fix(ci): switch to fine-grained PAT

Replaces GITHUB_TOKEN with a fine-grained personal access token to ensure that semantic-release can trigger the release.published workflow.

GitHub blocks workflows triggered by the default GITHUB_TOKEN from triggering other workflows,
which prevented our Docker build from running automatically after a release.
This commit is contained in:
Digikwal 2025-06-26 21:30:14 +02:00 committed by GitHub
parent 3f91b42fb4
commit e3e6dc8cc7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -36,7 +36,7 @@ jobs:
- name: Run Semantic Release
id: semantic_release
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_TOKEN: ${{ secrets.GH_RELEASE_PAT }}
run: |
RELEASE_TAG=$(npx semantic-release | tee /dev/stderr | grep -oP '(?<=next release version is )[^ ]+')
echo "RELEASE_TAG=${RELEASE_TAG}" >> $GITHUB_ENV