diff --git a/.github/workflows/bump-openrouter-sdk.yaml b/.github/workflows/bump-openrouter-sdk.yaml index 3f086ea..aeb42aa 100644 --- a/.github/workflows/bump-openrouter-sdk.yaml +++ b/.github/workflows/bump-openrouter-sdk.yaml @@ -37,13 +37,11 @@ jobs: noop: ${{ steps.bump.outputs.noop }} pr_number: ${{ steps.open.outputs.pr_number }} steps: - # SUBTREE_PUSH_PAT (a PAT, not GITHUB_TOKEN) so the opened PR triggers - # Perry + CI — GITHUB_TOKEN would suppress those downstream runs. This is - # the org's established cross-repo PAT (the same one the monorepo uses to - # push into the SDK repos). + # GH_TOKEN is a PAT (not the Actions GITHUB_TOKEN) so the opened PR + # triggers Perry + CI — GITHUB_TOKEN would suppress those downstream runs. - uses: actions/checkout@v4 with: - token: ${{ secrets.SUBTREE_PUSH_PAT }} + token: ${{ secrets.GH_TOKEN }} fetch-depth: 0 - uses: pnpm/action-setup@v4 @@ -68,7 +66,7 @@ jobs: id: bump env: TARGET_VERSION: ${{ steps.ver.outputs.version }} - GH_TOKEN: ${{ secrets.SUBTREE_PUSH_PAT }} + GH_TOKEN: ${{ secrets.GH_TOKEN }} run: | chmod +x .github/scripts/bump-sdk.sh ./.github/scripts/bump-sdk.sh @@ -77,7 +75,7 @@ jobs: id: open if: steps.bump.outputs.noop != 'true' env: - GH_TOKEN: ${{ secrets.SUBTREE_PUSH_PAT }} + GH_TOKEN: ${{ secrets.GH_TOKEN }} run: | set -euo pipefail PR_URL=$(gh pr create \ @@ -109,7 +107,7 @@ jobs: - name: Wait for Perry + CI, then merge or alert env: - GH_TOKEN: ${{ secrets.SUBTREE_PUSH_PAT }} + GH_TOKEN: ${{ secrets.GH_TOKEN }} PR: ${{ needs.bump.outputs.pr_number }} REPO: OpenRouterTeam/typescript-agent AUTO_MERGE: ${{ github.event.inputs.dry_run != 'true' }} diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index e11f9fd..2c09adb 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -137,9 +137,9 @@ jobs: - name: Dispatch monorepo bump if: ${{ !inputs.dry-run && steps.published.outputs.version != '' }} env: - # Reuse the org's cross-repo PAT; needs contents:write on - # OpenRouterTeam/openrouter-web to be accepted. - GH_TOKEN: ${{ secrets.SUBTREE_PUSH_PAT }} + # Cross-repo PAT; needs contents:write on + # OpenRouterTeam/openrouter-web so the repository_dispatch is accepted. + GH_TOKEN: ${{ secrets.GH_TOKEN }} run: | set -euo pipefail gh api repos/OpenRouterTeam/openrouter-web/dispatches \