From c6cd43529f16860e0d823602fe63f4332313cfff Mon Sep 17 00:00:00 2001
From: Mark Rhoades-Brown <mark@rhoades-brown.co.uk>
Date: Sat, 30 May 2026 00:35:08 +0100
Subject: [PATCH] fix(ci): use GitHub App token for release job to bypass
 branch protection

---
 .github/workflows/ci.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cdff0aa..df13242 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -64,10 +64,18 @@ jobs:
       contents: write
 
     steps:
+      - name: Generate app token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Checkout (full history)
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Skip if version-bump commit
         id: skip
@@ -146,6 +154,7 @@ jobs:
         with:
           tag_name: ${{ steps.version.outputs.version }}
           name: ${{ steps.version.outputs.version }}
+          token: ${{ steps.app-token.outputs.token }}
           files: |
             main.js
             manifest.json