From e9c97b92b4c4e4d4da90ac2a15c1862f0154fb9a Mon Sep 17 00:00:00 2001
From: Constanza <constanza.casanueva@mi.unc.edu.ar>
Date: Sat, 23 May 2026 15:58:09 -0300
Subject: [PATCH] fix(ci): use BOT_PR_TOKEN for PR creation + auto-merge

The org disables "write" workflow permissions, so the default
GITHUB_TOKEN cannot open PRs or call gh pr merge --auto. Use the
BOT_PR_TOKEN PAT (Contents + Pull Requests: write on this repo) for
the PR-creating and merging steps. Checkout keeps GITHUB_TOKEN
because it only needs to read the working tree.
---
 .github/workflows/collect-lime-results.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/collect-lime-results.yml b/.github/workflows/collect-lime-results.yml
index 1150b10..d80645e 100644
--- a/.github/workflows/collect-lime-results.yml
+++ b/.github/workflows/collect-lime-results.yml
@@ -133,7 +133,7 @@ jobs:
         id: cpr
         uses: peter-evans/create-pull-request@v7
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.BOT_PR_TOKEN }}
           base: develop
           branch: bot/lime-results
           delete-branch: true
@@ -155,7 +155,7 @@ jobs:
       - name: Enable auto-merge
         if: steps.cpr.outputs.pull-request-number
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.BOT_PR_TOKEN }}
         run: |
           gh pr merge --auto --squash \
             --repo "${{ github.repository }}" \