The dispatcher verifies vault actions by checking whether the merger of the PR is an admin. With the auto-merge workflow, the merger is always the bot that requested auto-merge (e.g. dev-bot), not the human who approved the PR. This change: 1. Adds get_pr_reviews() to fetch reviews from Forgejo API 2. Adds verify_admin_approver() to check for admin APPROVED reviews 3. Updates verify_admin_merged() to check approver first, then fallback to merger check for backwards compatibility This ensures auto-merged vault PRs approved by an admin pass verification, while still rejecting vault PRs without any admin approval. |
||
|---|---|---|
| .. | ||
| agents | ||
| edge | ||
| index.html | ||