From 9e5bba150b87cf97669bd8ec4680506a37aff42a Mon Sep 17 00:00:00 2001 From: konard Date: Sat, 25 Oct 2025 10:26:15 +0200 Subject: [PATCH 1/3] Initial commit with task details for issue #133 Adding CLAUDE.md with task information for AI processing. This file will be removed when the task is complete. Issue: undefined --- CLAUDE.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 CLAUDE.md diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 0000000..631bd0d --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1,5 @@ +Issue to solve: undefined +Your prepared branch: issue-133-629cdf98 +Your prepared working directory: /tmp/gh-issue-solver-1761380770668 + +Proceed. \ No newline at end of file From 2cd34dbd7ff0d76848318ba13e574b19e8ec17da Mon Sep 17 00:00:00 2001 From: konard Date: Sat, 25 Oct 2025 10:29:53 +0200 Subject: [PATCH 2/3] Fix Dependabot auto-merge authentication issue MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Root Cause: The workflow was using secrets.DEPENDABOT_AUTO_MERGE_TOKEN which either doesn't exist or has incorrect permissions. GitHub changed how Dependabot PRs work - they now have restricted permissions for security reasons. Changes: 1. Replaced ahmadnassri/action-dependabot-auto-merge@v2 with official GitHub-recommended approach using dependabot/fetch-metadata@v2 2. Changed event trigger from pull_request_target to pull_request for better security (avoids untrusted code execution) 3. Added explicit permissions: contents: write, pull-requests: write 4. Used secrets.GITHUB_TOKEN instead of custom token 5. Added condition to only run on dependabot[bot] PRs 6. Configured to auto-merge minor and patch updates (matching original 'target: minor' behavior) References: - https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions - https://github.com/ahmadnassri/action-dependabot-auto-merge/issues/60 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- .github/workflows/AutoMerge.yml | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/.github/workflows/AutoMerge.yml b/.github/workflows/AutoMerge.yml index d5c5e0c..64a9fd2 100644 --- a/.github/workflows/AutoMerge.yml +++ b/.github/workflows/AutoMerge.yml @@ -1,14 +1,25 @@ name: auto-merge on: - pull_request_target: + pull_request + +permissions: + contents: write + pull-requests: write jobs: auto-merge: runs-on: ubuntu-latest + if: github.event.pull_request.user.login == 'dependabot[bot]' steps: - - uses: actions/checkout@v2 - - uses: ahmadnassri/action-dependabot-auto-merge@v2 + - name: Dependabot metadata + id: metadata + uses: dependabot/fetch-metadata@v2 with: - target: minor - github-token: ${{ secrets.DEPENDABOT_AUTO_MERGE_TOKEN }} + github-token: "${{ secrets.GITHUB_TOKEN }}" + - name: Enable auto-merge for Dependabot PRs + if: steps.metadata.outputs.update-type == 'version-update:semver-minor' || steps.metadata.outputs.update-type == 'version-update:semver-patch' + run: gh pr merge --auto --merge "$PR_URL" + env: + PR_URL: ${{ github.event.pull_request.html_url }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} From c7c7e0a699955295e22289087991fb43c42a57ba Mon Sep 17 00:00:00 2001 From: konard Date: Sat, 25 Oct 2025 10:32:08 +0200 Subject: [PATCH 3/3] Remove temporary CLAUDE.md file MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude --- CLAUDE.md | 5 ----- 1 file changed, 5 deletions(-) delete mode 100644 CLAUDE.md diff --git a/CLAUDE.md b/CLAUDE.md deleted file mode 100644 index 631bd0d..0000000 --- a/CLAUDE.md +++ /dev/null @@ -1,5 +0,0 @@ -Issue to solve: undefined -Your prepared branch: issue-133-629cdf98 -Your prepared working directory: /tmp/gh-issue-solver-1761380770668 - -Proceed. \ No newline at end of file