Update auto-merge.yml

acquire-project · May 31, 2023 · c2af19f · c2af19f
1 parent ea1f5ec
commit c2af19f
Showing 1 changed file with 3 additions and 5 deletions.
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -2,9 +2,7 @@ name: "Automerge Dependabot PRs"
 
 on: pull_request
 
-permissions:
-  pull-requests: write
-  contents: write
+permissions: write-all
 
 jobs:
   auto-merge:
@@ -21,12 +19,12 @@ jobs:
         run: gh pr review --approve "$PR_URL"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.PAT }}
+          GH_TOKEN: ${{ github.token }}
 
       # Don't auto-merge major version updates
       - name: "Enable auto-merge for Dependabot PRs"
         if: ${{ steps.dependabot-metadata.outputs.update-type != 'version-update:semver-major' }}
         run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.PAT }}
+          GH_TOKEN: ${{ github.token }}