From 78c189f0250b48d5e043e6686d3d1df3d9a91662 Mon Sep 17 00:00:00 2001
From: Koki Takahashi <hakatasiloving@gmail.com>
Date: Sat, 16 Nov 2024 07:37:10 +0000
Subject: [PATCH] BOT: Synchronize .github/workflows/automerge.yml

---
 .github/workflows/automerge.yml | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
index 549ffab..a0a8f6b 100644
--- a/.github/workflows/automerge.yml
+++ b/.github/workflows/automerge.yml
@@ -1,9 +1,5 @@
 name: automerge
-on: pull_request
-
-permissions:
-  contents: write
-  pull-requests: write
+on: pull_request_target
 
 jobs:
   dependabot:
@@ -14,9 +10,9 @@ jobs:
         id: metadata
         uses: dependabot/fetch-metadata@v2
         with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          github-token: "${{ secrets.USER_GITHUB_TOKEN }}"
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --merge "$PR_URL"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
+          GH_TOKEN: ${{ secrets.USER_GITHUB_TOKEN }}
\ No newline at end of file