Skip to content

⬆️ Updates GitPython to v3.2.1 [SECURITY] #5795

⬆️ Updates GitPython to v3.2.1 [SECURITY]

⬆️ Updates GitPython to v3.2.1 [SECURITY] #5795

Workflow file for this run

name: "CLA Assistant"

Check warning on line 1 in .github/workflows/cla.yml

View workflow run for this annotation

GitHub Actions / CLA Assistant

Workflow execution policy warning (evaluate mode)

On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
on:
issue_comment:
types: [created]
pull_request_target:
types: [opened,closed,synchronize]
jobs:
CLAssistant:
runs-on: ubuntu-latest
steps:
- name: "CLA Assistant"
if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
uses: cla-assistant/github-action@v2.1.3-beta
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
PERSONAL_ACCESS_TOKEN: ${{ secrets.PERSONAL_ACCESS_TOKEN }}
with:
path-to-signatures: 'cla/signatures.json'
path-to-document: 'https://github.com/AlexRogalskiy/java-patterns/blob/master/cla/README.md'
# branch should not be protected
branch: 'master'
allowlist: imgbot,dependabot*