From 14d698d0ed4eca2e96e69c0e08575edc53ea6368 Mon Sep 17 00:00:00 2001 From: Cron Date: Sun, 27 Sep 2026 14:33:50 -0500 Subject: [PATCH] chore(ci): authenticate the github apps by client id create-github-app-token v3.2.0 deprecates app-id in favour of client-id. The client id is a separate value from the app id, so each app gets its own secret; the old *_APP_ID secrets stay until both apps have run on the new input. --- .github/workflows/automerge.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index c6b0c3f..6654d09 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -27,7 +27,7 @@ jobs: id: generate_token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app-id: ${{ secrets.BOT_APP_ID }} + client-id: ${{ secrets.BOT_CLIENT_ID }} private-key: ${{ secrets.BOT_PRIVATE_KEY }} # gh with the app token, not a third-party action: one less dependency to diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c2bb0e1..5c09f0b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -43,7 +43,7 @@ jobs: id: promoter uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app-id: ${{ secrets.PROMOTER_APP_ID }} + client-id: ${{ secrets.PROMOTER_CLIENT_ID }} private-key: ${{ secrets.PROMOTER_PRIVATE_KEY }} - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 @@ -107,7 +107,7 @@ jobs: id: generate_token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: - app-id: ${{ secrets.BOT_APP_ID }} + client-id: ${{ secrets.BOT_CLIENT_ID }} private-key: ${{ secrets.BOT_PRIVATE_KEY }} - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1