Skip to content

ci: use GH App token and wait for stable PR state before auto-merge#116

Merged
Larry-Osakwe merged 1 commit into
mainfrom
ci/bump-gh-app-token-and-automerge-fix
May 5, 2026
Merged

ci: use GH App token and wait for stable PR state before auto-merge#116
Larry-Osakwe merged 1 commit into
mainfrom
ci/bump-gh-app-token-and-automerge-fix

Conversation

@Larry-Osakwe
Copy link
Copy Markdown
Contributor

Summary

  • Replaces `RELEASE_GITHUB_PAT` with a short-lived GitHub App token via `actions/create-github-app-token@v2` (matching the pattern already used in `service-sync.yml`)
  • Adds `wait_for_pr_stable()` to poll `mergeStateStatus` before enabling auto-merge — GitHub returns "unstable status" if required checks haven't registered yet on a freshly opened PR

Context

Both fixes were discovered and validated while shipping the same PR-native bump flow to `typescript-sdk`. Porting them here to keep the two SDKs in sync.

Replace RELEASE_GITHUB_PAT with a short-lived GitHub App token via
actions/create-github-app-token. Also add wait_for_pr_stable() to poll
mergeStateStatus before enabling auto-merge — avoids the "unstable status"
error GitHub returns when required checks have not registered yet.
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedgithub/​actions/​create-github-app-token@​fee1f7d63c2ff003460e3d139729b119787bc34996100100100100

View full report

@Larry-Osakwe Larry-Osakwe merged commit 514dd9b into main May 5, 2026
8 checks passed
@Larry-Osakwe Larry-Osakwe deleted the ci/bump-gh-app-token-and-automerge-fix branch May 5, 2026 20:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants