Author: NikolaRHristov

.github/workflows/Dependabot.yml

@@ -5,41 +5,44 @@ concurrency:
     cancel-in-progress: true
 
 permissions:
-    security-events: write
     contents: write
     pull-requests: write
 
 on:
-    workflow_dispatch:
     pull_request:
 
 jobs:
     Approve:
         runs-on: ubuntu-latest
 
-        if: ${{ github.actor == 'dependabot[bot]' }}
+        if:
+            ${{ github.actor == 'dependabot[bot]' &&
+            github.event.pull_request.user.login == 'dependabot[bot]' }}
 
         steps:
             - uses: dependabot/fetch-metadata@v3.1.0
               with:
-                  github-token: "${{ secrets.GITHUB_TOKEN }}"
+                  github-token: "${{ secrets.DEPENDABOT_TOKEN }}"
 
             - run: gh pr review --approve "$PR_URL"
               env:
                   PR_URL: ${{github.event.pull_request.html_url}}
-                  GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+                  GITHUB_TOKEN: ${{secrets.DEPENDABOT_TOKEN}}
 
     Merge:
         runs-on: ubuntu-latest
+        needs: Approve
 
-        if: ${{ github.actor == 'dependabot[bot]' }}
+        if:
+            ${{ github.actor == 'dependabot[bot]' &&
+            github.event.pull_request.user.login == 'dependabot[bot]' }}
 
         steps:
             - uses: dependabot/fetch-metadata@v3.1.0
               with:
-                  github-token: "${{ secrets.GITHUB_TOKEN }}"
+                  github-token: "${{ secrets.DEPENDABOT_TOKEN }}"
 
             - run: gh pr merge --auto --merge "$PR_URL"
               env:
                   PR_URL: ${{github.event.pull_request.html_url}}
-                  GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+                  GITHUB_TOKEN: ${{secrets.DEPENDABOT_TOKEN}}

package.json

@@ -22,7 +22,7 @@
 		"prepublishOnly": "Build 'Source/**/*.ts'"
 	},
 	"devDependencies": {
-		"@cloudflare/workers-types": "4.20260523.1",
+		"@cloudflare/workers-types": "4.20260524.1",
 		"@playform/build": "0.3.2"
 	},
 	"publishConfig": {