Skip to content

ci(release): open the version PR with a GitHub App token - #181

Merged
pedroapfilho merged 1 commit into
mainfrom
ci/release-app-token
Oct 14, 2026
Merged

pedroapfilho merged 1 commit into
mainfrom
ci/release-app-token

Conversation

@pedroapfilho

Copy link
Copy Markdown
Owner

Same change as pedroapfilho/astro-theme-awesomeness#131, required by the orchestrator's release-app-token, release-no-workflow-token and release-no-gate-dispatch rules (unlockers-io/orchestrator#192).

Since GitHub's 2026-06-11 change, pull_request runs on a PR opened by GITHUB_TOKEN wait for a person to approve them, and the dispatched gate copies collided with them by check name. Now:

  • App token: the release job mints an installation token with actions/create-github-app-token, and changesets/action receives it through its github-token input.
  • Version PR: the app opens it, so its required checks run without approval, and the gate-dispatch step is gone.
  • Checkout credentials: checkout keeps none, since changesets v2 commits, tags and releases through the API.
  • GITHUB_TOKEN scope: narrowed to contents: read plus id-token: write for npm trusted publishing.

Only release.yml changes. Needs vars.RELEASE_APP_CLIENT_ID and secrets.RELEASE_APP_PRIVATE_KEY before merge.

GitHub parks pull_request runs on PRs that GITHUB_TOKEN opens until a person
approves them, so the version PR's required checks never started on their own.
An app token reaches changesets through its github-token input, checkout keeps
no credentials since changesets v2 pushes through the API, and the gate
dispatch step goes.
@vercel

vercel Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
dashfoo-demo-vite Ready Ready Preview Oct 14, 2026 12:12am UTC
dashfoo-docs Ready Ready Preview Oct 14, 2026 12:12am UTC
dashfoo-landing Ready Ready Preview Oct 14, 2026 12:12am UTC

This branch was successfully deployed

3 active deployments
Preview – dashfoo-landing — 9875f356 Deployed Oct 14, 2026 by vercel[bot]
Preview – dashfoo-demo-vite — 9875f356 Deployed Oct 14, 2026 by vercel[bot]
Preview – dashfoo-docs — 9875f356 Deployed Oct 14, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant