From 1fcdc62d8dad298d37887497e8dcd39bdf87008d Mon Sep 17 00:00:00 2001
From: "workos-sdk-automation[bot]"
 <2671850+workos-sdk-automation[bot]@users.noreply.github.com>
Date: Mon, 9 Feb 2026 16:02:38 -0500
Subject: [PATCH 1/2] feat: Add lint-pr-title workflow for semantic PR title
 validation

Uses the SDK bot app token with amannn/action-semantic-pull-request
to enforce conventional commit format on PR titles, which is required
for release-please to work correctly.
---
 .github/workflows/lint-pr-title.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/lint-pr-title.yml

diff --git a/.github/workflows/lint-pr-title.yml b/.github/workflows/lint-pr-title.yml
new file mode 100644
index 0000000..688746d
--- /dev/null
+++ b/.github/workflows/lint-pr-title.yml
@@ -0,0 +1,24 @@
+name: Lint PR Title
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - edited
+      - synchronize
+
+jobs:
+  main:
+    name: Validate PR title
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ vars.SDK_BOT_APP_ID }}
+          private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
+
+      - uses: amannn/action-semantic-pull-request@v5
+        env:
+          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}

From d405c3b4d5428448f18d15a3c959a441d0d5bc1d Mon Sep 17 00:00:00 2001
From: "Garen J. Torikian" <gjtorikian@users.noreply.github.com>
Date: Mon, 9 Feb 2026 16:04:14 -0500
Subject: [PATCH 2/2] simplify

---
 .github/workflows/lint-pr-title.yml | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/lint-pr-title.yml b/.github/workflows/lint-pr-title.yml
index 688746d..83867c4 100644
--- a/.github/workflows/lint-pr-title.yml
+++ b/.github/workflows/lint-pr-title.yml
@@ -7,18 +7,14 @@ on:
       - edited
       - synchronize
 
+permissions:
+  pull-requests: read
+
 jobs:
   main:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - name: Generate token
-        id: generate-token
-        uses: actions/create-github-app-token@v1
-        with:
-          app-id: ${{ vars.SDK_BOT_APP_ID }}
-          private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
-
       - uses: amannn/action-semantic-pull-request@v5
         env:
-          GITHUB_TOKEN: ${{ steps.generate-token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}