Configure PR Bots with CLA (Renovate)

[markwolff]

• From Configure Renovate opentelemetry-js#829

We have a PR which configures the Renovate bot to automatically create PRs on the JS repo to update dependencies to the latest versions. Currently it is blocked since the bot has not signed the CNCF CLA. How can we configure the bot to "sign" the CLA?

/cc @SergeyKanzhelev

[SergeyKanzhelev]

@tedsuo will follow up on policies to enable bots and integrations and how CLA must work

[mayurkale22]

@tedsuo any update here?

[dyladan]

Seems like there is no way to get Renovate configured because of the CLA requirements. As a workaround, we can use the Forking Renovate plugin. Can an OpenTelemetry owner please enable this on the https://github.com/open-telemetry/opentelemetry-js and https://github.com/open-telemetry/opentelemetry-js-contrib repos?

@open-telemetry/admins

[lizthegrey]

Sorry for the delay, I failed to actually get https://lfcla.com/ running, but it was on my plate. Can we defer for a second so I can try to get it up and running?

[lizthegrey]

In particular, https://lists.cloudfoundry.org/g/cf-dev/topic/34227989?p=Created,,,20,2,0,0::recentpostdate%2Fsticky,,,20,2,0,34227989 says that it's a supported feature to exempt bots in the new CLA tool.

[dyladan]

sounds good to me thanks

[lizthegrey]

We have gotten approval from CNCF to migrate, we're just doing the details now.

[dyladan]

@lizthegrey any update?

[lizthegrey]

Thanks for the reminder, pinging CNCF

[dyladan]

@lizthegrey sorry to keep bothering you, but is there an update on this?

[lizthegrey]

I emailed CNCF to ask for an update, but given that it hasn't happened so far, I'm not going to block any longer.

[dyladan]

If that's the case can an owner install the Forking Renovate plugin on both nodejs repositories?