Skip to content

Commit a83e9fb

Browse files
Fix token consistency in workflows
- Use github.token for dependabot/fetch-metadata action in both workflows - Ensures consistent token usage across all workflow steps - Matches repo pattern of using github.token instead of secrets.GITHUB_TOKEN Co-authored-by: thomasturrell <1552612+thomasturrell@users.noreply.github.com>
1 parent 0d76b17 commit a83e9fb

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

.github/workflows/dependabot-auto-approve.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
id: metadata
1717
uses: dependabot/fetch-metadata@v2
1818
with:
19-
github-token: "${{ secrets.GITHUB_TOKEN }}"
19+
github-token: "${{ github.token }}"
2020
- name: Approve minor and patch updates
2121
if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch'
2222
run: |

.github/workflows/dependabot-auto-merge.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
id: metadata
1616
uses: dependabot/fetch-metadata@v2
1717
with:
18-
github-token: "${{ secrets.GITHUB_TOKEN }}"
18+
github-token: "${{ github.token }}"
1919
- name: Enable auto-merge for minor and patch updates
2020
if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch'
2121
run: |

0 commit comments

Comments
 (0)