From 81e068322cc5570c3f7222dd1c16e122a0111d4e Mon Sep 17 00:00:00 2001 From: MuhammadAashirAslam Date: Thu, 22 Oct 2026 15:45:44 +0500 Subject: [PATCH 1/2] Restore app tokens for automated updates --- .github/workflows/update-discourse-data.yml | 7 +++++++ .github/workflows/update-submodules.yml | 8 +++++++- 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/.github/workflows/update-discourse-data.yml b/.github/workflows/update-discourse-data.yml index 3d437c817d5..1a5624b2ba6 100644 --- a/.github/workflows/update-discourse-data.yml +++ b/.github/workflows/update-discourse-data.yml @@ -17,10 +17,17 @@ jobs: contents: write steps: + - uses: actions/create-github-app-token@v3 + id: app-token + with: + client-id: ${{ vars.WEBSITE_UPDATER_CLIENT_ID }} + private-key: ${{ secrets.WEBSITE_UPDATER_KEY }} + - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 + token: ${{ steps.app-token.outputs.token }} - name: Set up Python uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6 diff --git a/.github/workflows/update-submodules.yml b/.github/workflows/update-submodules.yml index c0f72fd547c..1506a9fc664 100644 --- a/.github/workflows/update-submodules.yml +++ b/.github/workflows/update-submodules.yml @@ -22,13 +22,19 @@ jobs: contents: write steps: + - uses: actions/create-github-app-token@v3 + id: app-token + with: + client-id: ${{ vars.WEBSITE_UPDATER_CLIENT_ID }} + private-key: ${{ secrets.WEBSITE_UPDATER_KEY }} + - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 submodules: false lfs: false - token: ${{ secrets.WORKFLOW_DISPATCH_TOKEN }} + token: ${{ steps.app-token.outputs.token }} - name: Set up Go uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 From 6aedf6ab9b7a36b941089ca1855c7a7c432c2720 Mon Sep 17 00:00:00 2001 From: Gerasimos Chourdakis Date: Thu, 22 Oct 2026 15:56:11 +0200 Subject: [PATCH 2/2] Pin actions/create-github-app-token version --- .github/workflows/update-discourse-data.yml | 2 +- .github/workflows/update-submodules.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/update-discourse-data.yml b/.github/workflows/update-discourse-data.yml index 1a5624b2ba6..af3e2090327 100644 --- a/.github/workflows/update-discourse-data.yml +++ b/.github/workflows/update-discourse-data.yml @@ -17,7 +17,7 @@ jobs: contents: write steps: - - uses: actions/create-github-app-token@v3 + - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: client-id: ${{ vars.WEBSITE_UPDATER_CLIENT_ID }} diff --git a/.github/workflows/update-submodules.yml b/.github/workflows/update-submodules.yml index 1506a9fc664..b7621e8e7cf 100644 --- a/.github/workflows/update-submodules.yml +++ b/.github/workflows/update-submodules.yml @@ -22,7 +22,7 @@ jobs: contents: write steps: - - uses: actions/create-github-app-token@v3 + - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: client-id: ${{ vars.WEBSITE_UPDATER_CLIENT_ID }}