From e43253a7db61ad4249d228ab9c866096792165b1 Mon Sep 17 00:00:00 2001 From: Michel de Graaf Date: Sat, 25 Jul 2026 04:08:37 +0200 Subject: [PATCH] ci: let a token opt the release PR into running CI release-plz opens the release PR as app/github-actions, and GitHub parks workflow runs from that actor at action_required, so the PR shows no checks until someone approves each one by hand. Passing a PAT instead makes the PR come from that identity and its CI runs on its own. The fallback keeps today's behaviour until RELEASE_PLZ_TOKEN exists, so this is inert until you set it. Only the PR job needs it; tagging and publishing are fine with GITHUB_TOKEN. --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e0ce3b9..b7dec6d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -78,7 +78,7 @@ jobs: with: command: release-pr env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN || secrets.GITHUB_TOKEN }} CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }} # No-op until the release PR lands; then tags, publishes both crates to