From a519d169dd68c415f8fc33517dca54358972dccb Mon Sep 17 00:00:00 2001 From: James Maes Date: Sat, 10 Oct 2026 10:00:10 -0500 Subject: [PATCH] ci(release): sign off the generated packaging commit The packages job opens the build(packaging) pull request through peter-evans/create-pull-request, whose commit had no Signed-off-by trailer, so the standards' pr / dco gate rejected the first real one (#80 for v1.0.1). Author and committer are now the same identity (the actor who pushed the tag) and the action signs off as that committer, which is what the DCO check compares against. Closes #81 Co-Authored-By: Claude Fable 5.1 Signed-off-by: James Maes --- .github/workflows/release.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9f44579..010bce4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -180,6 +180,12 @@ jobs: base: main branch: packaging/v${{ needs.release.outputs.version }} delete-branch: true + # The pr / dco gate wants a Signed-off-by whose email matches the commit + # author, so author and committer are the same identity (the actor who + # pushed the tag) and the action signs off as that committer (#81). + author: ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com> + committer: ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor }}@users.noreply.github.com> + signoff: true commit-message: 'build(packaging): point the Scoop and Chocolatey manifests at v${{ needs.release.outputs.version }}' title: 'build(packaging): point the Scoop and Chocolatey manifests at v${{ needs.release.outputs.version }}' body: | -- 2.54.0