workflow: use pull_request_target for dependabot auto merge

jimschubert · jimschubert · commit 75f10e28c06d · 2026-02-02T17:48:30.000-05:00
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
@@ -19,7 +19,7 @@
 name: Dependabot Auto-merge Security Updates
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, reopened]
 
 permissions:
