Skip to content

fix(ci): use service token for dependency PRs#145

Merged
fqjony merged 1 commit into
latestfrom
fix-dependency-updater-service-token
Jun 24, 2026
Merged

fix(ci): use service token for dependency PRs#145
fqjony merged 1 commit into
latestfrom
fix-dependency-updater-service-token

Conversation

@fqjony

@fqjony fqjony commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Summary

  • prefer DEPENDABOT_REVIEWER_TOKEN for generated Docker dependency PRs
  • keep GH_TOKEN as fallback for existing workflow compatibility

Validation

  • git diff --check
  • ruby YAML parse for docker-dependency-updater.yml

Copilot AI review requested due to automatic review settings June 24, 2026 15:25
@fqjony fqjony added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 24, 2026
@fqjony fqjony self-assigned this Jun 24, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Docker dependency updater GitHub Actions workflow to authenticate using a dedicated service token when available, while preserving the existing GH_TOKEN secret as a fallback to avoid breaking current setups.

Changes:

  • Use secrets.DEPENDABOT_REVIEWER_TOKEN (fallback to secrets.GH_TOKEN) for peter-evans/create-pull-request@v8 authentication.
  • Use the same token selection for gh pr merge via GH_TOKEN env var.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@fqjony fqjony requested review from a team and udx-github June 24, 2026 15:28
@fqjony fqjony merged commit 764ac98 into latest Jun 24, 2026
6 checks passed
@fqjony fqjony deleted the fix-dependency-updater-service-token branch June 24, 2026 15:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants