Commit Graph

3 Commits

Author SHA1 Message Date
Mukilan Thiyagarajan
43d4d0103a Use @servo-bot token for approving dependabot PR (#30222)
The default GITHUB_TOKEN is created for 'github-bot' user and has limitations.
Specifically, events generated by this github-bot
cannot trigger additional workflows.

This PR uses fine-grained PAT generated for @servo-bot account with the
permissions scoped to servo/servo repo and grants the
'contents: write' and 'pull_request: write' permissions.

Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com>
2023-08-28 09:36:12 +00:00
Mukilan Thiyagarajan
e6b6a4e012 Fix typo in dependabot pr workflow (#30202) 2023-08-24 18:24:41 +00:00
Mukilan Thiyagarajan
3a17a88f1f Auto approve & merge dependabot patch upgrade PRs (#30191)
Adapted from the [Github documentation][doc]. This version
approves all patch upgrades to any dependency. Not sure if
we have any dependency that must always be reviewed manually.

[doc]: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions

Signed-off-by: Mukilan Thiyagarajan <mukilan@igalia.com>
2023-08-24 14:58:25 +00:00