Skip to content

chore(deps): update actions/create-github-app-token action to v2#536

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-2.x
Open

chore(deps): update actions/create-github-app-token action to v2#536
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-2.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 8, 2026

This PR contains the following updates:

Package Type Update Change
actions/create-github-app-token action major v1v2

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 8, 2026 07:22
@renovate renovate bot requested a review from awolfden February 8, 2026 07:22
@greptile-apps
Copy link
Contributor

greptile-apps bot commented Feb 8, 2026

Greptile Overview

Greptile Summary

This PR updates the GitHub Actions workflow dependency actions/create-github-app-token from v1 to v2 in both the release.yml and version-bump.yml workflows. The token output is still consumed in the same way (passed to actions/checkout / action-gh-release / create-pull-request), so the change is isolated to the action version bump and does not alter the surrounding workflow logic.

Confidence Score: 5/5

  • This PR is safe to merge with minimal risk.
  • The change is a straightforward version bump of a third-party GitHub Action in two workflows, with no changes to inputs/outputs usage in the workflows themselves and no impact on runtime library code.
  • No files require special attention

Important Files Changed

Filename Overview
.github/workflows/release.yml Bumps actions/create-github-app-token from v1 to v2 in the release workflow; no other logic changes.
.github/workflows/version-bump.yml Bumps actions/create-github-app-token from v1 to v2 in the version-bump workflow; no other logic changes.

Sequence Diagram

sequenceDiagram
  participant GitHub as GitHub Actions Runner
  participant TokenAction as actions/create-github-app-token@v2
  participant Checkout as actions/checkout@v4
  participant Release as softprops/action-gh-release@v2
  participant UV as uv
  participant PyPI as PyPI
  
  Note over GitHub: .github/workflows/release.yml
  GitHub->>TokenAction: Generate GitHub App token
  TokenAction-->>GitHub: token output
  GitHub->>Checkout: Checkout repo (token)
  GitHub->>GitHub: Read version from pyproject.toml
  GitHub->>Release: Create GitHub Release (token)
  GitHub->>Checkout: Checkout repo (publish job)
  GitHub->>UV: uv build
  GitHub->>PyPI: uv publish (OIDC)

  Note over GitHub: .github/workflows/version-bump.yml
  GitHub->>TokenAction: Generate GitHub App token
  TokenAction-->>GitHub: token output
  GitHub->>Checkout: Checkout repo (token)
  GitHub->>GitHub: Compute new version
  GitHub->>UV: uv lock
  GitHub->>GitHub: Create PR (peter-evans/create-pull-request)
Loading

Copy link
Contributor

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants