Skip to content

chore: replace REPO_SCOPED_TOKEN with built-in GITHUB_TOKEN#96

Merged
jagtejsodhi merged 1 commit intomainfrom
jagtej/replace-repo-scoped-token
Mar 11, 2026
Merged

chore: replace REPO_SCOPED_TOKEN with built-in GITHUB_TOKEN#96
jagtejsodhi merged 1 commit intomainfrom
jagtej/replace-repo-scoped-token

Conversation

@jagtejsodhi
Copy link
Collaborator

@jagtejsodhi jagtejsodhi commented Mar 11, 2026

Summary

  • Replace all REPO_SCOPED_TOKEN references in release-plz.yml with the built-in GITHUB_TOKEN
  • The revoked PAT was blocking the release-plz workflow from creating branches/PRs
  • Update PUBLISHING.md to reflect the new auth setup (OIDC for crates.io, GITHUB_TOKEN for GitHub ops)
  • Remove the now-obsolete "Secrets Configuration" section from PUBLISHING.md

Context

The REPO_SCOPED_TOKEN was revoked as part of PR #94's migration to trusted publishing. This PR completes that migration by removing the last references to the old PAT. The workflow's permissions block already declares contents: write and pull-requests: write, so the built-in GITHUB_TOKEN has sufficient access.

Test plan

  • Merge this PR to main
  • Trigger workflow_dispatch on the release-plz workflow
  • Verify the release-plz-pr job successfully creates a release PR

The REPO_SCOPED_TOKEN PAT was revoked as part of the migration to
trusted publishing. Replace all references with the built-in
GITHUB_TOKEN which has sufficient permissions via the workflow's
permissions block. Also update PUBLISHING.md to reflect the new
auth setup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Committed-By-Agent: claude
@jagtejsodhi jagtejsodhi requested a review from ajinabraham March 11, 2026 01:47
@jagtejsodhi jagtejsodhi merged commit ec8bdb2 into main Mar 11, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants