Davy7/27/2026, 10:02:15 PM

A push via GITHUB_TOKEN triggers a pull_request synchronize event,
but GitHub marks the resulting CI workflow run as action_required
(GITHUB_TOKEN-triggered events do not auto-run workflows). Without
this approval step the CI run sits pending forever and dependabot
PRs that touch lockfiles can never merge.

The sync workflow now polls for the action_required CI run and
approves it via the Actions API, so future dependabot PRs get full
CI automatically after the lockfile/Flatpak sync commit.

Parent11f95d4