Repository navigation
Automated commits are unsigned and will stop merging #346
Description
Once default branches require signed commits, pull requests that carry an unsigned commit cannot merge. Dependency bump pull requests collect unsigned bot commits (NOTICE and nix vendorHash updates) from the shared reusable workflows in datum-cloud/actions.
The fix is to create these commits through the GitHub API, which GitHub signs.
Related to datum-cloud/infra#7969
Activity
ecv commentedon Oct 30, 2026
Fixed by datum-cloud/actions v1.24.0 (#347). The bot commits on #343 and #344, NOTICE and nix vendorHash updates, now show as verified.