From 452847441f7df08bfef11db2f5a5bbf072e1d7bf Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 2 Dec 2023 12:34:44 +0000
Subject: [PATCH 1/3] chore(deps): update dependency suzuki-shunsuke/ghalint to
 v0.2.7

---
 aqua/imports/ghalint.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/aqua/imports/ghalint.yaml b/aqua/imports/ghalint.yaml
index a13f46e56..687030bb5 100644
--- a/aqua/imports/ghalint.yaml
+++ b/aqua/imports/ghalint.yaml
@@ -1,2 +1,2 @@
 packages:
-  - name: suzuki-shunsuke/ghalint@v0.2.6
+  - name: suzuki-shunsuke/ghalint@v0.2.7

From 68435af6cced0527d998e3139651ba49609683a6 Mon Sep 17 00:00:00 2001
From: "aquaproj-aqua-releaser[bot]"
 <95135029+aquaproj-aqua-releaser[bot]@users.noreply.github.com>
Date: Sat, 2 Dec 2023 12:35:14 +0000
Subject: [PATCH 2/3] chore(aqua): update aqua/aqua-checksums.json

---
 aqua/aqua-checksums.json | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/aqua/aqua-checksums.json b/aqua/aqua-checksums.json
index 88beaf349..ebaa8e7cf 100644
--- a/aqua/aqua-checksums.json
+++ b/aqua/aqua-checksums.json
@@ -186,33 +186,33 @@
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_darwin_amd64.tar.gz",
-      "checksum": "A0D52E0D95B4F1E78D25B607FFC97A92CD9856FEE5ABA87D8DD376D119642E57",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_darwin_amd64.tar.gz",
+      "checksum": "9B4EF4783A6C1918CEBC90BF03C5C22A4C0E882008758F31067C23EA7167FCD1",
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_darwin_arm64.tar.gz",
-      "checksum": "CEFB514A0BEA65FF0291787409BC8FA9DFAA1AC08777F93601F9ADA6FB51DB4A",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_darwin_arm64.tar.gz",
+      "checksum": "69821A2CCB2E04EA4AAA30DF9A4C0FFF9291B757086159CE30A0C5E60AAB1E90",
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_linux_amd64.tar.gz",
-      "checksum": "6B5860EDD70D5344F4D7CB8D136DF638C7A58A2729160459893F0173877CAB03",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_linux_amd64.tar.gz",
+      "checksum": "184A1A61E5B79F2C2D3B95DBE7E67CEDEEE50FA16E4A34E454F1115C665162EE",
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_linux_arm64.tar.gz",
-      "checksum": "E91C048D0F5E50F067CEE6FF4BF837DDAD0BBCB19DA4D7EE70DC592EB72A4ACF",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_linux_arm64.tar.gz",
+      "checksum": "2516F49A92243ED30A4C5D02D0E1625848F33845832FFE5984C4384363D913A3",
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_windows_amd64.tar.gz",
-      "checksum": "BDCC609ABACDBDB938D159ED0809781998BB889AD48538DB5FB01498F79D0DBB",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_windows_amd64.tar.gz",
+      "checksum": "079DFF897B46682D339CD556662DEE0FDB30429CFF3654708FE34FD14460D625",
       "algorithm": "sha256"
     },
     {
-      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.6/ghalint_0.2.6_windows_arm64.tar.gz",
-      "checksum": "11672AC703EF3E912957A80A079F4C2D496A9304B6953D03C213E403860113C1",
+      "id": "github_release/github.com/suzuki-shunsuke/ghalint/v0.2.7/ghalint_0.2.7_windows_arm64.tar.gz",
+      "checksum": "D38EC5FDEDB06FB20A485C3DB0B44C3127B01A05141E5701DB6A70201CE2D701",
       "algorithm": "sha256"
     },
     {

From f99ddd25cd0c3cf1950223f4952c23d79200e636 Mon Sep 17 00:00:00 2001
From: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>
Date: Sat, 2 Dec 2023 22:01:12 +0900
Subject: [PATCH 3/3] ci: limit permissions and repositories

---
 .github/workflows/wc-enable-auto-merge.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/wc-enable-auto-merge.yaml b/.github/workflows/wc-enable-auto-merge.yaml
index dda9ca7e5..32fa33ebc 100644
--- a/.github/workflows/wc-enable-auto-merge.yaml
+++ b/.github/workflows/wc-enable-auto-merge.yaml
@@ -19,6 +19,15 @@ jobs:
         with:
           app_id: ${{secrets.gh_app_id}}
           private_key: ${{secrets.gh_app_private_key}}
+          permissions: >-
+            {
+              "contents": "write",
+              "pull-requests": "write"
+            }
+          repositories: >-
+            [
+              "${{github.event.repository.name}}"
+            ]
       - run: gh -R "$GITHUB_REPOSITORY" pr merge --squash --auto --delete-branch "$PR_NUMBER"
         env:
           GITHUB_TOKEN: ${{steps.generate_token.outputs.token}} # Use GitHub App to trigger GitHub Actions Workflow by merge commit.