feat: use vault secrets (#1118)

.circleci/config.yml

@@ -1,4 +1,3 @@
-
 version: 2.1
 jobs:
   check:
@@ -33,7 +32,6 @@ jobs:
           name: Run Unit Tests
           command: |
             npm run test:unit
-
   test-integration:
     docker:
       - image: cimg/node:16.11
@@ -46,7 +44,6 @@ jobs:
           name: Run Integration Tests
           command: |
             npm run test:integration
-
   test-e2e:
     docker:
       - image: cimg/node:16.11
@@ -59,15 +56,13 @@ jobs:
           name: Run E2E Tests
           command: |
             npm run test:e2e
-
   release:
     docker:
       - image: cimg/node:16.11
     steps:
       - checkout
       - run: npm install
       - run: npm run semantic-release
-
 workflows:
   test-and-release:
     jobs:

.contentful/vault-secrets.yaml

@@ -0,0 +1,5 @@
+version: 1
+services:
+  github-action:
+    policies:
+      - dependabot

.github/workflows/dependabot-approve-and-request-merge.yml

@@ -1,14 +1,15 @@
 name: "dependabot approve-and-request-merge"
 
-on:
-  pull_request_target
+on: pull_request_target
 
 jobs:
   worker:
+    permissions:
+      contents: write
+      id-token: write
     runs-on: ubuntu-latest
-
     if: github.actor == 'dependabot[bot]'
     steps:
-      - uses: contentful/dependabot-auto-merge@v1
+      - uses: contentful/github-auto-merge@v1
         with:
-          github_token: ${{ secrets.CF_ECOSYSTEM_BOT_GITHUB_TOKEN_AUTO_APPROVE }}
+          VAULT_URL: ${{ secrets.VAULT_URL }}