GITHUB_TOKEN is readonly and can't be used to merge the PR

[fastify]

GITHUB_TOKEN is readonly and can't be used to merge the PR

[mcollina]

Unfortunately using a personal access token is extremely risky as it would have access to more than one repo and action and therefore it would be way more risky than the temporary token Github Actions used before.

I think we should use pull_request_target and update all the repos :/.

[simoneb]

I suggest we consider using the workflow_run instead, which can isolate the automerge in a standalone workflow file which can be used as-is everywhere, without requiring modifications to the main CI workflow.

[mcollina]

That would be better, yes.

[inigo-garcia]

Adding extra information about possible solutions:

https://github.com/peter-evans/create-pull-request/blob/master/docs/concepts-guidelines.md#triggering-further-workflow-runs