From eee0cf5bccc40f11eea45051e11261b07dc2180c Mon Sep 17 00:00:00 2001 From: Sil Date: Wed, 30 Sep 2026 22:22:49 +0200 Subject: [PATCH] Open release pull requests with a GitHub App token Pull requests opened with GITHUB_TOKEN do not start workflows, so the required organization Check waited for manual approval. The fulldev-release app token fixes that. Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/release.yml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 76db544..81726ae 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,10 +20,20 @@ jobs: pull-requests: write steps: + # A GitHub App token instead of GITHUB_TOKEN, so the release pull request + # triggers the organization Check like any other pull request. + - name: Create release token + id: token + uses: actions/create-github-app-token@v3 + with: + client-id: ${{ vars.RELEASE_APP_CLIENT_ID }} + private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} + - name: Checkout uses: actions/checkout@v6 with: fetch-depth: 0 + token: ${{ steps.token.outputs.token }} - name: Setup PNPM uses: pnpm/action-setup@v6 @@ -47,4 +57,4 @@ jobs: commit: "[ci] release" title: "[ci] release" env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ steps.token.outputs.token }}