From f9e61dbc78cf5ddd447b0d278205101174039a1a Mon Sep 17 00:00:00 2001
From: Saad Najmi <sanajmi@microsoft.com>
Date: Tue, 29 Sep 2026 16:49:00 -0700
Subject: [PATCH] ci(0.83): more fixes

---
 .github/workflows/microsoft-npm-publish.yml | 23 ++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/microsoft-npm-publish.yml b/.github/workflows/microsoft-npm-publish.yml
index 58a78bd53ce2..dcd3ba777955 100644
--- a/.github/workflows/microsoft-npm-publish.yml
+++ b/.github/workflows/microsoft-npm-publish.yml
@@ -63,9 +63,20 @@ jobs:
         id: configure-publish
         run: node .ado/scripts/configure-publish.mts --verbose
 
+      - name: Generate token for version PR
+        uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          permission-pull-requests: write # version PRs (Changesets)
+
       - name: Version packages
         id: version
         uses: changesets/action/version@v2
+        with:
+          github-token: ${{ steps.app-token.outputs.token }}
+          script: yarn changeset:version
 
   publish:
     if: needs.select-mode.outputs.mode == 'publish'
@@ -91,11 +102,17 @@ jobs:
       - name: Verify release config
         id: configure-publish
         run: node .ado/scripts/configure-publish.mts --verbose
+  
+      - name: Generate token for version PR
+        uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          permission-contents: write # for GH releases and Git tags (Changesets)
 
       - name: Publish packages
         uses: changesets/action/publish@v2
         with:
           pack-dir-artifact-id: ${{ needs.pack.outputs.pack-dir-artifact-id }}
-        env:
-          YARN_NPM_PUBLISH_ACCESS: public
-          YARN_NPM_PUBLISH_REGISTRY: https://registry.npmjs.org
\ No newline at end of file
+        with:
+          github-token: ${{ steps.app-token.outputs.token }}
\ No newline at end of file