Bump actions/checkout from 2 to 3

.github/workflows/auto-approve.yml

@@ -1,5 +1,5 @@
 name: Dependabot auto-approve
-on: pull_request_target
+on: pull_request
 permissions:
   pull-requests: write
 jobs:
@@ -11,9 +11,12 @@ jobs:
       - name: Dependabot metadata
         id: dependabot-metadata
         uses: dependabot/[email protected]
+      - name: Checkout code
+        uses: actions/checkout@v3
       - name: Approve a PR
         run: |
-          if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" == "REVIEW_REQUIRED" ]; 
+          gh pr status --json reviewDecision
+          if [ "$(gh pr status --json reviewDecision -q .currentBranch.reviewDecision)" != "APPROVED" ]; 
           then gh pr review --approve "$PR_URL"
           else echo "PR already approved, skipping additional approvals to minimize emails/notification noise.";
           fi

.github/workflows/azure-static-web-apps-orange-moss-06ebe8f10.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Build and Deploy Job
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
         with:
           submodules: true
       - name: Build And Deploy

.github/workflows/gh-pr-status.yml

@@ -0,0 +1,15 @@
+name: Get results of `gh pr status`
+on: pull_request
+permissions:
+  pull-requests: write
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - run: |
+          BODY=$(gh pr status --json reviewDecision)
+          gh pr comment "$PR_URL" -b $BODY
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}