From 8295c1693ba63d55727e484d1ea36b2659b5c216 Mon Sep 17 00:00:00 2001 From: Nick Collisson Date: Thu, 8 Oct 2026 17:20:49 -0400 Subject: [PATCH 1/2] fix: trigger release PR checks with SDK App token --- .github/workflows/release.yml | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c4fbc6f..28b5d6a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,8 +19,19 @@ jobs: outputs: release_created: ${{ steps.release.outputs.release_created }} steps: + - name: Generate token + id: generate-token + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + with: + app-id: ${{ vars.SDK_BOT_APP_ID }} + private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }} + permission-contents: write + permission-pull-requests: write + - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5 id: release + with: + token: ${{ steps.generate-token.outputs.token }} publish: needs: release-please From c91ee32416c79680e4d11130d3ccf32431d18bda Mon Sep 17 00:00:00 2001 From: Nick Collisson Date: Thu, 8 Oct 2026 17:22:46 -0400 Subject: [PATCH 2/2] docs: explain why release automation uses the App --- .github/workflows/release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 28b5d6a..2165b65 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -19,6 +19,7 @@ jobs: outputs: release_created: ${{ steps.release.outputs.release_created }} steps: + # App-created release PRs trigger CI and required workflows. - name: Generate token id: generate-token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0