From 578de7d06a8c8d7add8d78b462fdcf3d029cc314 Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Mon, 27 Jul 2026 15:09:24 -0700 Subject: [PATCH] CI: re-pin dependabot-sync; contents write for auto-merge arming basecamp/.github#14: enablePullRequestAutoMerge needs contents: write on the job token (round 3 passed every other gate). Exercise round 4. --- .github/workflows/dependabot-sync-actions-comments.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependabot-sync-actions-comments.yml b/.github/workflows/dependabot-sync-actions-comments.yml index 30a1f827d..989d7660c 100644 --- a/.github/workflows/dependabot-sync-actions-comments.yml +++ b/.github/workflows/dependabot-sync-actions-comments.yml @@ -21,9 +21,9 @@ permissions: {} jobs: sync: - uses: basecamp/.github/.github/workflows/dependabot-sync-actions-comments.yml@06fd9cf3d96439d0c5a8ca6ccc2ed2dd23552d9e + uses: basecamp/.github/.github/workflows/dependabot-sync-actions-comments.yml@d7a98882c52e021fa0d4ae31e92e56d03dcce774 permissions: - contents: read + contents: write actions: write pull-requests: write # The deploy key is scoped to this repo's dependabot-sync environment