A GitHub Action that patches the pnpm advisories Dependabot cannot — and the authentication approach decided the solution
Dependabot cannot update transitive dependencies on pnpm. Building the GitHub Action that patches them, and why its credential decided the design.

