Merge branch 'main' into widget-richtext

Author: demshy

.github/workflows/labeler.yml

@@ -5,7 +5,7 @@ on:
 
 jobs:
   label-pr:
-    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false
+    if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false && github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
       - uses: netlify/[email protected]

functions/publish.js

@@ -53,13 +53,15 @@ exports.handler = async function(event) {
     const command = params.get('command');
     const userId = params.get('user_id');
 
-    const allowedUsers = (process.env.ALLOWED_USERS || '').split(',');
-    if (!allowedUsers.includes(userId)) {
+    const allowedUsers = (process.env.ALLOWED_USERS || '')
+      .split(',')
+      .map(u => u.trim().toLowerCase());
+    if (!allowedUsers.includes(userId.toLowerCase())) {
       throw new Error(`User '${params.get('user_name')}' is not allowed to run command`);
     }
 
     const expectedCommand = process.env.PUBLISH_COMMAND;
-    if (expectedCommand && expectedCommand == command) {
+    if (expectedCommand && expectedCommand === command) {
       const githubToken = process.env.GITHUB_TOKEN;
       const repo = process.env.GITHUB_REPO;
       await axios({