has to be a dependabot pr but anyone can trigger the workflow kicking off by taking off and then reapplying the dependencies label

Signed-off-by: Amndeep Singh Mann <amann@mitre.org>

Author: Amndeep7

.github/workflows/auto-approve-and-merge.yml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   approve:
     name: Auto-approve dependabot PRs
-    if: github.actor == 'dependabot[bot]'
+    if: github.event.pull_request.user.login == 'dependabot[bot]' && contains(github.event.pull_request.labels.*.name, 'dependencies')
     runs-on: ubuntu-24.04
     steps:
     - uses: hmarr/auto-approve-action@v4