[Innei]

Replaces the GH_TOKEN personal access token with an installation token minted by the LobeHub bot GitHub App, matching lobehub/lobehub and lobehub/lobe-ui.

Each job that read secrets.GH_TOKEN now starts with:

- uses: actions/create-github-app-token@v2
  id: app-token
  with:
    app-id: ${{ vars.LOBEHUB_BOT_APP_ID }}
    private-key: ${{ secrets.LOBEHUB_BOT_APP_PRIVATE_KEY }}

and uses ${{ steps.app-token.outputs.token }} where it used ${{ secrets.GH_TOKEN }}. LOBEHUB_BOT_APP_ID and LOBEHUB_BOT_APP_PRIVATE_KEY are org-level, so no repo setup is needed. The GH_TOKEN PAT is being revoked.

Changed:

• .github/workflows/release.yml

[lobe-tsukumo]

👍 @Innei

Thank you for raising your pull request and contributing to our Community.
Please make sure you have followed our contributing guidelines. We will review it as soon as possible.
If you encounter any problems, please feel free to connect with us.

非常感谢您提出拉取请求并为我们的社区做出贡献，请确保您已经遵循了我们的贡献指南，我们会尽快审查它。
如果您遇到任何问题，请随时与我们联系。

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-23T08:54:46.082295Z	ccd3d40	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[lobe-tsukumo]

❤️ Great PR @Innei ❤️

The growth of project is inseparable from user feedback and contribution, thanks for your contribution!

项目的成长离不开用户反馈和贡献，感谢您的贡献!