vy commented on code in PR #476: URL: https://github.com/apache/logging-parent/pull/476#discussion_r3257608992
########## src/site/antora/modules/ROOT/pages/workflows.adoc: ########## @@ -126,33 +126,41 @@ include::example$analyze-dependabot.yaml[tag=analyze-dependabot,indent=0] Helps to process Dependabot pull requests by: -* Generating changelog entries for the updated dependencies. -* Enabling the "auto-merge" option for the pull request. +* Generating changelog entries for the updated dependencies and committing them to the PR branch. +* Switching the pull request into “draft mode”. -The workflow needs the following privileged tokens: +The workflow only needs the default `GITHUB_TOKEN` with `contents: write` and `pull-requests: write` permissions. +No Personal Access Token (PAT) is required. Review Comment: Can we remove all mentions of PAT, please? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
