diff --git a/.github/workflows/dependabot-changeset.yml b/.github/workflows/dependabot-changeset.yml index a14c886c3..fc6a56f64 100644 --- a/.github/workflows/dependabot-changeset.yml +++ b/.github/workflows/dependabot-changeset.yml @@ -19,7 +19,7 @@ jobs: # Removing the user check could give privileged access to a potential attacker. if: | github.event.pull_request.user.login == 'dependabot[bot]' && - ! contains(github.event.pull_request.title, 'development group') + startsWith(github.head_ref, 'dependabot/npm_and_yarn/npm-production-') runs-on: ubuntu-latest