fix update pipeline

Author: brendan-kellam

.github/workflows/update-sourcebot-version.yaml

@@ -4,13 +4,6 @@ on:
     - cron: '0 9 * * 1'  # Run every Monday at 9 AM UTC
   workflow_dispatch:  # Allow manual triggering
   workflow_call:  # Allow calling from other workflows
-    secrets:
-      GITHUB_APP_ID:
-        description: 'GitHub App ID for authentication'
-        required: false
-      GITHUB_APP_PRIVATE_KEY:
-        description: 'GitHub App private key for authentication'
-        required: false
 
 jobs:
   check-and-update:
@@ -21,19 +14,17 @@ jobs:
 
     steps:
       - name: Generate GitHub App token
-        if: ${{ secrets.GITHUB_APP_ID != '' && secrets.GITHUB_APP_PRIVATE_KEY != '' }}
         id: generate_token
         uses: actions/create-github-app-token@v1
         with:
-          app-id: ${{ secrets.GITHUB_APP_ID }}
-          private-key: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}
-          repositories: sourcebot-helm-chart
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
 
       - name: Checkout repository
         uses: actions/checkout@v4
         with:
           repository: sourcebot-dev/sourcebot-helm-chart
-          token: ${{ steps.generate_token.outputs.token || secrets.GITHUB_TOKEN }}
+          token: ${{ steps.generate_token.outputs.token }}
 
       - name: Get current Sourcebot version
         id: current-version
@@ -105,7 +96,7 @@ jobs:
         if: steps.version-check.outputs.needs_update == 'true'
         uses: peter-evans/create-pull-request@v6
         with:
-          token: ${{ steps.generate_token.outputs.token || secrets.GITHUB_TOKEN }}
+          token: ${{ steps.generate_token.outputs.token }}
           commit-message: |
             chore: bump sourcebot to ${{ steps.latest-version.outputs.latest }}