Improve GitHub Actions automations

.github/workflows/auto-merge.yml

@@ -16,12 +16,12 @@ jobs:
         run: gh pr merge --auto --delete-branch --squash "${PR_URL}"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
   auto-merge-updates:
     runs-on: ubuntu-latest
-    if: ${{ github.actor == 'monosans' && startsWith(github.head_ref, 'update/') }}
+    if: ${{ github.actor_id == secrets.APP_ID }}
     steps:
       - run: gh pr merge --auto --delete-branch --squash "${PR_URL}"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/update-dependencies.yml

@@ -2,7 +2,7 @@ name: Update dependencies
 on:
   workflow_dispatch:
   schedule:
-    - cron: 30 3 * * *
+    - cron: 30 1 * * *
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -21,12 +21,16 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: ${{ matrix.cmd }}
+      - id: generate-token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.PRIVATE_KEY }}
       - uses: peter-evans/create-pull-request@v6
         with:
-          token: ${{ secrets.PAT }}
+          token: ${{ steps.generate-token.outputs.token }}
           commit-message: ${{ matrix.commit-msg }}
-          committer: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
-          author: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
           branch: ${{ matrix.branch }}
+          delete-branch: true
           title: ${{ matrix.commit-msg }}
           body: