From 412d6e3ee84525f4af33298c9d9bc5935bc1519e Mon Sep 17 00:00:00 2001 From: JacobPEvans <20714140+JacobPEvans@users.noreply.github.com> Date: Fri, 3 Apr 2026 08:31:02 -0400 Subject: [PATCH 1/2] fix: broaden commit signing language from GPG-only to all methods Copilot cloud agent now signs commits natively (2026-04-03 changelog). Update PR templates, CONTRIBUTING.md, and README to say "signed" instead of "GPG signed" since GitHub supports GPG, SSH, S/MIME, and native app signing. Add callout in CONTRIBUTING.md noting automated PRs (Copilot, Renovate, GitHub Actions) sign commits automatically. (claude) --- .github/PULL_REQUEST_TEMPLATE/breaking.md | 2 +- .github/PULL_REQUEST_TEMPLATE/bug.md | 2 +- .github/PULL_REQUEST_TEMPLATE/docs.md | 2 +- .github/PULL_REQUEST_TEMPLATE/feature.md | 2 +- .github/PULL_REQUEST_TEMPLATE/performance.md | 2 +- .github/PULL_REQUEST_TEMPLATE/pull_request_template.md | 2 +- .github/PULL_REQUEST_TEMPLATE/refactor.md | 2 +- README.md | 2 +- docs/CONTRIBUTING.md | 10 +++++++--- 9 files changed, 15 insertions(+), 11 deletions(-) diff --git a/.github/PULL_REQUEST_TEMPLATE/breaking.md b/.github/PULL_REQUEST_TEMPLATE/breaking.md index 012962f..b2f2066 100644 --- a/.github/PULL_REQUEST_TEMPLATE/breaking.md +++ b/.github/PULL_REQUEST_TEMPLATE/breaking.md @@ -91,7 +91,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `breaking(scope): description` -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] Migration path is clear and documented - [ ] All tests passing diff --git a/.github/PULL_REQUEST_TEMPLATE/bug.md b/.github/PULL_REQUEST_TEMPLATE/bug.md index 2f986b5..0a9201d 100644 --- a/.github/PULL_REQUEST_TEMPLATE/bug.md +++ b/.github/PULL_REQUEST_TEMPLATE/bug.md @@ -67,7 +67,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `fix(scope): description` - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] PR is focused on this single bug fix - [ ] Self-review completed diff --git a/.github/PULL_REQUEST_TEMPLATE/docs.md b/.github/PULL_REQUEST_TEMPLATE/docs.md index da0b721..d3c08d6 100644 --- a/.github/PULL_REQUEST_TEMPLATE/docs.md +++ b/.github/PULL_REQUEST_TEMPLATE/docs.md @@ -62,7 +62,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] Follows existing documentation structure - [ ] PR title follows conventional commits format: `docs(scope): description` -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] Markdown linting passed - [ ] Self-review completed diff --git a/.github/PULL_REQUEST_TEMPLATE/feature.md b/.github/PULL_REQUEST_TEMPLATE/feature.md index e76f0a7..666ce39 100644 --- a/.github/PULL_REQUEST_TEMPLATE/feature.md +++ b/.github/PULL_REQUEST_TEMPLATE/feature.md @@ -84,7 +84,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `feat(scope): description` - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] Feature is complete and ready for merge - [ ] Breaking changes documented (if any) diff --git a/.github/PULL_REQUEST_TEMPLATE/performance.md b/.github/PULL_REQUEST_TEMPLATE/performance.md index 4c8df3f..a9e423b 100644 --- a/.github/PULL_REQUEST_TEMPLATE/performance.md +++ b/.github/PULL_REQUEST_TEMPLATE/performance.md @@ -83,7 +83,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `perf(scope): description` - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] Benchmarks prove improvement - [ ] All tests passing diff --git a/.github/PULL_REQUEST_TEMPLATE/pull_request_template.md b/.github/PULL_REQUEST_TEMPLATE/pull_request_template.md index 5a5809a..8fcf911 100644 --- a/.github/PULL_REQUEST_TEMPLATE/pull_request_template.md +++ b/.github/PULL_REQUEST_TEMPLATE/pull_request_template.md @@ -81,7 +81,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `type(scope): description` - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] PR is focused on a single concern - [ ] Self-review completed diff --git a/.github/PULL_REQUEST_TEMPLATE/refactor.md b/.github/PULL_REQUEST_TEMPLATE/refactor.md index 395e70b..0e7cf56 100644 --- a/.github/PULL_REQUEST_TEMPLATE/refactor.md +++ b/.github/PULL_REQUEST_TEMPLATE/refactor.md @@ -75,7 +75,7 @@ See [LABELS.md](../docs/LABELS.md) for label definitions. - [ ] PR title follows conventional commits format: `refactor(scope): description` - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebased if needed) - [ ] No functional changes (or clearly documented) - [ ] All tests passing diff --git a/README.md b/README.md index cffc4bb..f836dfb 100644 --- a/README.md +++ b/README.md @@ -121,7 +121,7 @@ Standardized [pull request templates][pr-templates-docs] that enforce convention - Conventional commit format in PR title (`type(scope): description`) - Related issue linking - Type, priority, and size labels -- GPG-signed commits +- Signed commits **Selecting a template**: diff --git a/docs/CONTRIBUTING.md b/docs/CONTRIBUTING.md index 43ba04e..ea8d18e 100644 --- a/docs/CONTRIBUTING.md +++ b/docs/CONTRIBUTING.md @@ -43,9 +43,13 @@ The `claude/` and `copilot/` prefixes are reserved for automated branches create ## Signing Your Commits -**Commit signing is required** for all contributions. This verifies that commits actually come from you. +**Commit signing is required** for all contributions. This verifies that commits come from their claimed author. -### Getting Started with Commit Signing +> **Automated PRs** (Copilot, Renovate, GitHub Actions): Commits are signed automatically via +> GitHub's native app signing. No setup needed — just assign an issue to Copilot or let Renovate +> do its thing. + +### Human Contributors — Getting Started If you've never signed commits before, don't worry—it only takes a few minutes to set up: @@ -169,7 +173,7 @@ Before submitting your PR: - [ ] Related issues are linked in the description - [ ] Type, priority, and size labels are applied - [ ] Commits follow conventional commits specification -- [ ] All commits are GPG signed +- [ ] All commits are signed - [ ] No merge commits (rebase if needed) - [ ] Markdown linting passes - [ ] PR is focused on a single concern From b90ce21bb3fdc8f60280eb3152043e2d83bd7168 Mon Sep 17 00:00:00 2001 From: JacobPEvans <20714140+JacobPEvans@users.noreply.github.com> Date: Sat, 4 Apr 2026 13:30:39 -0400 Subject: [PATCH 2/2] fix: narrow automated signing callout to org scope (claude) --- docs/CONTRIBUTING.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/docs/CONTRIBUTING.md b/docs/CONTRIBUTING.md index ea8d18e..bd9b4cc 100644 --- a/docs/CONTRIBUTING.md +++ b/docs/CONTRIBUTING.md @@ -45,9 +45,8 @@ The `claude/` and `copilot/` prefixes are reserved for automated branches create **Commit signing is required** for all contributions. This verifies that commits come from their claimed author. -> **Automated PRs** (Copilot, Renovate, GitHub Actions): Commits are signed automatically via -> GitHub's native app signing. No setup needed — just assign an issue to Copilot or let Renovate -> do its thing. +> **Automated PRs** (Copilot, Renovate, GitHub Actions): In this organization, automated commits +> are signed via GitHub's native app signing. No setup needed for bot-authored PRs. ### Human Contributors — Getting Started