From b3a43d615431acf592579e9f13c818b371a56a4f Mon Sep 17 00:00:00 2001
From: Marcus Hert Da Coregio <marcusdacoregio@gmail.com>
Date: Thu, 14 Mar 2024 14:42:33 -0300
Subject: [PATCH] Use token only for auto merge

Issue gh-14721
---
 .github/workflows/merge-dependabot-pr.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/merge-dependabot-pr.yml b/.github/workflows/merge-dependabot-pr.yml
index 0dcae6885d..6331b62509 100644
--- a/.github/workflows/merge-dependabot-pr.yml
+++ b/.github/workflows/merge-dependabot-pr.yml
@@ -4,8 +4,7 @@ on: pull_request_target
 
 run-name: Merge Dependabot PR ${{ github.ref_name }}
 
-env:
-  GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
+permissions: write-all
 
 jobs:
   merge-dependabot-pr:
@@ -47,3 +46,5 @@ jobs:
       - name: Merge Dependabot pull request
         if: steps.set-milestone.outputs.mergeEnabled
         run: gh pr merge ${{ github.event.pull_request.number }} --auto --rebase
+        env:
+          GH_TOKEN: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}