fix(ci): drop PAT_TOKEN_2 approval step, use github.token for auto-merge

PAT_TOKEN_2 does not have the scope for addPullRequestReview.
github.token cannot approve its own PR either, so drop the approval
step entirely. Auto-merge with github.token is enough: the PR will
merge automatically once required CI checks pass.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Julio Quinteros Pro
2026-02-19 21:17:40 -03:00
parent 3a51d8bcb5
commit 11d0fca0de
+4 -7
View File
@@ -13,7 +13,7 @@ on:
permissions:
contents: write # needed to push the auto/regenerate-poetry-lock-* branch
pull-requests: write # needed to open and approve the PR
pull-requests: write # needed to open the PR and enable auto-merge
jobs:
regenerate-lock:
@@ -72,12 +72,9 @@ jobs:
env:
GH_TOKEN: ${{ github.token }}
- name: Approve and enable auto-merge
- name: Enable auto-merge
if: steps.diff.outputs.changed == 'true'
run: |
# Approve with PAT_TOKEN_2 (a different identity from the creator,
# since GitHub does not allow a token to approve its own PR).
gh pr review "${{ steps.open-pr.outputs.pr_url }}" --approve
gh pr merge "${{ steps.open-pr.outputs.pr_url }}" --auto --squash
gh pr merge "${{ steps.open-pr.outputs.pr_url }}" --auto --squash
env:
GH_TOKEN: ${{ secrets.PAT_TOKEN_2 }}
GH_TOKEN: ${{ github.token }}