Skip to content

ci(auto-tag): use GITHUB_TOKEN and dispatch publish instead of a PAT - #25

Merged
levz0r merged 1 commit into
developfrom
ci/auto-tag-without-pat
Oct 25, 2026
Merged

levz0r merged 1 commit into
developfrom
ci/auto-tag-without-pat

Conversation

@levz0r

@levz0r levz0r commented Oct 25, 2026

Copy link
Copy Markdown
Owner

The v1.2.1 auto-tag run failed at checkout (could not read Username for 'https://github.com'): PAT_TOKEN, created 2025-10-10, has expired. It existed only because a tag pushed with GITHUB_TOKEN doesn't trigger the tag-push publish workflow.

  • Check out and push the tag with the built-in GITHUB_TOKEN (contents: write)
  • Then start publishing explicitly: gh workflow run publish.yml --ref <tag> (actions: write). workflow_dispatch is exempt from the no-trigger rule, and github.ref is refs/tags/<tag>, so the GitHub Release step still runs
  • Job only runs on main: the default branch is now develop, so a bare manual dispatch would otherwise tag develop
  • Tag pushes by a person still trigger publish via the existing push: tags trigger

To release v1.2.1 after this reaches main: gh workflow run auto-tag.yml --ref main (the merge won't touch package.json, so auto-tag won't fire on its own). After that, PAT_TOKEN can be deleted.

🤖 Generated with Claude Code

The v1.2.1 auto-tag failed at checkout because PAT_TOKEN (created
2025-10-10) expired. The PAT existed only so the pushed tag would
trigger the publish workflow, which a GITHUB_TOKEN push doesn't.

Push the tag with GITHUB_TOKEN and start publish explicitly with
'gh workflow run publish.yml --ref <tag>' (workflow_dispatch is exempt
from that rule; github.ref is still refs/tags/<tag>, so the release
step runs). Restrict the job to main, since the default branch is now
develop and a bare manual dispatch would otherwise tag develop.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@levz0r
levz0r merged commit 45ab2d7 into develop Oct 25, 2026
2 checks passed
@levz0r
levz0r deleted the ci/auto-tag-without-pat branch October 25, 2026 10:43
@codecov

codecov Bot commented Oct 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (c25a038) to head (70caea1).
⚠️ Report is 2 commits behind head on develop.

Additional details and impacted files
@@            Coverage Diff            @@
##           develop       #25   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            4         4           
  Branches         1         1           
=========================================
  Hits             4         4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant