this is similar to the issues with PRs from external repos.. but it's for dependabot e..g, here is a failing run

https://github.com/feldera/feldera/actions/runs/22641426336/job/65618210997