From ad03b3771a5cd05f62cd51549b3e4a58b60256b1 Mon Sep 17 00:00:00 2001
From: Barrett Ruth <62671086+barrettruth@users.noreply.github.com>
Date: Tue, 3 Mar 2026 16:07:53 -0500
Subject: [PATCH] ci(digest): approve with DIGEST_PAT after disabling
 require_last_push_approval (#66)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

require_last_push_approval blocked barrettruth from approving their
own push. Disabled that restriction in the ruleset — 1 approval is
still required for all PRs, but the approver can now be the pusher.
DIGEST_PAT (barrettruth) approves, CI runs via PAT push, auto-merge
fires when checks pass.
---
 .github/workflows/upstream-digest.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/upstream-digest.yml b/.github/workflows/upstream-digest.yml
index df155e2..2ebfc22 100644
--- a/.github/workflows/upstream-digest.yml
+++ b/.github/workflows/upstream-digest.yml
@@ -45,5 +45,6 @@ jobs:
               --body "Automated weekly digest of new upstream activity. Triage by updating statuses and notes." \
               --base main \
               --head "${BRANCH}")
+            GH_TOKEN="${{ secrets.DIGEST_PAT }}" gh pr review "${PR_URL}" --approve
             gh pr merge "${PR_URL}" --auto --squash
           fi