The packages job's build(packaging): … pull request is generated by peter-evans/create-pull-request, and its commit carried no Signed-off-by: trailer, so the standards' pr / dco gate (which needs a sign-off matching the commit author) failed on the first real one, #80 for v1.0.1. The action now sets author and committer to the same identity (the actor who pushed the tag, <id>+<login>@users.noreply.github.com) and signoff: true, so the trailer it adds matches the author the check compares against.
Closes#81 (part of #62). #80 itself needs its commit amended with a sign-off (or an admin merge); this PR fixes every later release.
How it was tested
actionlint clean.
The three inputs exist on the pinned create-pull-request v8.1.1 (checked action.yml at the SHA).
Not exercised on a tag: the next stable release is the first run.
## What
The `packages` job's `build(packaging): …` pull request is generated by `peter-evans/create-pull-request`, and its commit carried no `Signed-off-by:` trailer, so the standards' `pr / dco` gate (which needs a sign-off matching the commit author) failed on the first real one, #80 for v1.0.1. The action now sets `author` and `committer` to the same identity (the actor who pushed the tag, `<id>+<login>@users.noreply.github.com`) and `signoff: true`, so the trailer it adds matches the author the check compares against.
Closes #81 (part of #62). #80 itself needs its commit amended with a sign-off (or an admin merge); this PR fixes every later release.
## How it was tested
- `actionlint` clean.
- The three inputs exist on the pinned `create-pull-request` v8.1.1 (checked `action.yml` at the SHA).
- Not exercised on a tag: the next stable release is the first run.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
What
The
packagesjob'sbuild(packaging): …pull request is generated bypeter-evans/create-pull-request, and its commit carried noSigned-off-by:trailer, so the standards'pr / dcogate (which needs a sign-off matching the commit author) failed on the first real one, #80 for v1.0.1. The action now setsauthorandcommitterto the same identity (the actor who pushed the tag,<id>+<login>@users.noreply.github.com) andsignoff: true, so the trailer it adds matches the author the check compares against.Closes #81 (part of #62). #80 itself needs its commit amended with a sign-off (or an admin merge); this PR fixes every later release.
How it was tested
actionlintclean.create-pull-requestv8.1.1 (checkedaction.ymlat the SHA).🤖 Generated with Claude Code