From 99c60a641e895ebb1bbbfb89c9d74fa3bd4a9eb6 Mon Sep 17 00:00:00 2001 From: Colin Dean Date: Fri, 13 Mar 2026 10:42:19 -0400 Subject: [PATCH] Use safer way to determine login for dependabot bot automerge --- .github/workflows/dependabot-automerge.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-automerge.yaml b/.github/workflows/dependabot-automerge.yaml index a09ee7c..f90ee21 100644 --- a/.github/workflows/dependabot-automerge.yaml +++ b/.github/workflows/dependabot-automerge.yaml @@ -8,7 +8,7 @@ permissions: jobs: dependabot: runs-on: ubuntu-latest - if: github.actor == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name + if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name steps: - name: Dependabot metadata id: metadata