Merge branch 'develop' into publish-npm-from-branch

Author: Bogomil-Stoyanov

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'

.github/workflows/publish.yml

@@ -1,4 +1,3 @@
-
 name: Publish
 
 on:

.github/workflows/signature-assistant.yml

@@ -3,7 +3,7 @@ on:
   issue_comment:
     types: [created]
   pull_request_target:
-    types: [opened,closed,synchronize]
+    types: [opened, closed, synchronize]
 
 permissions:
   actions: write
@@ -13,19 +13,25 @@ permissions:
 
 jobs:
   CLA-Assistant:
+    if: github.event_name == 'pull_request_target' ||
+      (
+        github.event.comment.body == 'recheck' ||
+        github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA'
+      )
     runs-on: ubuntu-latest
     steps:
+      - uses: scratchfoundation/scratch-agreements/.github/actions/cla-allowlist@main
+        id: cla-allowlist
       - name: "CLA Assistant"
-        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
         uses: contributor-assistant/github-action@ca4a40a7d1004f18d9960b404b97e5f30a505a08 # v2.6.1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           # the below token should have repo scope and must be manually added by you in the repository's secrets
           PERSONAL_ACCESS_TOKEN: ${{ secrets.GHA_AGREEMENTS_PAT }}
         with:
-          remote-organization-name: 'scratchfoundation'
-          remote-repository-name: 'scratch-agreements'
-          path-to-signatures: 'signatures/version1/cla.json'
-          path-to-document: 'https://github.com/scratchfoundation/scratch-agreements/blob/main/CLA.md'
-          branch: 'main'
-          allowlist: semantic-release-bot,*[bot]
+          remote-organization-name: "scratchfoundation"
+          remote-repository-name: "scratch-agreements"
+          path-to-signatures: "signatures/version1/cla.json"
+          path-to-document: "https://github.com/scratchfoundation/scratch-agreements/blob/main/CLA.md"
+          branch: "main"
+          allowlist: ${{ steps.cla-allowlist.outputs.allowlist }}

.github/workflows/update-i18n.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
+      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4
         with:
           cache: 'npm'
           node-version-file: '.nvmrc'

.nvmrc

@@ -1 +1 @@
-20.18.3
+20.19.0