From fde55e716ae16060e434528612ad43e4daf99dd0 Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Mon, 27 Jul 2026 14:53:11 -0700 Subject: [PATCH] ci: re-pin dependabot-sync past the bot-author fix basecamp/.github#12: gh reports bot PR creators as app/github-actions; the fail-closed re-verification refused auto-merge on the exercise's repair PR in basecamp-sdk. Workflow remains disabled in this repo until its rollout turn. --- .github/workflows/dependabot-sync-actions-comments.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependabot-sync-actions-comments.yml b/.github/workflows/dependabot-sync-actions-comments.yml index 2ce6aa56..989d7660 100644 --- a/.github/workflows/dependabot-sync-actions-comments.yml +++ b/.github/workflows/dependabot-sync-actions-comments.yml @@ -21,9 +21,9 @@ permissions: {} jobs: sync: - uses: basecamp/.github/.github/workflows/dependabot-sync-actions-comments.yml@45d3fc9588f15d50fbccde7476418007dd19e16e + uses: basecamp/.github/.github/workflows/dependabot-sync-actions-comments.yml@d7a98882c52e021fa0d4ae31e92e56d03dcce774 permissions: - contents: read + contents: write actions: write pull-requests: write # The deploy key is scoped to this repo's dependabot-sync environment