From 174e71cb67d3f8734666d700f26cf9a0d9dfc42f Mon Sep 17 00:00:00 2001 From: David Galloway Date: Mon, 17 Aug 2026 13:19:14 -0400 Subject: [PATCH] Allow auto-merge for PRs opened by the Sepia onboarding app GitHub Apps report author_association NONE, so PRs from sepia-lab-onboarding-app[bot] passed validation but were never auto-merged. Allow that bot explicitly; the head-repo check already guarantees the branch was pushed by something with write access. Signed-off-by: David Galloway --- .github/workflows/pr-validate.yml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/pr-validate.yml b/.github/workflows/pr-validate.yml index 7417100..d4a764a 100644 --- a/.github/workflows/pr-validate.yml +++ b/.github/workflows/pr-validate.yml @@ -26,14 +26,18 @@ jobs: # Auto-merge only when: # - validation passed and the PR touches nothing but ssh/*.pub files # - the PR branch lives in this repo (fork PRs get a read-only token) - # - the author is an owner/member/collaborator of the repo + # - the author is an owner/member/collaborator of the repo, or the + # Sepia onboarding GitHub App (apps report author_association NONE) needs: validate if: >- needs.validate.outputs.eligible == 'true' && github.event.pull_request.draft == false && github.event.pull_request.head.repo.full_name == github.repository && - contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), - github.event.pull_request.author_association) + ( + github.event.pull_request.user.login == 'sepia-lab-onboarding-app[bot]' || + contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), + github.event.pull_request.author_association) + ) runs-on: ubuntu-latest permissions: contents: write