*` | |
| # pattern would also allowlist any future unrelated `claude-...` | |
| # account on this legal gate. | |
| allowlist: dependabot[bot],claude |