From c6fe511d795e181adafba90ee3ef9f1d962ecaa3 Mon Sep 17 00:00:00 2001
From: Barry Gordon <896971+brrygrdn@users.noreply.github.com>
Date: Thu, 27 May 2021 17:13:28 +0100
Subject: [PATCH] Typos and example corrections

Co-authored-by: Mike McDonald <2575327+asciimike@users.noreply.github.com>
---
 README.md  | 11 ++++-------
 action.yml |  2 +-
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/README.md b/README.md
index c4b43f2..a9c89bf 100644
--- a/README.md
+++ b/README.md
@@ -35,7 +35,7 @@ Subsequent actions will have access to the following outputs:
 - `steps.dependabot-metadata.outputs.dependency-type`
   - The type of dependency Dependabot has determined this to be, e.g. "direct:production"
 - `steps.dependabot-metadata.outputs.update-name`
-  - The semvvar change being made, e.g. "version-update:semver-major"
+  - The semvver change being made, e.g. "version-update:semver-major"
 
 **Note:** These outputs will only be populated if the target Pull Request was opened by Dependabot and contains
 **only** Dependabot-created commits.
@@ -49,7 +49,7 @@ name: Dependabot auto-approve
 description: Auto-approve Dependabot PRs
 on: pull_request_target
 permissions:
-   # scope down as necessary here
+  pull-requests: write
 jobs:
   dependabot:
     if: ${{ github.actor == 'dependabot[bot]' }}
@@ -57,7 +57,6 @@ jobs:
       - name: Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata
-        # outputs = {dependency_name: foo, dependency_type: development, update_type: version-update:semver-patch }
       - name: Approve a PR
         run: gh pr review --approve "$PR_URL"
         env:
@@ -72,7 +71,7 @@ name: Dependabot auto-merge
 description: Enable GitHub Automerge for patch updates on `bar`
 on: pull_request_target
 permissions:
-   # scope down as necessary here
+  pull-requests: write
 jobs:
   dependabot:
     if: ${{ github.actor == 'dependabot[bot]' }}
@@ -80,7 +79,6 @@ jobs:
       - name: Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata
-        # outputs = {dependency_name: foo, dependency_type: development, update_type: version-update:semver-patch}
       - name: Enable auto-merge for Dependabot PRs # respects checks and approvals
         if: ${{steps.metadata.outputs.dependency_name == "bar" && steps.metadata.outputs.update_type == "version-update:semver-patch"}}
         run: gh pr merge --auto --merge "$PR_URL"
@@ -96,7 +94,7 @@ name: Dependabot auto-label
 description: Label all production dependencies with the "production" label
 on: pull_request_target
 permissions:
-   # scope down as necessary here
+  pull-requests: write
 jobs:
   dependabot:
     if: ${{ github.actor == 'dependabot[bot]' }}
@@ -104,7 +102,6 @@ jobs:
       - name: Dependabot metadata
         id: metadata
         uses: dependabot/fetch-metadata
-        # outputs = {dependency_name: foo, dependency_type: development, update_type: version-update:semver-patch}
       - name: Add a label for all production dependencies
         if: contains(steps.metadata.outputs.dependency_type, "production")
         run: gh pr edit "$PR_URL" --add-label "production"
diff --git a/action.yml b/action.yml
index ff824a5..697d7c8 100644
--- a/action.yml
+++ b/action.yml
@@ -10,7 +10,7 @@ outputs:
   dependency-type:
     description: 'The type of dependency Dependabot has determined this to be, e.g. "direct:production".'
   update-type:
-    description: 'The semvvar change being made, e.g. "version-update:semver-major"'
+    description: 'The semvver change being made, e.g. "version-update:semver-major"'
 runs:
   using: 'node12'
   main: 'dist/index.js'