From e7a5af1e3c3184d234fb5e1334ea4134f0ccffb4 Mon Sep 17 00:00:00 2001
From: John Ajera <37360952+jajera@users.noreply.github.com>
Date: Mon, 24 Aug 2026 06:12:42 +1200
Subject: [PATCH] fix: grant workflows write on dependabot auto-merge

Let GITHUB_TOKEN merge Dependabot PRs that change workflow files
(chainguard-dev/actions bumps).

Closes #22
---
 .github/workflows/auto-merge.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
index 83de167..4539eaf 100644
--- a/.github/workflows/auto-merge.yml
+++ b/.github/workflows/auto-merge.yml
@@ -10,6 +10,8 @@ permissions:
   contents: write
   pull-requests: write
   checks: read
+  # Required so Dependabot bumps that edit workflow YAML can merge.
+  workflows: write
 
 jobs:
   auto-merge: