From f146a807df5e8dd76da0d9e50d10f801adff54c4 Mon Sep 17 00:00:00 2001 From: Nilok Bose Date: Tue, 31 Mar 2026 18:41:20 +0200 Subject: [PATCH] chore: use pull_request_target to allow Dependabot access to secrets --- .github/workflows/dependabot.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 3df59eb..f1d925e 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -1,6 +1,6 @@ name: Dependabot auto-merge on: - pull_request: + pull_request_target: permissions: contents: write