cyberchef/.github/workflows/cla-close-stale.yml
dependabot[bot] 67823b6057
chore (deps): bump the actions-dependencies group across 1 directory with 6 updates
Bumps the actions-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/stale](https://github.com/actions/stale) | `10.3.0` | `10.4.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `6.1.0` | `6.2.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` |



Updates `actions/stale` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](eb5cf3af3a...1e223db275)

Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](d7f5e7f509...bb05f3f551)

Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](06116385d9...96fe6ef7f3)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](f9f3042f7e...53b7df96c9)

Updates `docker/metadata-action` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](80c7e94dd9...dc80280410)

Updates `docker/login-action` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](650006c6eb...af1e73f918)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-14 11:58:31 +00:00

63 lines
2.1 KiB
YAML

name: Close Stale Unsigned CLA PRs
on:
schedule:
# Runs daily at 01:30 UTC.
- cron: '30 1 * * *'
workflow_dispatch: {}
permissions:
contents: read
pull-requests: write
issues: write
# Configurable intervals (days).
# DAYS_BEFORE_WARNING = grace period before the warning comment.
# DAYS_BEFORE_CLOSURE = further period after the warning before closing.
env:
DAYS_BEFORE_WARNING: 7
DAYS_BEFORE_CLOSURE: 21
jobs:
stale:
runs-on: ubuntu-latest
steps:
- name: Close stale unsigned-CLA PRs
uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 #v10.4.0
with:
# ---- Guards: only act on PRs carrying the CLA label ----
only-labels: 'awaiting cla'
# Never touch issues — PRs only.
days-before-issue-stale: -1
days-before-issue-close: -1
# ---- Timing ----
# DAYS_BEFORE_WARNING: days of inactivity before the warning comment.
days-before-pr-stale: ${{ env.DAYS_BEFORE_WARNING }}
# DAYS_BEFORE_CLOSURE: days after being marked stale before closing.
days-before-pr-close: ${{ env.DAYS_BEFORE_CLOSURE }}
# ---- Warning comment (posted once when marked stale) ----
stale-pr-message: >
As we are unable to accept contributions unless the CLA has
been signed, this PR will be automatically closed if the CLA
is not signed within ${{ env.DAYS_BEFORE_CLOSURE }} days.
# ---- Close comment ----
close-pr-message: >
This PR has been automatically closed as the CLA remains
unsigned. We will be happy to have it reopened if the CLA
is signed subsequently.
# A dedicated marker label so we can track stale state without
# interfering with the "awaiting cla" label.
stale-pr-label: 'cla-stale'
# If the PR is updated after being marked stale, remove the marker
# so the warning-then-close cycle restarts cleanly.
remove-pr-stale-when-updated: true
# Process enough PRs per run for busy repos.
operations-per-run: 200