From 016a09f57bace94359889806173634f15d942d69 Mon Sep 17 00:00:00 2001
From: bneradt <bneradt@yahooinc.com>
Date: Mon, 10 Aug 2026 10:37:54 -0500
Subject: [PATCH] Check copyright years in RAT job

Run the history-based copyright updater in the RAT job and fail when
it changes the worktree. Fetch full history so each file's most recent
commit year can be determined reliably.

Depends on #396.
---
 .github/workflows/ci.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a88933dd..9fb22bc3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,6 +54,16 @@ jobs:
     steps:
       - name: Check out repository
         uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Trust the container workspace
+        run: git config --global --add safe.directory "${GITHUB_WORKSPACE}"
+
+      - name: Verify copyright years
+        run: |
+          bash tools/copyright-update.sh
+          git diff --exit-code
 
       - name: Run Apache RAT
         run: |