From dea1de5feea3a7a10e719fc211c900fe058c1206 Mon Sep 17 00:00:00 2001 From: ajnart Date: Sun, 6 Sep 2026 17:57:35 +0200 Subject: [PATCH] fix(ci): use GitHub App client IDs --- .github/workflows/bot-auto-merge-reconcile.yml | 2 +- .github/workflows/bot-pr-automerge.yml | 2 +- .github/workflows/crowdin-schedule-download.yml | 2 +- .github/workflows/deployment-beta-release.yml | 4 ++-- .github/workflows/deployment-docker-image.yml | 4 ++-- .github/workflows/deployment-weekly-release.yml | 4 ++-- .github/workflows/on-release.yml | 2 +- .github/workflows/update-contributors.yml | 2 +- .github/workflows/update-integration-list.yml | 2 +- 9 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/bot-auto-merge-reconcile.yml b/.github/workflows/bot-auto-merge-reconcile.yml index 26ddf53a1..28e50c8a2 100644 --- a/.github/workflows/bot-auto-merge-reconcile.yml +++ b/.github/workflows/bot-auto-merge-reconcile.yml @@ -20,7 +20,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }} + client-id: ${{ vars.RENOVATE_APPROVE_CLIENT_ID }} permission-pull-requests: write # required to enable auto-merge - name: Install GitHub CLI diff --git a/.github/workflows/bot-pr-automerge.yml b/.github/workflows/bot-pr-automerge.yml index f1e531bc2..31200706e 100644 --- a/.github/workflows/bot-pr-automerge.yml +++ b/.github/workflows/bot-pr-automerge.yml @@ -28,7 +28,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }} + client-id: ${{ vars.RENOVATE_APPROVE_CLIENT_ID }} permission-pull-requests: write # required to approve a pull request and enable auto-merge - name: Install GitHub CLI diff --git a/.github/workflows/crowdin-schedule-download.yml b/.github/workflows/crowdin-schedule-download.yml index 7b783f4e5..92b66aad1 100644 --- a/.github/workflows/crowdin-schedule-download.yml +++ b/.github/workflows/crowdin-schedule-download.yml @@ -22,7 +22,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.CROWDIN_APP_PRIVATE_KEY }} - app-id: ${{ secrets.CROWDIN_APP_ID }} + client-id: ${{ vars.CROWDIN_CLIENT_ID }} permission-contents: write # required to commit to crowdin branch permission-pull-requests: write # required to create pull request diff --git a/.github/workflows/deployment-beta-release.yml b/.github/workflows/deployment-beta-release.yml index 0f0725bef..293bac146 100644 --- a/.github/workflows/deployment-beta-release.yml +++ b/.github/workflows/deployment-beta-release.yml @@ -52,7 +52,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }} + client-id: ${{ vars.RENOVATE_APPROVE_CLIENT_ID }} permission-pull-requests: write - name: Approve PR env: @@ -64,7 +64,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }} + client-id: ${{ vars.RENOVATE_MERGE_CLIENT_ID }} permission-contents: write # write to beta branch (due to merge) permission-pull-requests: write # merge pull request - id: automerge diff --git a/.github/workflows/deployment-docker-image.yml b/.github/workflows/deployment-docker-image.yml index 6f8483132..eb56567d9 100644 --- a/.github/workflows/deployment-docker-image.yml +++ b/.github/workflows/deployment-docker-image.yml @@ -55,7 +55,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }} + client-id: ${{ vars.RENOVATE_MERGE_CLIENT_ID }} permission-contents: write # required to commit package.json & changelog changes, merge them to dev / next and publish the release - uses: actions/checkout@v7 @@ -277,7 +277,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }} + client-id: ${{ vars.RENOVATE_MERGE_CLIENT_ID }} permission-contents: write # required to publish the release - name: Log in to the Container registry diff --git a/.github/workflows/deployment-weekly-release.yml b/.github/workflows/deployment-weekly-release.yml index b08b0c08c..22446cfc5 100644 --- a/.github/workflows/deployment-weekly-release.yml +++ b/.github/workflows/deployment-weekly-release.yml @@ -73,7 +73,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_APPROVE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_APPROVE_APP_ID }} + client-id: ${{ vars.RENOVATE_APPROVE_CLIENT_ID }} permission-pull-requests: write - name: Approve PR if: ${{ steps.create-pull-request.outcome == 'success' }} @@ -87,7 +87,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }} + client-id: ${{ vars.RENOVATE_MERGE_CLIENT_ID }} permission-contents: write # write to main branch (due to merge) permission-pull-requests: write # merge pull request - id: automerge diff --git a/.github/workflows/on-release.yml b/.github/workflows/on-release.yml index 80a94bd1f..f23738cd5 100644 --- a/.github/workflows/on-release.yml +++ b/.github/workflows/on-release.yml @@ -15,7 +15,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.RENOVATE_MERGE_PRIVATE_KEY }} - app-id: ${{ secrets.RENOVATE_MERGE_APP_ID }} + client-id: ${{ vars.RENOVATE_MERGE_CLIENT_ID }} permission-contents: write # required to commit to branch permission-pull-requests: write # required to create pr & enable automerge - name: Checkout code diff --git a/.github/workflows/update-contributors.yml b/.github/workflows/update-contributors.yml index 1966a8a23..a76841e26 100644 --- a/.github/workflows/update-contributors.yml +++ b/.github/workflows/update-contributors.yml @@ -21,7 +21,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }} - app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }} + client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_CLIENT_ID }} permission-contents: write # required to commit to branch permission-pull-requests: write # required to create pr & enable automerge diff --git a/.github/workflows/update-integration-list.yml b/.github/workflows/update-integration-list.yml index eb37f2643..09d866660 100644 --- a/.github/workflows/update-integration-list.yml +++ b/.github/workflows/update-integration-list.yml @@ -24,7 +24,7 @@ jobs: uses: actions/create-github-app-token@v3 with: private-key: ${{ secrets.HOMARR_UPDATE_CONTRIBUTORS_PRIVATE_KEY }} - app-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_APP_ID }} + client-id: ${{ vars.HOMARR_UPDATE_CONTRIBUTORS_CLIENT_ID }} permission-contents: write # required to commit to branch permission-pull-requests: write # required to create pr & enable automerge - name: Checkout code