From c5ae6fbe15f9a2a540e2c4aae4803d06b983c182 Mon Sep 17 00:00:00 2001 From: Matthew Elwell Date: Thu, 6 Aug 2026 15:52:10 +0100 Subject: [PATCH 1/3] Move to actions/create-github-app-token v3 (from v1) --- .github/workflows/api-fix-docs-artefacts.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/api-fix-docs-artefacts.yml b/.github/workflows/api-fix-docs-artefacts.yml index e80fcd6bd893..3d0ba7a83c8c 100644 --- a/.github/workflows/api-fix-docs-artefacts.yml +++ b/.github/workflows/api-fix-docs-artefacts.yml @@ -28,9 +28,9 @@ jobs: steps: - name: Generate GitHub App token with push access id: app-token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@v3 with: - app-id: ${{ vars.FLAGSMITH_ENGINEERING_GH_APP_ID }} + client-id: ${{ vars.FLAGSMITH_ENGINEERING_GH_APP_ID }} private-key: ${{ secrets.FLAGSMITH_ENGINEERING_GH_APP_PRIVATE_KEY }} - name: Cloning repo From 13c78228ecc4b592bd087a27f333f214ce06da9f Mon Sep 17 00:00:00 2001 From: Matthew Elwell Date: Wed, 2 Sep 2026 15:29:11 +0100 Subject: [PATCH 2/3] Add `permission-contents: write` --- .github/workflows/api-fix-docs-artefacts.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/api-fix-docs-artefacts.yml b/.github/workflows/api-fix-docs-artefacts.yml index 3d0ba7a83c8c..e2912d3281a1 100644 --- a/.github/workflows/api-fix-docs-artefacts.yml +++ b/.github/workflows/api-fix-docs-artefacts.yml @@ -32,6 +32,7 @@ jobs: with: client-id: ${{ vars.FLAGSMITH_ENGINEERING_GH_APP_ID }} private-key: ${{ secrets.FLAGSMITH_ENGINEERING_GH_APP_PRIVATE_KEY }} + permission-contents: write - name: Cloning repo uses: actions/checkout@v7 From edefa784f37025894a69f8ab64ebf29153a9b9da Mon Sep 17 00:00:00 2001 From: Matthew Elwell Date: Wed, 2 Sep 2026 15:31:23 +0100 Subject: [PATCH 3/3] Use commit hash instead of mutable tag --- .github/workflows/api-fix-docs-artefacts.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/api-fix-docs-artefacts.yml b/.github/workflows/api-fix-docs-artefacts.yml index e2912d3281a1..e0a8af403973 100644 --- a/.github/workflows/api-fix-docs-artefacts.yml +++ b/.github/workflows/api-fix-docs-artefacts.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Generate GitHub App token with push access id: app-token - uses: actions/create-github-app-token@v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 with: client-id: ${{ vars.FLAGSMITH_ENGINEERING_GH_APP_ID }} private-key: ${{ secrets.FLAGSMITH_ENGINEERING_GH_APP_PRIVATE_KEY }}