[PR #6349] [MERGED] Use ACTIONS_UPDATE_TOKEN for workflows that push to forks #76443

Closed
opened 2026-05-16 18:04:35 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/6349
Author: @MatissJanis
Created: 12/9/2025
Status: ✅ Merged
Merged: 12/9/2025
Merged by: @MatissJanis

Base: master ← Head: matiss/use-actions-update-token-for-fork-pushes


📝 Commits (1)

  • 1f9d6ce Use ACTIONS_UPDATE_TOKEN for workflows that push to forks

📊 Changes

3 files changed (+8 additions, -2 deletions)

View changed files

📝 .github/workflows/ai-generated-release-notes.yml (+1 -1)
📝 .github/workflows/vrt-update-apply.yml (+1 -1)
➕ upcoming-release-notes/6349.md (+6 -0)

📄 Description

Summary

GITHUB_TOKEN doesn't have permission to push to fork branches in workflow_run and issue_comment triggered workflows. This PR switches to using a PAT stored as ACTIONS_UPDATE_TOKEN for workflows that need cross-fork push access.

Changes

  • VRT update workflow: Use ACTIONS_UPDATE_TOKEN for checkout token when pushing VRT screenshot updates to contributor fork branches
  • AI-generated release notes: Pass ACTIONS_UPDATE_TOKEN as environment variable when committing release notes files to PR branches

Notes

  • The ACTIONS_UPDATE_TOKEN secret must be configured in repository settings with appropriate permissions (contents: write)
  • Static analysis may show "Context access might be invalid" warnings for custom secrets - this is expected and informational only

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/6349 **Author:** [@MatissJanis](https://github.com/MatissJanis) **Created:** 12/9/2025 **Status:** ✅ Merged **Merged:** 12/9/2025 **Merged by:** [@MatissJanis](https://github.com/MatissJanis) **Base:** `master` ← **Head:** `matiss/use-actions-update-token-for-fork-pushes` --- ### 📝 Commits (1) - [`1f9d6ce`](https://github.com/actualbudget/actual/commit/1f9d6cea04ab3f232cdcb64b136416a46e9d2ff3) Use ACTIONS_UPDATE_TOKEN for workflows that push to forks ### 📊 Changes **3 files changed** (+8 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/ai-generated-release-notes.yml` (+1 -1) 📝 `.github/workflows/vrt-update-apply.yml` (+1 -1) ➕ `upcoming-release-notes/6349.md` (+6 -0) </details> ### 📄 Description ## Summary `GITHUB_TOKEN` doesn't have permission to push to fork branches in `workflow_run` and `issue_comment` triggered workflows. This PR switches to using a PAT stored as `ACTIONS_UPDATE_TOKEN` for workflows that need cross-fork push access. ## Changes - **VRT update workflow**: Use `ACTIONS_UPDATE_TOKEN` for checkout token when pushing VRT screenshot updates to contributor fork branches - **AI-generated release notes**: Pass `ACTIONS_UPDATE_TOKEN` as environment variable when committing release notes files to PR branches ## Notes - The `ACTIONS_UPDATE_TOKEN` secret must be configured in repository settings with appropriate permissions (`contents: write`) - Static analysis may show "Context access might be invalid" warnings for custom secrets - this is expected and informational only --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-05-16 18:04:35 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#76443