From 391bfdabdcdb807bd01e359dcd06ab4ab374ec81 Mon Sep 17 00:00:00 2001 From: zhom <2717306+zhom@users.noreply.github.com> Date: Sat, 28 Jun 2025 19:59:51 +0400 Subject: [PATCH] build: inherit secrets in steps --- .github/workflows/dependabot-automerge.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index 06aa738..61029f7 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -65,16 +65,17 @@ jobs: if: ${{ github.actor == 'dependabot[bot]' }} needs: [security-scan, lint-js, lint-rust, codeql, spellcheck] runs-on: ubuntu-latest - secrets: inherit steps: - name: Dependabot metadata id: metadata uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b #v2.4.0 + secrets: inherit with: compat-lookup: true github-token: "${{ secrets.GITHUB_TOKEN }}" - name: Auto-merge minor and patch updates uses: ridedott/merge-me-action@338053c6f9b9311a6be80208f6f0723981e40627 #v2.10.122 + secrets: inherit with: GITHUB_TOKEN: ${{ secrets.SECRET_DEPENDABOT_GITHUB_TOKEN }} MERGE_METHOD: SQUASH