Skip to content

ci: push package/dep bump using personal access token - #123

Merged
dwilding merged 1 commit into
mainfrom
fix-bump-push
Oct 27, 2026
Merged

dwilding merged 1 commit into
mainfrom
fix-bump-push

Conversation

@dwilding

@dwilding dwilding commented Oct 26, 2026 •

Copy link
Copy Markdown
Owner

The package/dep bump workflow may edit workflow files. Pushing will require a personal access token.

@dwilding dwilding changed the title ci: push bump branch with a PAT ci: push package/dep bump using personal access token Oct 26, 2026
GITHUB_TOKEN is a GitHub App installation token, so GitHub never grants
it the workflows permission, and it can't push commits touching
.github/workflows/*. The bump branch carries workflow-file changes (the
rust-just and borescope pin bumps), so push it with a fine-grained PAT,
stored as DWILDING_GITHUB_TOKEN in the personal-token environment. The
PR is created with GITHUB_TOKEN, so the reviewer request works.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@dwilding
dwilding merged commit c0c3878 into main Oct 27, 2026
8 checks passed
@dwilding
dwilding deleted the fix-bump-push branch October 27, 2026 01:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants