ci: let a token opt the release PR into running CI

release-plz opens the release PR as app/github-actions, and GitHub parks workflow runs from that actor at action_required, so the PR shows no checks until someone approves each one by hand. Passing a PAT instead makes the PR come from that identity and its CI runs on its own. The fallback keeps today's behaviour until RELEASE_PLZ_TOKEN exists, so this is inert until you set it. Only the PR job needs it; tagging and publishing are fine with GITHUB_TOKEN.
2026-07-25 04:08:37 +02:00
parent 0b332c5170
commit e43253a7db
1 changed files with 1 additions and 1 deletions
@@ -78,7 +78,7 @@ jobs:
        with:
          command: release-pr
        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN || secrets.GITHUB_TOKEN }}
          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}

  # No-op until the release PR lands; then tags, publishes both crates to