From 4d6f74978e6b56416772094c31851ae005602039 Mon Sep 17 00:00:00 2001
From: Ivan Petkov <ivanppetkov@gmail.com>
Date: Sun, 23 Oct 2022 14:42:23 -0700
Subject: [PATCH] ci: disable automatic approval for flake update workflow

---
 .github/workflows/update-flake.yml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/update-flake.yml b/.github/workflows/update-flake.yml
index 3510c2df..2c2ac779 100644
--- a/.github/workflows/update-flake.yml
+++ b/.github/workflows/update-flake.yml
@@ -29,9 +29,11 @@ jobs:
           automated
           dependencies
           flake update
-
-    - uses: peter-evans/enable-pull-request-automerge@v2
-      with:
-        token: ${{ secrets.PAT_FLAKE_UPDATE }}
-        pull-request-number: ${{ steps.flakeupdate.outputs.pull-request-number }}
-        merge-method: "squash"
+    # Fine grained Personal Access Tokens do not yet work with GitHub's GraphQL API
+    # so we'll stick with manual approval for now
+    # https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token#about-personal-access-tokens
+    # - uses: peter-evans/enable-pull-request-automerge@v2
+    #   with:
+    #     token: ${{ secrets.PAT_FLAKE_UPDATE }}
+    #     pull-request-number: ${{ steps.flakeupdate.outputs.pull-request-number }}
+    #     merge-method: "squash"