From e7b6c6cf25ed0b2fe895f552dc807ace3907edb6 Mon Sep 17 00:00:00 2001 From: Dax Davis <98216+rubicon@users.noreply.github.com> Date: Tue, 1 Sep 2026 17:29:24 -0500 Subject: [PATCH] ci: pass client-id instead of the legacy app-id actions/create-github-app-token recommends client-id over the legacy app-id input, and its runtime warns on app-id. Nothing is broken and no removal has been announced, so this is hardening rather than a repair. The 1Password reference moves to the matching 'client id' field on the same item, still addressed by item UUID rather than title. Closes #40 --- .github/workflows/release-please.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml index e801b2f..f88905b 100644 --- a/.github/workflows/release-please.yaml +++ b/.github/workflows/release-please.yaml @@ -30,14 +30,14 @@ jobs: version: 2.35.0 env: OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }} - RELEASE_PLEASE_APP_ID: 'op://Automation/lnacky4l2tmlihrockbutkub7y/app id' + RELEASE_PLEASE_CLIENT_ID: 'op://Automation/lnacky4l2tmlihrockbutkub7y/client id' RELEASE_PLEASE_APP_KEY: 'op://Automation/lnacky4l2tmlihrockbutkub7y/private key' - name: Mint app token uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 id: app-token with: - app-id: ${{ steps.op.outputs.RELEASE_PLEASE_APP_ID }} + client-id: ${{ steps.op.outputs.RELEASE_PLEASE_CLIENT_ID }} private-key: ${{ steps.op.outputs.RELEASE_PLEASE_APP_KEY }} # Without these the token carries every permission the App installation # holds, which is far more than release-please uses. Scope it to what the