From e58618b93d344426511961e9ec5903027e975b10 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Oct 2025 20:12:19 +0000 Subject: [PATCH 1/2] Bump fsfe/reuse-action from 5.0.0 to 6.0.0 Bumps [fsfe/reuse-action](https://github.com/fsfe/reuse-action) from 5.0.0 to 6.0.0. - [Release notes](https://github.com/fsfe/reuse-action/releases) - [Commits](https://github.com/fsfe/reuse-action/compare/bb774aa972c2a89ff34781233d275075cbddf542...676e2d560c9a403aa252096d99fcab3e1132b0f5) --- updated-dependencies: - dependency-name: fsfe/reuse-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/compliance.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml index 1f10cc3..8822bfa 100644 --- a/.github/workflows/compliance.yml +++ b/.github/workflows/compliance.yml @@ -33,7 +33,7 @@ jobs: fetch-depth: 1 - name: REUSE Compliance Check - uses: fsfe/reuse-action@bb774aa972c2a89ff34781233d275075cbddf542 #v5.0.0 + uses: fsfe/reuse-action@676e2d560c9a403aa252096d99fcab3e1132b0f5 #v6.0.0 CheckSignedOffCommit: if: > From 73f467802d59c192472fafb2cd060423d6e1ae30 Mon Sep 17 00:00:00 2001 From: Alexander Adam Date: Mon, 6 Oct 2025 23:35:25 +0200 Subject: [PATCH 2/2] Simplify bot filter logic in `compliance.yml` workflow - Consolidated checks for bot commits using `contains` to reduce redundancy. - Added inline comments and logic to skip processing bot/web-flow commits in compliance checks. Signed-off-by: Alexander Adam --- .github/workflows/compliance.yml | 25 +++++++++++++++++++++---- 1 file changed, 21 insertions(+), 4 deletions(-) diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml index 8822bfa..156ce92 100644 --- a/.github/workflows/compliance.yml +++ b/.github/workflows/compliance.yml @@ -38,10 +38,9 @@ jobs: CheckSignedOffCommit: if: > github.event_name == 'push' && - !startsWith(github.actor, 'dependabot') && - github.event.pusher.name != 'web-flow' && - github.event.pusher.name != 'github-actions[bot]' && - github.event.pusher.name != 'github-merge-queue[bot]' + !contains(github.actor, '[bot]') && + !contains(github.event.pusher.name, '[bot]') && + github.event.pusher.name != 'web-flow' runs-on: ubuntu-latest permissions: contents: read @@ -81,6 +80,15 @@ jobs: while read -r sha do [ -n "$sha" ] || continue + + # Skip commits from bots + committer_name=`git log --format=%cn -n 1 "$sha"` + if echo "$committer_name" | grep -Fq '[bot]' || [ "$committer_name" = "web-flow" ] + then + echo "Skipping bot/web-flow commit $sha from $committer_name" + continue + fi + msg=`git log --format=%B -n 1 "$sha"` if ! printf '%s' "$msg" | grep -Eqi '^[[:space:]]*Signed[- ]off[- ]by:' @@ -136,6 +144,15 @@ jobs: while read -r sha do [ -n "$sha" ] || continue + + # Skip commits from bots + committer_name=`git log --format=%cn -n 1 "$sha"` + if echo "$committer_name" | grep -Fq '[bot]' || [ "$committer_name" = "web-flow" ] + then + echo "Skipping bot/web-flow commit $sha from $committer_name" + continue + fi + msg=`git log --format=%B -n 1 "$sha"` if ! printf '%s' "$msg" | grep -Eqi '^[[:space:]]*Signed[- ]off[- ]by:'