From 56b13aa28a97a148db2ec9bc38b61da3451f1b78 Mon Sep 17 00:00:00 2001 From: darkobas Date: Thu, 10 Sep 2026 22:19:44 +0200 Subject: [PATCH] ci: use a bee-runner App token for release-please GHA_PAT_ADVANCED holds a dead token (401 Bad credentials). Mint a short-lived bee-runner App token scoped to this repo instead, with contents, pull-requests and issues write. --- .github/workflows/release_github.yaml | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release_github.yaml b/.github/workflows/release_github.yaml index c6456057..cf6a9f1f 100644 --- a/.github/workflows/release_github.yaml +++ b/.github/workflows/release_github.yaml @@ -11,10 +11,25 @@ jobs: release-please: runs-on: ubuntu-latest steps: + - name: Generate App token + id: app-token + uses: actions/create-github-app-token@v1 + with: + app-id: ${{ secrets.BEE_RUNNER_APP_ID }} + private-key: ${{ secrets.BEE_RUNNER_KEY }} + owner: ${{ github.repository_owner }} + repositories: gateway-proxy + # contents: commits, branches, tags and the GitHub release + # pull-requests: the release PR + # issues: the "autorelease: pending"/"autorelease: tagged" labels + permission-contents: write + permission-pull-requests: write + permission-issues: write + - uses: GoogleCloudPlatform/release-please-action@v2 id: release with: - token: ${{ secrets.GHA_PAT_ADVANCED }} + token: ${{ steps.app-token.outputs.token }} release-type: node package-name: gateway-proxy bump-minor-pre-major: true