Eric Haggar

Just tried with `pull_request_target` on one of our private repos: ``` name: Dependabot PR on: pull_request_target jobs: auto-approve-and-merge: name: Auto Approve & Merge runs-on: ubuntu-latest if: github.actor == 'dependabot[bot]' ||...

@ahmadnassri The only restrictions are on the `main` branch. However, `dependabot-preview` is given permission to merge to `main` 🤔 

@ahmadnassri The token that we're using is a global secret shared across our organization's repos. I finally got it to work by the way 🎉 I had push restrictions on...