From a973c5b9ddff092cc0aebf3992e8d5d23cffb5ab Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Wed, 9 Oct 2024 11:03:43 -0400
Subject: ci: don't use app to merge dependabot PRs

---
 .github/workflows/autobot.yaml | 15 ++++++---------
 1 file changed, 6 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/autobot.yaml b/.github/workflows/autobot.yaml
index 9c7e8f6..0457591 100644
--- a/.github/workflows/autobot.yaml
+++ b/.github/workflows/autobot.yaml
@@ -10,23 +10,20 @@ jobs:
 
     runs-on: ubuntu-latest
 
-    steps:
-      - name: Generate GitHub App token
-        uses: actions/create-github-app-token@v1
-        id: app-token
-        with:
-          app-id: ${{ vars.APP_ID }}
-          private-key: ${{ secrets.PRIVATE_KEY }}
+    permissions:
+      contents: write
+      pull-requests: write
 
+    steps:
       - name: Fetch metadata
         uses: dependabot/fetch-metadata@v2
         id: metadata
         with:
-          github-token: ${{ steps.app-token.outputs.token }}
+          github-token: ${{ github.token }}
 
       - name: Enable auto-merge
         if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' || steps.metadata.outputs.update-type == 'version-update:semver-minor' }}
         run: gh pr merge --auto --squash "$PR"
         env:
           PR: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          GH_TOKEN: ${{ github.token }}
-- 
cgit v1.2.3