mirror of
https://github.com/QwenLM/qwen-code.git
synced 2026-08-21 14:46:19 +00:00
fix(ci): author the release PR with a third bot PAT (#9592)
GITHUB_TOKEN cannot create the release PR because the org disables GitHub Actions from creating or approving pull requests. The repo-level switch is rejected with 409 and the org-level switch requires org admin. Author the PR with CI_REVIEW_BOT_PAT (a third identity) instead, so ci-bot and dev-bot can both approve without self-approval blocking.
This commit is contained in:
parent
c59910ba3f
commit
d6732eaa5d
1 changed files with 7 additions and 6 deletions
13
.github/workflows/finalize-release.yml
vendored
13
.github/workflows/finalize-release.yml
vendored
|
|
@ -201,12 +201,13 @@ jobs:
|
|||
${{ steps.meta.outputs.is_stable == 'true' }}
|
||||
id: 'pr'
|
||||
env:
|
||||
# Author the PR as github-actions[bot] (installation token) so that
|
||||
# NEITHER bot PAT is the author: GitHub forbids self-approval, and
|
||||
# the two approve steps below need both PAT identities free to
|
||||
# supply the branch protection's two required approvals without a
|
||||
# human.
|
||||
GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
|
||||
# Author the PR as the review bot (a third identity) so that NEITHER
|
||||
# approve PAT (ci-bot / dev-bot) is the author: GitHub forbids
|
||||
# self-approval, and the two approve steps below need both PAT
|
||||
# identities free to supply the branch protection's two required
|
||||
# approvals without a human. GITHUB_TOKEN cannot be used here
|
||||
# because the org disables GitHub Actions from creating PRs.
|
||||
GITHUB_TOKEN: '${{ secrets.CI_REVIEW_BOT_PAT }}'
|
||||
RELEASE_BRANCH: '${{ steps.meta.outputs.release_branch }}'
|
||||
RELEASE_TAG: '${{ env.RELEASE_TAG }}'
|
||||
run: |-
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue