chore(dependabot): hold back the four majors that cannot be adopted (… #381
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Sync to Beta | |
| on: | |
| push: | |
| branches: | |
| - development | |
| jobs: | |
| sync: | |
| # Permission CEILING for the called workflow, not a grant. The callee's | |
| # `create-pr` job already declares exactly these two, so this restates | |
| # today's effective token. It runs `gh pr list` / `gh pr create` to keep the | |
| # standing development -> beta release PR open, which needs | |
| # `pull-requests: write`; `contents: write` is the checkout it pushes from. | |
| # | |
| # ⚠️ `contents: read` alone would leave the PR step 403-ing at runtime — a | |
| # red release-sync that looks like a merge conflict. | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| uses: ConductionNL/.github/.github/workflows/sync-to-beta.yml@main |