From ff6a086c06aad938e09a922aea29d4f3602f8e36 Mon Sep 17 00:00:00 2001
From: Andreas Braun <andreas.braun@mongodb.com>
Date: Thu, 14 Mar 2024 10:49:07 +0100
Subject: [PATCH] Use bot access token for merge-up pull requests

---
 .github/workflows/merge-up.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/merge-up.yml b/.github/workflows/merge-up.yml
index ade123af6..4abb8dc0c 100644
--- a/.github/workflows/merge-up.yml
+++ b/.github/workflows/merge-up.yml
@@ -5,12 +5,8 @@ on:
     branches:
       - "v[0-9]+.[0-9]+"
 
-permissions:
-  contents: write
-  pull-requests: write
-
 env:
-  GH_TOKEN: ${{ github.token }}
+  GH_TOKEN: ${{ secrets.MERGE_UP_TOKEN }}
 
 jobs:
   merge-up:
@@ -24,6 +20,7 @@ jobs:
         with:
           # fetch-depth 0 is required to fetch all branches, not just the branch being built
           fetch-depth: 0
+          token: ${{ secrets.MERGE_UP_TOKEN }}
 
       - name: Create pull request
         id: create-pull-request