docs: describe the real API instead of a fictional one #372
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Auto-merge dependency PRs | |
| # pull_request_target is required: approving/enabling auto-merge on fork | |
| # dependency PRs needs a write-scoped token, which pull_request does not | |
| # provide. The called reusable workflow only runs gh-CLI review/merge steps | |
| # gated on dependabot/renovate authorship (no checkout or execution of | |
| # untrusted PR code), so the usual pull_request_target risk does not apply. | |
| on: # zizmor: ignore[dangerous-triggers] | |
| pull_request_target: | |
| permissions: {} | |
| jobs: | |
| auto-merge: | |
| uses: netresearch/.github/.github/workflows/auto-merge-deps.yml@main | |
| permissions: | |
| contents: write | |
| pull-requests: write |