name: Merge safe Action updates
'on':
  workflow_run:
    workflows:
    - Action policy
    types:
    - completed
permissions:
  contents: write
  pull-requests: write
jobs:
  merge:
    if: github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'pull_request'
    runs-on: ubuntu-24.04
    timeout-minutes: 35
    steps:
    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      with:
        persist-credentials: false
    - name: Merge validated patch and minor updates
      env:
        GH_TOKEN: ${{ github.token }}
      run: python3 .github/scripts/merge_action_updates.py