From df04c9109a1d4557b149296a5646cc4ade55e869 Mon Sep 17 00:00:00 2001
From: Eddie A Tejeda <669988+eddietejeda@users.noreply.github.com>
Date: Wed, 2 Sep 2026 17:06:50 -0700
Subject: [PATCH] ci: skip scenario-parity on dependabot PRs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Dependabot-triggered workflow runs don't receive repository secrets, so
the create-github-app-token step fails with an empty private-key before
the parity check can run — every dependabot PR fails this required-looking
check. Dependency bumps can't change scenario parity, so skip the job.
---
 .github/workflows/integration-tests.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 71e3c70..00a6d51 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,6 +14,10 @@ jobs:
   # same pattern as regenerate.yml.
   scenario-parity:
     runs-on: ubuntu-latest
+    # Dependabot-triggered runs don't receive repository secrets, so the App
+    # token mint below fails before the check can run. Dependency bumps can't
+    # change scenario parity, so skip instead.
+    if: github.actor != 'dependabot[bot]'
     steps:
       - name: Generate GitHub App token
         id: app-token