fix(ci): pass App token via 'token' input to action-gh-release#22
Conversation
softprops/action-gh-release v2.6.1 (PR softprops/action-gh-release#751) prefers the explicit 'token' input over the GITHUB_TOKEN env var. The action.yml default for 'token' is the workflow-scoped GITHUB_TOKEN (${{ github.token }}), not the GitHub App token we intend to use. The build job has no permissions: block, so the workflow GITHUB_TOKEN cannot update releases, producing 'Resource not accessible by integration' (403) when uploading assets to the release that semantic-release just created. v1.1.1 was published with no binaries for this reason. Pass the GitHub App token as the 'token' input directly. Drop the redundant env: GITHUB_TOKEN since the action no longer reads it when the token input is set. Refs #20
|
Warning Rate limit exceeded
To continue reviewing without waiting, purchase usage credits in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
## [1.1.2](v1.1.1...v1.1.2) (2026-05-06) ### Bug Fixes * **ci:** pass App token via 'token' input to action-gh-release ([#22](#22)) ([abeeac3](abeeac3)), closes [softprops/action-gh-release#751](softprops/action-gh-release#751) [#20](#20)
|
🎉 This PR is included in version 1.1.2 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
Summary
Resource not accessible by integration(403). v1.1.1 release was published with zero binaries.softprops/action-gh-release@v2.6.1(per fix: prefer token input over GITHUB_TOKEN softprops/action-gh-release#751) now prefers the explicittoken:input over theGITHUB_TOKENenv var. Action default istoken: ${{ github.token }}— the workflow GITHUB_TOKEN, not the GitHub App token we want. Build job has nopermissions:block, so the workflow token has no release write perms.token:input. Drop the now-redundantenv: GITHUB_TOKEN.install.shrecovers automatically.Test plan
Lint & Testpassesv1.1.2Buildjobs succeed and upload assetsv1.1.2release containspvm-linux-x86_64.tar.gz,pvm-macos-aarch64.tar.gz,pvm-macos-x86_64.tar.gzcurl -fsSL https://raw.githubusercontent.com/WebProject-xyz/php-version-manager/main/install.sh | bashsucceeds on macOS aarch64 (issue Cannot install on MacOs #20 reproducer)Refs #20