From c290475bf3ccfd180ee4afb3e5a1e257693bd749 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Burzy=C5=84ski?= <mateuszburzynski@gmail.com>
Date: Wed, 1 Jul 2026 15:12:40 +0200
Subject: [PATCH 1/2] Setup git user in the release script

---
 scripts/release.ts | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/scripts/release.ts b/scripts/release.ts
index 7d30fa10..fe4a7ac2 100644
--- a/scripts/release.ts
+++ b/scripts/release.ts
@@ -20,6 +20,12 @@ const gitEnv = {
 
 process.chdir(path.join(import.meta.dirname, ".."));
 
+await exec("git", ["config", "user.name", `"github-actions[bot]"`]);
+await exec("git", [
+  "config",
+  "user.email",
+  `"41898282+github-actions[bot]@users.noreply.github.com"`,
+]);
 await exec("git", ["checkout", "--detach"]);
 await exec("git", ["add", "--force", "dist"]);
 await exec("git", ["commit", "-m", tag]);

From 970491a9e5396680ec29c5f8af20faac960510f7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Burzy=C5=84ski?= <mateuszburzynski@gmail.com>
Date: Wed, 1 Jul 2026 15:26:43 +0200
Subject: [PATCH 2/2] refactor stuff

---
 .github/workflows/publish.yml    | 23 ++++++++++++-----------
 .github/workflows/release-pr.yml | 19 +++++++------------
 scripts/release.ts               |  6 ------
 3 files changed, 19 insertions(+), 29 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2054ba0d..c815bafc 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -62,8 +62,8 @@ jobs:
       - name: Build
         run: pnpm build
 
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
-        id: app-token
+      - uses: ./.github/actions/setup-bot-auth
+        id: bot-auth
         with:
           client-id: ${{ vars.APP_CLIENT_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
@@ -74,7 +74,8 @@ jobs:
         id: changesets
         uses: ./version
         with:
-          github-token: ${{ steps.app-token.outputs.token }}
+          github-token: ${{ steps.bot-auth.outputs.token }}
+          setup-git-user: false
           script: pnpm bump
 
   publish:
@@ -87,13 +88,6 @@ jobs:
     permissions:
       contents: write # to create release and have it authored by github-actions (changesets/action)
     steps:
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
-        id: app-token
-        with:
-          client-id: ${{ vars.APP_CLIENT_ID }}
-          private-key: ${{ secrets.APP_PRIVATE_KEY }}
-          permission-contents: write # to bypass branch and tag protection rules (release.ts)
-
       - name: Check out repo
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
@@ -106,8 +100,15 @@ jobs:
       - name: Build
         run: pnpm build
 
+      - uses: ./.github/actions/setup-bot-auth
+        id: bot-auth
+        with:
+          client-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          permission-contents: write # to bypass branch and tag protection rules (release.ts)
+
       - name: Publish to marketplace
         uses: ./publish
         with:
-          github-token: ${{ steps.app-token.outputs.token }}
+          github-token: ${{ steps.bot-auth.outputs.token }}
           script: pnpm release
diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml
index 6f71c1c5..87d3b31c 100644
--- a/.github/workflows/release-pr.yml
+++ b/.github/workflows/release-pr.yml
@@ -122,13 +122,6 @@ jobs:
       pull-requests: write # to comment on the pull request with the release result (changesets/action)
 
     steps:
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
-        id: app-token
-        with:
-          client-id: ${{ vars.APP_CLIENT_ID }}
-          private-key: ${{ secrets.APP_PRIVATE_KEY }}
-          permission-contents: write # to push the release snapshot branch (release-pr.ts)
-
       - name: Check out repo
         uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
@@ -173,15 +166,17 @@ jobs:
       - name: Build
         run: pnpm build
 
-      - name: Setup Git user
-        run: |
-          git config --global user.name "github-actions[bot]"
-          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+      - uses: ./.github/actions/setup-bot-auth
+        id: bot-auth
+        with:
+          client-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          permission-contents: write # to push the release snapshot branch (release-pr.ts)
 
       - name: Release snapshot version
         run: pnpm release:pr
         env:
-          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
+          GITHUB_TOKEN: ${{ steps.bot-auth.outputs.token }}
 
       - name: Add success reaction
         run: gh api "/repos/$GH_REPO/issues/comments/$COMMENT_ID/reactions" -f content='rocket'
diff --git a/scripts/release.ts b/scripts/release.ts
index fe4a7ac2..7d30fa10 100644
--- a/scripts/release.ts
+++ b/scripts/release.ts
@@ -20,12 +20,6 @@ const gitEnv = {
 
 process.chdir(path.join(import.meta.dirname, ".."));
 
-await exec("git", ["config", "user.name", `"github-actions[bot]"`]);
-await exec("git", [
-  "config",
-  "user.email",
-  `"41898282+github-actions[bot]@users.noreply.github.com"`,
-]);
 await exec("git", ["checkout", "--detach"]);
 await exec("git", ["add", "--force", "dist"]);
 await exec("git", ["commit", "-m", tag]);