From 38bcfe59b55e12624de133b37b1e95a0084041a6 Mon Sep 17 00:00:00 2001 From: S4NKALP Date: Mon, 29 Dec 2025 23:34:17 +0545 Subject: [PATCH] ci(workflows): update Dependabot auto-merge workflow configuration Refines the Dependabot auto-merge workflow by removing unnecessary whitespace, simplifying the conditional syntax, and updating the token reference for improved security. **Enhancements & Refinements** - Removed leading whitespace at the start of the file for cleaner formatting - Simplified the `if` condition syntax from `${{github.actor == 'dependabot[bot]' }}` to `github.actor == 'dependabot[bot]'` - Updated the GitHub token reference from `secrets.GITHUB_TOKEN` to `secrets.DEPENDABOT_TOKEN` for better security practices - Fixed capitalization in step name from "Merge PR from dependabot" to "Merge PR from Dependabot" for consistency ``` --- .github/workflows/dependabot-auto-merge.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index e8f307b..b269dc4 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -1,4 +1,3 @@ - name: Dependabot Auto-Merge on: @@ -10,11 +9,11 @@ permissions: jobs: dependabot: - if: ${{github.actor == 'dependabot[bot]' }} + if: github.actor == 'dependabot[bot]' runs-on: ubuntu-latest steps: - - name: Merge PR from dependabot + - name: Merge PR from Dependabot uses: fastify/github-action-merge-dependabot@v3 with: - github-token: '${{ secrets.GITHUB_TOKEN }}' + github-token: ${{ secrets.DEPENDABOT_TOKEN }}