From 0f755908036255dac1f2b6a5414493b4bf4467c1 Mon Sep 17 00:00:00 2001 From: robert-inkeep <123133375+robert-inkeep@users.noreply.github.com> Date: Mon, 20 Jul 2026 15:35:02 -0400 Subject: [PATCH] fix: check public PR CLA in OSS bridge auto-merge (#2759) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * fix: check public PR CLA in OSS bridge auto-merge Update the public PR auto-merge gate to resolve bridged OSS PRs against their original public PRs instead of treating the internal bridge commit as authoritative. For Open Knowledge, read license/cla from the original public PR head SHA and require success there. Scope the oss-sync App token to all OSS mirror repos, validate bridge markers against the public-pr branch slug, and accept all four OSS mirror branch prefixes. Add Mermaid Wysiwyg’s missing public PR bridge workflow/script so it follows the same intake path as the other OSS mirrors. Refresh bridge docs/runbook references and add regression coverage for public-PR CLA lookup, marker drift, and all OSS branch slugs. * address comment * address more comments GitOrigin-RevId: 6b957df9827351fc75b29c0f918758d128348a5d --- .github/scripts/bridge-public-pr-to-monorepo.mjs | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/scripts/bridge-public-pr-to-monorepo.mjs b/.github/scripts/bridge-public-pr-to-monorepo.mjs index afd7b3f..3945b9f 100644 --- a/.github/scripts/bridge-public-pr-to-monorepo.mjs +++ b/.github/scripts/bridge-public-pr-to-monorepo.mjs @@ -9,6 +9,7 @@ import { pathToFileURL } from 'node:url'; // Sibling bridge copies: // - public/agents/.github/scripts/bridge-public-pr-to-monorepo.mjs // - public/open-knowledge/.github/scripts/bridge-public-pr-to-monorepo.mjs +// - public/mermaid-wysiwyg/.github/scripts/bridge-public-pr-to-monorepo.mjs const BRIDGE_COMMENT_MARKER = ''; const OSS_SYNC_BOT_NAME = 'inkeep-oss-sync[bot]'; const OSS_SYNC_BOT_EMAIL = '274976938+inkeep-oss-sync[bot]@users.noreply.github.com';