diff --git a/.changeset/README.md b/.changeset/README.md index 7cbf51a..8dcc523 100644 --- a/.changeset/README.md +++ b/.changeset/README.md @@ -54,7 +54,7 @@ Repository secrets (**Settings → Secrets and variables → Actions**): | Secret | Description | | :------------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| `WOLFSTAR_TOKEN` | A GitHub PAT with `repo` and `workflow` scopes. Passed to `changesets/action` through its `github-token` input (v2 ignores the `GITHUB_TOKEN` environment variable) to push commits and open PRs; the default `GITHUB_TOKEN` does not trigger other workflows. | +| `WOLFSTAR_TOKEN` | A GitHub PAT with `repo` and `workflow` scopes. Passed to `changesets/action` through its `github-token` input (v2 ignores the `GITHUB_TOKEN` environment variable) to push commits and open PRs; also exposed as `GITHUB_TOKEN` to the `@next` snapshot changelog generator. | | `NPM_PUBLISH_TOKEN` | An npm **granular access token** with type **Automation** (bypasses 2FA) and publish access to all `@wolfstar/*` packages. Same pattern as [`skyra-project/archid-components`](https://github.com/skyra-project/archid-components). Classic tokens fail with `ERR_PNPM_OTP_NON_INTERACTIVE` in CI. | `release.yml` wires this secret as `NODE_AUTH_TOKEN` (for `actions/setup-node` / pnpm). diff --git a/.changeset/jolly-bags-join.md b/.changeset/jolly-bags-join.md new file mode 100644 index 0000000..a845151 --- /dev/null +++ b/.changeset/jolly-bags-join.md @@ -0,0 +1,2 @@ +--- +--- diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eafac1a..88e89ec 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -90,6 +90,8 @@ jobs: - name: Publish snapshot run: pnpm run publish:snapshot env: + # The v3 changelog generator queries GitHub while versioning snapshots. + GITHUB_TOKEN: ${{ secrets.WOLFSTAR_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }} NPM_CONFIG_PROVENANCE: true