diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 8d811448..5f878434 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -1,9 +1,8 @@
 name: Dependabot auto-merge
 
 on:  # yamllint disable-line rule:truthy
-  pull_request:
-    branches:
-      - master
+  pull_request_target:
+    types: [opened, synchronize]
 
 permissions:
   contents: write
@@ -17,12 +16,14 @@ jobs:
       - name: Label bot PRs
         run: gh pr edit --add-label "ci,skip-changelog" ${{ github.event.pull_request.html_url }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PAT }}
 
       - name: Auto-approve
         uses: hmarr/auto-approve-action@v4
+        with:
+          github-token: ${{ secrets.PAT }}
 
       - name: Enable auto-merge
         run: gh pr merge --auto --squash ${{ github.event.pull_request.html_url }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.PAT }}