FIX: Moreu

Author: larsoner

.github/dependabot.yml

@@ -4,5 +4,9 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    groups:
+      actions:
+        patterns:
+          - "*"
     commit-message:
       prefix: "[dependabot]"

.github/workflows/automerge.yml

@@ -1,17 +1,17 @@
 name: Bot auto-merge
-on: pull_request  # yamllint disable-line rule:truthy
+on: pull_request_target  # yamllint disable-line rule:truthy
+
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   autobot:
-    permissions:
-      contents: write
-      pull-requests: write
     runs-on: ubuntu-latest
-    # Names can be found with gh api /repos/mne-tools/mne-python/pulls/12998 -q .user.login for example
-    if: (github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'pre-commit-ci[bot]' || github.event.pull_request.user.login == 'github-actions[bot]') && github.repository == 'mne-tools/mne-bids'
+    if: (github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'pre-commit-ci[bot]') && github.repository == 'mne-tools/mne-bids'
     steps:
       - name: Enable auto-merge for bot PRs
         run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}
-          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
+          GH_TOKEN: ${{secrets.MNE_BOT_TOKEN}}

.github/workflows/autopush.yml

@@ -2,8 +2,8 @@ name: Bot auto-push
 on:  # yamllint disable-line rule:truthy
   push:
     branches:
-      - dependabot/*
-      - pre-commit-ci/*
+      - dependabot/**
+      - pre-commit-ci*
 
 jobs:
   autobot:
@@ -24,6 +24,7 @@ jobs:
           git config --global user.email "[email protected]"
           COMMIT_MESSAGE=$(git show -s --format=%s)
           # Detect dependabot and pre-commit.ci commit messages
+          # mne-bot PRs (SPEC0, credit) shouldn't need it since we commit with mne-bot user
           if [[ "$COMMIT_MESSAGE" == '[dependabot]'* ]] || [[ "$COMMIT_MESSAGE" == '[pre-commit.ci]'* ]] ; then
             echo "Pushed commit to run CircleCI for: $COMMIT_MESSAGE" | tee -a $GITHUB_STEP_SUMMARY
             git commit --allow-empty -m "mne[bot] Push commit to run CircleCI"