Skip to content

Use RELEASE_TOKEN to bypass branch protection in bump-and-release#12

Merged
stedrew merged 1 commit intomainfrom
fix/bump-release-use-pat
Mar 11, 2026
Merged

Use RELEASE_TOKEN to bypass branch protection in bump-and-release#12
stedrew merged 1 commit intomainfrom
fix/bump-release-use-pat

Conversation

@stedrew
Copy link
Contributor

@stedrew stedrew commented Mar 11, 2026

Summary

  • Use RELEASE_TOKEN (PAT) instead of default GITHUB_TOKEN in the checkout step of bump-and-release.yml
  • The default GITHUB_TOKEN cannot push to a protected branch even with bypass actors configured

Prerequisites

  • Create a fine-grained PAT with Contents (read/write) permission scoped to denoslab/LENS
  • Add it as a repository secret named RELEASE_TOKEN

Test plan

  • Merge this PR, then re-run "Bump and Release" workflow
  • Verify the version bump commit and tag are pushed to main

🤖 Generated with Claude Code

The default GITHUB_TOKEN cannot push directly to a protected branch
even when github-actions[bot] is listed as a bypass actor. Use a PAT
stored as RELEASE_TOKEN instead.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@stedrew stedrew merged commit a256680 into main Mar 11, 2026
1 check passed
@stedrew stedrew deleted the fix/bump-release-use-pat branch March 11, 2026 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant