From c7093fa4f28b6e64d9580f3b55b3a6da754c9fd0 Mon Sep 17 00:00:00 2001
From: Stephan Merker <stephan.merker@sap.com>
Date: Tue, 21 Jul 2026 13:16:42 +0200
Subject: [PATCH] Auto-approve dependabot PRs

- approved by bot user
- also trigger IT workflows by bot user so that follow-up workflows get triggered (status reporting)
---
 .github/workflows/dependabot-auto-merge.yml    | 4 ++++
 .github/workflows/fork-integration-trigger.yml | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 078550d5..ffdbf651 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -18,3 +18,7 @@ jobs:
     steps:
       - name: Enable auto-merge
         run: gh pr merge --auto --rebase --repo "${{ github.repository }}" "${{ github.event.pull_request.number }}"
+      - name: Approve dependabot PR
+        env:
+          GH_TOKEN: ${{ secrets.BOT_GH_TOKEN }}
+        run: gh pr review --approve --repo "${{ github.repository }}" "${{ github.event.pull_request.number }}"
diff --git a/.github/workflows/fork-integration-trigger.yml b/.github/workflows/fork-integration-trigger.yml
index 5bfc9949..ea1d2d8f 100644
--- a/.github/workflows/fork-integration-trigger.yml
+++ b/.github/workflows/fork-integration-trigger.yml
@@ -45,6 +45,9 @@ jobs:
             -f content=rocket
 
       - name: Trigger integration tests
+        env:
+          # need bot token, otherwise the IT workflows won't trigger fork-integration-status-reporter.yml
+          GH_TOKEN: ${{ secrets.BOT_GH_TOKEN }}
         run: |
           # run all integration test workflows in context of main branch, passing the PR head SHA as an input
           for workflow in s3-integration.yml gcs-integration.yml alioss-integration.yml azurebs-integration.yml dav-integration.yml; do