From cff38ac53d392317325e2cbf5281956ff59174be Mon Sep 17 00:00:00 2001 From: kaitranntt Date: Fri, 19 Dec 2025 04:07:45 -0500 Subject: [PATCH] fix(ci): use built-in GITHUB_TOKEN for release comments Changes semantic-release to use the built-in GITHUB_TOKEN instead of PAT_TOKEN so that release comments appear from github-actions[bot] instead of the repository owner's personal account. PAT_TOKEN is still used for checkout to ensure downstream workflows can be triggered by the release commits. --- .github/workflows/dev-release.yml | 6 ++++-- .github/workflows/release.yml | 6 ++++-- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml index 48fd91aa..e011b9b6 100644 --- a/.github/workflows/dev-release.yml +++ b/.github/workflows/dev-release.yml @@ -49,8 +49,10 @@ jobs: id: release env: HUSKY: 0 - GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }} - GH_TOKEN: ${{ secrets.PAT_TOKEN }} + # Use built-in GITHUB_TOKEN for bot identity on comments/releases + # PAT_TOKEN is only used for checkout (to trigger downstream workflows) + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0e1f2719..09249950 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -48,8 +48,10 @@ jobs: id: release env: HUSKY: 0 - GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }} - GH_TOKEN: ${{ secrets.PAT_TOKEN }} + # Use built-in GITHUB_TOKEN for bot identity on comments/releases + # PAT_TOKEN is only used for checkout (to trigger downstream workflows) + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} run: |