Fix auto-merging bot PRs (#501)

pyg-team · Feb 10, 2025 · 46ad1b3 · 46ad1b3
1 parent 652b573
commit 46ad1b3
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
@@ -1,9 +1,8 @@
 name: Dependabot auto-merge
 
 on:  # yamllint disable-line rule:truthy
-  pull_request:
-    branches:
-      - master
+  pull_request_target:
+    types: [opened, synchronize]
 
 permissions:
   contents: write
@@ -17,12 +16,14 @@ jobs:
       - name: Label bot PRs
         run: gh pr edit --add-label "ci,skip-changelog" ${{ github.event.pull_request.html_url }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PAT }}
 
       - name: Auto-approve
         uses: hmarr/auto-approve-action@v4
+        with:
+          github-token: ${{ secrets.PAT }}
 
       - name: Enable auto-merge
         run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PAT }}