Use GitHub App token when checking out main in release workflow#1175
Merged
juliusmarminge merged 2 commits intomainfrom Mar 17, 2026
Merged
Use GitHub App token when checking out main in release workflow#1175juliusmarminge merged 2 commits intomainfrom
juliusmarminge merged 2 commits intomainfrom
Conversation
- Mint a GitHub App token before the publish job checkout - Pass the app token to `actions/checkout` when pulling `main` - Regenerate `mockServiceWorker.js` with MSW package version 2.12.10
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
📝 Coding Plan
Comment |
- resolve the GitHub App bot user and noreply email via `gh api` - configure `git` commit author from app bot outputs instead of `github-actions[bot]` - enable persisted checkout credentials for the release workflow
aaditagrawal
pushed a commit
to aaditagrawal/t3code
that referenced
this pull request
Mar 18, 2026
4 tasks
ashvinnihalani
referenced
this pull request
in ashvinnihalani/t3code
Mar 19, 2026
ashvinnihalani
referenced
this pull request
in ashvinnihalani/t3code
Mar 19, 2026
gabrielMalonso
pushed a commit
to gabrielMalonso/t3code
that referenced
this pull request
Mar 19, 2026
apexsloth
pushed a commit
to apexslothforks/t3code
that referenced
this pull request
Mar 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
publish_releasejob before checking outmain.actions/checkoutto ensure main checkout uses release app credentials.apps/web/public/mockServiceWorker.jswith MSW package version bump from2.12.9to2.12.10.Testing
actions/create-github-app-token@v2output token is used byactions/checkout@v6inpublish_release.Note
Medium Risk
Workflow changes affect release automation by altering checkout credentials and the identity used to push to
main; misconfiguration could cause releases to fail or push under the wrong actor. Runtime application behavior is otherwise unchanged aside from a regenerated MSW worker version string.Overview
Release workflow now uses a GitHub App token in the
finalizejob. It mints an app token viaactions/create-github-app-token@v2, uses it foractions/checkoutofmain(persisting credentials), and configures git author info to the App bot before committing/pushing the post-release version bump.Regenerates
apps/web/public/mockServiceWorker.js, bumping the embedded MSWPACKAGE_VERSIONfrom2.12.9to2.12.10.Written by Cursor Bugbot for commit 1d9bcf6. This will update automatically on new commits. Configure here.
Note
Use GitHub App token for checkout and commits in release workflow
finalizejob in release.yml now mints a GitHub App token viaactions/create-github-app-token@v2and uses it for the main branch checkout.github-actions[bot]identity.github-actions[bot].Macroscope summarized 1d9bcf6.