From 7f24c244b60908eef821f41c672da696b35741f2 Mon Sep 17 00:00:00 2001 From: Praveen Puglia Date: Mon, 12 Oct 2026 12:21:13 +0530 Subject: [PATCH] ci: publish and release with the org CASE_PKG_WRITE secret The repo GITHUB_TOKEN lacks write_package on @smallcase/bite, so tag publishes for 3.2.0, 3.2.1 and 3.3.0 failed with 403. Use the org package token for publishing and release-please, and allow manually dispatching the publish workflow to retry a failed release. Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/publish.yml | 5 ++++- .github/workflows/release-please.yml | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index feb95e3..13b62d5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -4,6 +4,9 @@ on: push: tags: - '*' + # Publishes the version in package.json of the selected ref, e.g. to retry + # a release whose tag run failed. + workflow_dispatch: jobs: publish: @@ -11,7 +14,7 @@ jobs: runs-on: ubuntu-latest permissions: write-all env: - GH_NPM_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_NPM_TOKEN: ${{ secrets.CASE_PKG_WRITE }} steps: - name: Checkout Code uses: actions/checkout@v4 diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index f973ae0..c39d76e 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -17,4 +17,4 @@ jobs: uses: googleapis/release-please-action@v4 with: release-type: node - token: ${{ secrets.PAT }} + token: ${{ secrets.CASE_PKG_WRITE }}