Skip to content

Update actions/create-github-app-token action to v2#324

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-2.x
Open

Update actions/create-github-app-token action to v2#324
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-2.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 6, 2026

This PR contains the following updates:

Package Type Update Change
actions/create-github-app-token action major v1v2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 6, 2026 11:29
@renovate renovate bot requested a review from mattgd February 6, 2026 11:29
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Feb 6, 2026

Greptile Overview

Greptile Summary

Updated actions/create-github-app-token from v1 to v2 in two workflow files (release.yml and version-bump.yml).

  • Both workflows use identical parameters (app-id and private-key) which remain compatible with v2
  • The action is used to generate GitHub App tokens for automated release creation and version bumping
  • No breaking changes affecting this implementation based on the identical parameter usage

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk
  • The change is a straightforward action version upgrade that maintains backward compatibility - the same parameters are used and no workflow logic is modified
  • No files require special attention

Important Files Changed

Filename Overview
.github/workflows/release.yml Updated actions/create-github-app-token from v1 to v2 for generating GitHub App tokens in release workflow
.github/workflows/version-bump.yml Updated actions/create-github-app-token from v1 to v2 for generating GitHub App tokens in version bump workflow

Sequence Diagram

sequenceDiagram
    participant User
    participant GHA as GitHub Actions
    participant CreateToken as actions/create-github-app-token@v2
    participant GitHub as GitHub API
    participant Repo as Repository

    alt Version Bump Workflow
        User->>GHA: Trigger workflow_dispatch
        GHA->>CreateToken: Request token using app credentials
        CreateToken->>GitHub: Authenticate as GitHub App
        GitHub-->>CreateToken: Return installation token
        CreateToken-->>GHA: Token generated
        GHA->>Repo: Checkout with token
        GHA->>Repo: Bump version in lib/Version.php
        GHA->>GitHub: Create PR with token
    end

    alt Release Workflow
        User->>GHA: Merge PR with version-bump label
        GHA->>CreateToken: Request token using app credentials
        CreateToken->>GitHub: Authenticate as GitHub App
        GitHub-->>CreateToken: Return installation token
        CreateToken-->>GHA: Token generated
        GHA->>Repo: Checkout with token
        GHA->>Repo: Extract version from lib/Version.php
        GHA->>GitHub: Create release with token
    end
Loading

Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants