Skip to content

Grant workflow-scoped token to update-dependencies workflow #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
daviddenton merged 1 commit into from
Jul 13, 2026
Merged

Grant workflow-scoped token to update-dependencies workflow #11

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/typeflows/update-dependencies/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ flowchart TD
flowchart TD
step1["Step 1: Checkout repository"]
style step1 fill:#f8f9fa,stroke:#495057
action1["🎬 actions<br/>checkout<br/><br/>📝 Inputs:<br/>• token: ${{ secrets.GITHUB_TOKEN }}"]
action1["🎬 actions<br/>checkout<br/><br/>📝 Inputs:<br/>• token: ${{ secrets.TOOLBOX_REPO_TOKEN..."]
style action1 fill:#e1f5fe,stroke:#0277bd
step1 -.-> action1
step2["Step 2: Set up JDK"]
Expand All @@ -51,7 +51,7 @@ flowchart TD
step5 --> step6
step7["Step 7: Create Pull Request<br/>🔐 if: steps.changes.outputs.has_changes"]
style step7 fill:#f8f9fa,stroke:#495057
action7["🎬 peter-evans<br/>create-pull-request<br/><br/>📝 Inputs:<br/>• commit-message: chore: Update dependencies<br/>• title: chore: update dependencies<br/>• body: This PR updates dependencies i...<br/>• branch: update-dependencies<br/>• delete-branch: true"]
action7["🎬 peter-evans<br/>create-pull-request<br/><br/>📝 Inputs:<br/>• token: ${{ secrets.TOOLBOX_REPO_TOKEN...<br/>• commit-message: chore: Update dependencies<br/>• title: chore: update dependencies<br/>• body: This PR updates dependencies i...<br/>• branch: update-dependencies<br/>• delete-branch: true"]
style action7 fill:#e1f5fe,stroke:#0277bd
step7 -.-> action7
step6 --> step7
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/update-dependencies.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ jobs:
- name: Checkout repository
uses: actions/checkout@v6.0.2
with:
token: ${{ secrets.GITHUB_TOKEN }}
token: ${{ secrets.TOOLBOX_REPO_TOKEN }}
- name: Set up JDK
uses: actions/setup-java@v5.2.0
with:
Expand All @@ -40,6 +40,7 @@ jobs:
if: steps.changes.outputs.has_changes
uses: peter-evans/create-pull-request@v8.1.1
with:
token: ${{ secrets.TOOLBOX_REPO_TOKEN }}
commit-message: 'chore: Update dependencies'
title: 'chore: update dependencies'
body: |-
Expand Down
7 changes: 6 additions & 1 deletion src/main/kotlin/org/http4k/typeflows/UpdateGradleProjectDependencies.kt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,9 +55,13 @@ class UpdateGradleProjectDependencies(
PullRequests to Write
)

// A token with the `workflow` scope is required so the created PR can
// include the regenerated `.github/workflows` files produced by typeflowsExport.
val token = Secrets.string("TOOLBOX_REPO_TOKEN")

steps += Checkout {
name = "Checkout repository"
token = Secrets.GITHUB_TOKEN.toString()
this.token = token.toString()
}

steps += SetupJava(JDK, JAVA_VERSION) {
Expand Down Expand Up @@ -89,6 +93,7 @@ class UpdateGradleProjectDependencies(
condition = StrExp.of("steps.changes.outputs.has_changes")

with += mapOf(
"token" to token.toString(),
"commit-message" to "chore: Update dependencies",
"title" to "chore: update dependencies",
"body" to """
Expand Down