Update actions/create-github-app-token action to v2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	major	v1 → v2

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Overview

Greptile Summary

This PR upgrades actions/create-github-app-token from v1 to v2 in both workflow files. The v2 action maintains backward compatibility with the same inputs (app-id and private-key) and outputs (token), ensuring no breaking changes to the existing workflows.

• Both release.yml and version-bump.yml workflows updated consistently
• All action configurations remain unchanged (app-id and private-key inputs)
• Token generation pattern continues to work as before
• No functional changes to workflow logic

Confidence Score: 5/5

• This PR is safe to merge with minimal risk - it's a straightforward dependency update with no breaking changes
• The upgrade from v1 to v2 of actions/create-github-app-token maintains full backward compatibility with identical inputs and outputs, both workflow files are updated consistently, and the change only affects GitHub Actions infrastructure with no code or logic changes
• No files require special attention - both workflow updates are identical and straightforward

Important Files Changed

Filename	Overview
.github/workflows/release.yml	Updated actions/create-github-app-token from v1 to v2, maintaining the same configuration with app-id and private-key inputs
.github/workflows/version-bump.yml	Updated actions/create-github-app-token from v1 to v2, maintaining the same configuration with app-id and private-key inputs

Sequence Diagram

sequenceDiagram
    participant User
    participant VersionBumpWorkflow as Version Bump Workflow
    participant ReleaseWorkflow as Release Workflow
    participant AppTokenAction as create-github-app-token@v2
    participant GitHubAPI as GitHub API
    participant RubyGems

    User->>VersionBumpWorkflow: Trigger workflow_dispatch
    VersionBumpWorkflow->>AppTokenAction: Generate token (app-id, private-key)
    AppTokenAction->>GitHubAPI: Request token using App credentials
    GitHubAPI-->>AppTokenAction: Return GitHub App token
    AppTokenAction-->>VersionBumpWorkflow: token output
    VersionBumpWorkflow->>GitHubAPI: Checkout code with token
    VersionBumpWorkflow->>VersionBumpWorkflow: Bump version in version.rb
    VersionBumpWorkflow->>GitHubAPI: Create PR with version-bump label

    User->>GitHubAPI: Merge PR
    GitHubAPI->>ReleaseWorkflow: Trigger on PR closed (merged)
    ReleaseWorkflow->>AppTokenAction: Generate token (app-id, private-key)
    AppTokenAction->>GitHubAPI: Request token using App credentials
    GitHubAPI-->>AppTokenAction: Return GitHub App token
    AppTokenAction-->>ReleaseWorkflow: token output
    ReleaseWorkflow->>GitHubAPI: Checkout code with token
    ReleaseWorkflow->>GitHubAPI: Create GitHub Release
    ReleaseWorkflow->>ReleaseWorkflow: Run tests & build gem
    ReleaseWorkflow->>RubyGems: Publish gem

Loading

[greptile-apps]

_{2 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}