From 0e958388f8e0756b661afdb9211f346cfd3fa632 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 11 Mar 2026 22:06:51 +0000
Subject: [PATCH 1/2] Initial plan


From 99fa0cd8421ce96457b769c1b41e7031a8d9d55d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 11 Mar 2026 22:09:12 +0000
Subject: [PATCH 2/2] fix: address PR #39 review comments on
 dependabot-automerge workflow

Co-authored-by: don-petry <36422719+don-petry@users.noreply.github.com>
---
 .github/workflows/dependabot-automerge.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml
index 7a8a00e0..cfaa140f 100644
--- a/.github/workflows/dependabot-automerge.yml
+++ b/.github/workflows/dependabot-automerge.yml
@@ -1,14 +1,20 @@
 name: Dependabot auto-merge
 
-on: pull_request
+on:
+  pull_request:
+    branches:
+      - main
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
+  pull-requests: read
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     if: github.actor == 'dependabot[bot]'
     steps:
       - name: Dependabot metadata