From a123789f83229fbd51936b3723416556f569c8fd Mon Sep 17 00:00:00 2001
From: sergiyvamz <75754709+sergiyvamz@users.noreply.github.com>
Date: Thu, 6 Jul 2023 12:50:39 -0700
Subject: [PATCH] dependabot auto merge (#525)

---
 .github/workflows/dependabot-auto-merge.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 6706dcd08..eb3e78d1f 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -4,6 +4,10 @@ on:
   workflow_dispatch:
   pull_request:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   worker:
     runs-on: ubuntu-latest
@@ -17,7 +21,6 @@ jobs:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Approve PR
         if: steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor'
-        permissions: write-all
         run: gh pr review --approve "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}