diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 6f2e61cd..d38379cf 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -27,25 +27,15 @@ jobs: tag_name: ${{ steps.release.outputs.tag_name }} steps: - - name: Generate GitHub App Token - id: app-token - uses: actions/create-github-app-token@v2 - with: - app-id: ${{ secrets.RELEASE_APP_ID }} - private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} - # Listing permissions limits the token to these. workflows is needed - # to tag a release whose commits change .github/workflows/; if the - # app lacks it, token creation fails here with that permission named. - permission-contents: write - permission-issues: write - permission-pull-requests: write - permission-workflows: write - - name: Run Release Please uses: google-github-actions/release-please-action@v4 id: release with: - token: ${{ steps.app-token.outputs.token }} + # The built-in token, as runpod-python uses. The release app lacks the + # workflows permission #399 requested, so its token can't be created. + # The workflow-level permissions grant contents, pull-requests and + # issues write. + token: ${{ secrets.GITHUB_TOKEN }} pypi-publish: name: PyPI Publish