From 3faea304b6b516300d395ed46f088e79789fa8f6 Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Wed, 30 Sep 2026 17:11:42 +0200 Subject: [PATCH] fix(dependabot): Approve without "pull_request_target" Assisted-by: ClaudeCode:claude-opus-5.5 Signed-off-by: Joas Schilling --- .github/workflows/dependabot-approve-merge.yml | 2 +- workflow-templates/dependabot-approve-merge.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependabot-approve-merge.yml b/.github/workflows/dependabot-approve-merge.yml index 76340acb..eaa1e9f2 100644 --- a/.github/workflows/dependabot-approve-merge.yml +++ b/.github/workflows/dependabot-approve-merge.yml @@ -9,7 +9,7 @@ name: Auto approve Dependabot PRs on: - pull_request_target: # zizmor: ignore[dangerous-triggers] + pull_request: branches: - main - master diff --git a/workflow-templates/dependabot-approve-merge.yml b/workflow-templates/dependabot-approve-merge.yml index 76340acb..eaa1e9f2 100644 --- a/workflow-templates/dependabot-approve-merge.yml +++ b/workflow-templates/dependabot-approve-merge.yml @@ -9,7 +9,7 @@ name: Auto approve Dependabot PRs on: - pull_request_target: # zizmor: ignore[dangerous-triggers] + pull_request: branches: - main - master