Re-pin dependabot-sync past the bot-author fix

[jeremy]

basecamp/.github#12 fixed the app/<slug> bot-author constant that basecamp-sdk's full-cycle exercise tripped (fail-closed, auto-merge refused as designed). Pin bump only; the workflow entry remains disabled in this repo until its turn in the one-at-a-time rollout.

---

Summary by cubic

Re-pinned the reusable dependabot-sync-actions-comments workflow to the latest basecamp/.github version that fixes bot-author detection (app/github-actions), and updated permissions to contents: write. The workflow remains disabled here until its rollout turn.

^{Written for commit e0edac6. Summary will update on new commits.}

[github-actions]

Sensitive Change Detection (shadow mode)

This PR modifies control-plane files:

• .github/workflows/dependabot-sync-actions-comments.yml

Shadow mode — this check is informational only. When activated, changes to these paths will require approval from a maintainer.

[Copilot]

Pull request overview

Updates this repo’s Dependabot reusable-workflow pin so the “sync action pin comments” workflow references a basecamp/.github revision that includes the bot-author constant fix mentioned in basecamp/.github#12. This is a pin-only bump; no workflow logic or permissions are otherwise changed in this repository.

Changes:

• Re-pins basecamp/.github/.github/workflows/dependabot-sync-actions-comments.yml from 45d3fc9… to fdf2ae7….

Tip

If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.