Merge pull request #269 from hashicorp/rn/fix/replace-changesets-pat-…

…token Replace CHANGESETS_PAT with github and give perms
hashicorp · Jul 9, 2024 · 864ae14 · 864ae14
2 parents 466e143 + 2b4150e
commit 864ae14
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 7 deletions.
diff --git a/.github/workflows/canary-release.yml b/.github/workflows/canary-release.yml
@@ -1,10 +1,11 @@
 name: Canary Release
 
+permissions:
+  pull-requests: write
+
 on:
   workflow_call:
     secrets:
-      CHANGESETS_PAT:
-        required: true
       NPM_TOKEN:
         required: true
   pull_request:
@@ -36,7 +37,7 @@ jobs:
       - name: Version
         run: npx changeset version --snapshot canary
         env:
-          GITHUB_TOKEN: ${{ secrets.CHANGESETS_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Publish Canary Packages
         id: changesets
@@ -46,7 +47,7 @@ jobs:
           publish: npm run release:canary
           createGithubReleases: false
         env:
-          GITHUB_TOKEN: ${{ secrets.CHANGESETS_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Compute new packages info

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,10 +1,11 @@
 name: Release
 
+permissions:
+  pull-requests: write
+
 on:
   workflow_call:
     secrets:
-      CHANGESETS_PAT:
-        required: true
       NPM_TOKEN:
         required: true
   push:
@@ -37,5 +38,5 @@ jobs:
           # This expects you to have a script called release which does a build for your packages and calls changeset publish
           publish: npm run release
         env:
-          GITHUB_TOKEN: ${{ secrets.CHANGESETS_PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}