adjust workflows

.github/pr-labeler.yml

@@ -0,0 +1,3 @@
+automerge: 'update/*'
+autoupdate: 'update/*'
+dependency-update: 'update/*'

.github/workflows/auto-approve.yml

@@ -6,8 +6,10 @@ on:
 jobs:
   auto-approve:
     runs-on: ubuntu-22.04
+    permissions:
+      pull-requests: write
     steps:
-      - uses: hmarr/auto-approve-action@v3.2.1
+      - uses: hmarr/auto-approve-action@v3
         if: github.actor == 'scala-steward' || github.actor == 'renovate[bot]'
         with:
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
+          github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/auto-update.yaml

@@ -1,14 +1,20 @@
-name: autoupdate
+name: Autoupdate PRs
+
 on:
   push: {}
+  pull_request:
+    types:
+      - labeled
+
 jobs:
   autoupdate:
-    name: autoupdate
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: write
     steps:
       - uses: docker://chinthakagodawita/autoupdate-action:v1
         env:
-          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
-          PR_FILTER: "labelled"
-          PR_LABELS: "type: dependencies,autoupdate"
-          EXCLUDED_LABELS: "do-not-autoupdate"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_FILTER: labelled
+          PR_LABELS: autoupdate
+          MERGE_CONFLICT_ACTION: ignore

.github/workflows/pr-labeler.yml

@@ -0,0 +1,19 @@
+name: Label PR
+
+on:
+  pull_request_target:
+    types:
+      - reopened
+      - opened
+
+jobs:
+  pr-labeler:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: TimonVS/pr-labeler-action@v4
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          configuration-path: .github/pr-labeler.yml

.github/workflows/release-drafter.yml

@@ -2,11 +2,15 @@ name: Release Drafter
 
 on:
   push:
-    branches: ['master']
+    branches:
+      - master
 
 jobs:
   update_release_draft:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-20.04
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - uses: release-drafter/release-drafter@v5
         env: