revert automerge changes and improve with latest standards

Author: cloutierMat

.github/dependabot.yml

@@ -14,8 +14,3 @@ updates:
     directory: "/cdk"
     schedule:
       interval: "weekly"
-
-  - package-ecosystem: "github-actions"
-    directory: "/cdk"
-    schedule:
-      interval: "weekly"

.github/workflows/dependabot-automerge.yml

@@ -1,39 +1,21 @@
 name: Dependabot auto-merge
-on:
-  workflow_run:
-    workflows: ["Test AppSync utils"]
-    types:
-      - completed
+on: pull_request
 
 permissions:
-  contents: write
   pull-requests: write
 
 jobs:
   dependabot:
     runs-on: ubuntu-latest
-    if: github.actor == 'dependabot[bot]'
+    if: github.actor == 'dependabot[bot]' && github.repository == 'localstack/appsync-utils'
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1
+        uses: dependabot/fetch-metadata@v2
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
-
       - name: Enable auto-merge for Dependabot PRs
-        if: ${{ github.event.workflow_run.conclusion == 'success' }}
         run: gh pr merge --auto --squash "$PR_URL"
         env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Comment on PR if tests failed
-        if: ${{ github.event.workflow_run.conclusion == 'failure' }}
-        run: |
-          gh pr comment "$PR_URL" --body "🚫 Auto-merge skipped: one or more test jobs failed.
-
-          Please review the failing checks and resolve any issues.
-          "
-        env:
-          PR_URL: ${{ github.event.pull_request.html_url }}
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GH_TOKEN: ${{secrets.GITHUB_TOKEN}}