From c05e38222bd53e8d76524b96d0c1a4c8d86d58f5 Mon Sep 17 00:00:00 2001 From: Philip Thong Date: Fri, 25 Sep 2026 09:11:55 -0500 Subject: [PATCH 1/2] Updated auto_approve_merge with workflows:write --- .github/workflows/auto_dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/auto_dependabot.yml b/.github/workflows/auto_dependabot.yml index 84ac3c3..752589a 100644 --- a/.github/workflows/auto_dependabot.yml +++ b/.github/workflows/auto_dependabot.yml @@ -12,6 +12,7 @@ jobs: permissions: pull-requests: write contents: write + workflows: write runs-on: ubuntu-latest if: github.actor == 'dependabot[bot]' steps: @@ -25,4 +26,3 @@ jobs: env: PR_URL: ${{ github.event.pull_request.html_url }} GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - From b9072fe4ad44a2a447615bc1ecc584df5f73c7cc Mon Sep 17 00:00:00 2001 From: Philip Thong Date: Fri, 25 Sep 2026 13:40:38 -0500 Subject: [PATCH 2/2] Updated rule to follow example --- .github/workflows/auto_dependabot.yml | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/.github/workflows/auto_dependabot.yml b/.github/workflows/auto_dependabot.yml index 752589a..e87634b 100644 --- a/.github/workflows/auto_dependabot.yml +++ b/.github/workflows/auto_dependabot.yml @@ -4,15 +4,11 @@ on: pull_request: permissions: - contents: read + pull-requests: write + contents: write jobs: auto_approve_merge: - # Job level permissions are required to approve and merge PRs - permissions: - pull-requests: write - contents: write - workflows: write runs-on: ubuntu-latest if: github.actor == 'dependabot[bot]' steps: