apache/infrastructure-actions' approved_patterns.yml (the actual org
allowlist source of truth) lists eps1lon/actions-label-merge-conflict@*
- a wildcard covering any version/SHA - so no Infra ticket is needed
here at all, contrary to what the removed comment said.
While touching the file, also addressed zizmor's pedantic-persona
findings: scoped permissions to the job instead of the workflow, added
a concurrency group (queue rather than cancel, so an in-progress
paginated PR sweep always finishes), and commented the permission
grant.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
ccb8ad3db1