ci: unify bot automation on the shared GitHub App#619
Merged
Conversation
Point contributors.yml at the shared app via client-id (was the old hackbrowserdata-bot app), and replace the long-lived Homebrew PAT with a short-lived app token scoped to homebrew-tap for the formula push.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #619 +/- ##
=======================================
Coverage 73.24% 73.24%
=======================================
Files 69 69
Lines 3184 3184
=======================================
Hits 2332 2332
Misses 628 628
Partials 224 224
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
This PR updates the repository’s GitHub Actions automation and GoReleaser configuration to use a shared GitHub App for bot operations, replacing older app identifiers and long-lived credentials for Homebrew tap publishing.
Changes:
- Switch contributors automation to mint an app token using
client-id+ private key. - Mint a short-lived GitHub App token for
moonD4rk/homebrew-tapand pass it to GoReleaser asHOMEBREW_TAP_GITHUB_TOKEN. - Attribute Homebrew formula bump commits to the app bot identity in
.goreleaser.yml.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
.goreleaser.yml |
Updates Homebrew formula bump commit author metadata to the shared app bot identity. |
.github/workflows/release.yml |
Mints a GitHub App token for the Homebrew tap and wires it into GoReleaser via HOMEBREW_TAP_GITHUB_TOKEN. |
.github/workflows/contributors.yml |
Migrates app token minting inputs from deprecated app-id to client-id. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Unify bot automation in this repo on the shared GitHub App.
contributors.yml — point at the shared app via
client-id(was the oldhackbrowserdata-botapp / deprecatedapp-id).release.yml + .goreleaser.yml — replace the long-lived Homebrew PAT with a short-lived app token scoped to
homebrew-tap:create-github-app-token, hand it to GoReleaser asHOMEBREW_TAP_GITHUB_TOKEN(wassecrets.HOMEBREW_TAP_GITHUB_TOKEN);github-actions[bot].The in-repo tag, GitHub Release, and snapshot builds still use the default
GITHUB_TOKEN. Requires the app installed on this repo (contributors) and onhomebrew-tap(formula push).