Repository navigation

fix(security): Fix security issue in next via minor version upgrade from 15.4.8 to 15.5.24 #61

	name: Dependabot auto-approve and auto-merge
Check warning on line 1 in .github/workflows/dependabot-automerge.yml View workflow run for this annotation GitHub Actions / Dependabot auto-approve and auto-merge Workflow execution policy warning (evaluate mode) On November 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target

	on:
	pull_request_target:
	types: [opened, synchronize, reopened]

	permissions:
	pull-requests: write
	contents: write

	jobs:
	dependabot:
	runs-on: ubuntu-latest
	if: github.actor == 'dependabot[bot]'

	steps:
	- name: Checkout Repo
	uses: actions/checkout@v6
	with:
	fetch-depth: 1

	- name: Install GitHub CLI
	run: \|
	sudo apt-get update
	sudo apt-get install -y gh

	- name: Authenticate gh
	run: echo "${{ secrets.GITHUB_TOKEN }}" \| gh auth login --with-token

	- name: Approve dependabot PRs
	run: gh pr review --approve "$PR_URL"
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	- name: Merge for dependabot PRs
	run: gh pr merge --auto --squash "$PR_URL"
	env:
	PR_URL: ${{ github.event.pull_request.html_url }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}