ci(workflows): permissions updated in workflows #10

	name: Dependabot auto-merge
Check failure on line 1 in .github/workflows/auto-merge-dependabot-pr.yml View workflow run for this annotation GitHub Actions / .github/workflows/auto-merge-dependabot-pr.yml Invalid workflow file No steps defined in `steps` and no workflow called in `uses` for the following jobs: permissions
	on:
	pull_request:
	types:
	- opened
	- synchronize

	jobs:
	tests:
	uses: ./.github/workflows/test.yml
	secrets: inherit
	permissions:
	contents: read

	dependabot:
	name: Auto-merge Dependabot PR
	runs-on: ubuntu-latest
	needs: tests
	permissions:
	contents: write
	pull-requests: write

	if: ${{ github.actor == 'dependabot[bot]' }}
	steps:
	- name: Dependabot metadata
	id: metadata
	uses: dependabot/fetch-metadata@v1
	with:
	github-token: "${{ secrets.GITHUB_TOKEN }}"
	- name: Enable auto-merge for Dependabot PRs
	# (fixes, features but not major upgrades!)
	if: ${{steps.metadata.outputs.update-type == 'version-update:semver-patch' \|\| steps.metadata.outputs.update-type == 'version-update:semver-minor'}}
	run: gh pr merge --auto --merge "$PR_URL"
	env:
	PR_URL: ${{github.event.pull_request.html_url}}
	GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

Provide feedback