Repository navigation
👷 ci: publish GitHub releases as lobe-tsukumo App - #3
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
Deploying streamdown with
|
| Latest commit: |
d4901cf
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://537355d0.streamdown-6nu.pages.dev |
| Branch Preview URL: | https://ci-lobe-tsukumo-app-token.streamdown-6nu.pages.dev |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d36d97986c
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| - uses: actions/create-github-app-token@v2 | ||
| id: app-token | ||
| with: | ||
| app-id: ${{ vars.LOBEHUB_BOT_APP_ID }} | ||
| private-key: ${{ secrets.LOBEHUB_BOT_APP_PRIVATE_KEY }} |
There was a problem hiding this comment.
GitHub App installation tokens expire one hour after creation, but this workflow creates the token before checkout, dependency installation, linting, tests, building, and package verification. If those preceding steps take longer than an hour, pnpm release receives an expired token and fails authentication despite all checks succeeding; move token creation next to the Release step so its full lifetime is available for publishing.
Useful? React with 👍 / 👎.
|
🎉 This PR is included in version 1.4.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
Replace
secrets.GH_TOKENwith alobe-tsukumoGitHub App installation token so releases are not authored by a personal PAT.Expects org (or repo) config:
vars.LOBEHUB_BOT_APP_IDsecrets.LOBEHUB_BOT_APP_PRIVATE_KEYOrg secrets will be added separately. Until then this job cannot mint a token.