Invalid workflow file: .github/workflows/dependabot-auto-merge.yml#L5
The workflow is not valid. .github/workflows/dependabot-auto-merge.yml (Line: 5, Col: 3): Error calling workflow 'adoptium/.github/.github/workflows/dependabot-auto-merge.yml@main'. The workflow is requesting 'contents: write, pull-requests: write', but is only allowed 'contents: read, pull-requests: none'.
Without this change, forks that default to readonly permissions fail (By default, when you create a new organization,
GITHUB_TOKEN
only has read access for thecontents
andpackages
scopes.) with:With this change, the workflow is deemed valid (and could thus do whatever it does).