e505cfa2b9
Previously the workflow fell back to GITHUB_TOKEN when the PAT wasn't set — which was silently broken: the push succeeds but GitHub's anti-workflow-loop safeguard means no new CI runs on the dedupe commit. Reviewers see stale green CI and the dedupe itself isn't tested until the next dependabot rebase. Make the PAT a hard requirement: preflight check fails with a clear message when the secret is missing, and the checkout step uses it (which is what persists auth for the later `git push`). Intent is now obvious from the YAML. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cd-apps.yml | ||
| cd-brouter.yml | ||
| cd-infra.yml | ||
| ci.yml | ||
| dependabot-dedupe.yml | ||