From 2c4e9cef3bc28b4c4ec5e51b34fcab7a7f7d2dbe Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Apr 2026 23:15:53 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.0.0 to 3.1.1. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](https://github.com/actions/create-github-app-token/compare/v3.0.0...v3.1.1) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/conventional-commits.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml index 7d715a4..00aa267 100644 --- a/.github/workflows/conventional-commits.yml +++ b/.github/workflows/conventional-commits.yml @@ -8,7 +8,7 @@ jobs: validate-pr-title: runs-on: ubuntu-latest steps: - - uses: actions/create-github-app-token@v3.0.0 + - uses: actions/create-github-app-token@v3.1.1 id: app-token with: app-id: ${{ secrets.DS_RELEASE_BOT_ID }} From 2d6b136b4d8c632a1a76324c8eea9baa49f9bda2 Mon Sep 17 00:00:00 2001 From: Wei Ji <23487320+weiji14@users.noreply.github.com> Date: Thu, 16 Apr 2026 12:58:14 +1200 Subject: [PATCH 2/2] Change app-id to client-id Xref https://github.blog/changelog/2024-05-01-github-apps-can-now-use-the-client-id-to-fetch-installation-tokens/ --- .github/workflows/conventional-commits.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml index 00aa267..2f721ba 100644 --- a/.github/workflows/conventional-commits.yml +++ b/.github/workflows/conventional-commits.yml @@ -11,7 +11,7 @@ jobs: - uses: actions/create-github-app-token@v3.1.1 id: app-token with: - app-id: ${{ secrets.DS_RELEASE_BOT_ID }} + client-id: ${{ vars.DS_RELEASE_BOT_CLIENT_ID }} private-key: ${{ secrets.DS_RELEASE_BOT_PRIVATE_KEY }} permission-pull-requests: write