From 982060463045f3acf334275b96fd4b38953471b6 Mon Sep 17 00:00:00 2001
From: Binay <150876063+bkd-dotcom@users.noreply.github.com>
Date: Mon, 3 Aug 2026 13:07:19 -0400
Subject: [PATCH] fix(cla): skip CLA job for owner/bots so their PRs never fail
 the gate

Job-level 'if' skips the CLA job for the Owner (bkd-dotcom) and dependabot on PR +
comment events, so the required 'cla' check resolves (skipped=passed) without a
manual recheck. Verified on umbra-core: owner PR merged non-admin with cla skipped.
Real contributors still run the gate and must sign.
---
 .github/workflows/cla.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 76baf77..c45711a 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -24,6 +24,18 @@ permissions:
 jobs:
   cla:
     runs-on: ubuntu-latest
+    # Skip the CLA gate for the Owner and bots (they are allowlisted). Skipping the
+    # job makes the required check "cla" resolve as passed for these actors, so
+    # their PRs never see a spurious CLA failure. Real contributors still run it.
+    if: >-
+      ${{
+        !(
+          github.event.pull_request.user.login == 'bkd-dotcom' ||
+          github.event.pull_request.user.login == 'dependabot[bot]' ||
+          github.event.issue.user.login == 'bkd-dotcom' ||
+          github.event.issue.user.login == 'dependabot[bot]'
+        )
+      }}
     # Skip Dependabot / the Owner's own automated PRs if desired; contributors still gate.
     steps:
       - name: CLA Assistant