ci: open the OpenAPI auto-PR as the bee-worker bot (GHA_PAT_ADVANCED)#826
Merged
Conversation
…uto-PR Auto-generated OpenAPI update PRs are opened by the bee-worker bot instead of a personal PAT, so a maintainer can review + approve them. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
✅ Deploy Preview for test-twitter-preview-testing-3 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
yjkellyjoo
approved these changes
Jul 7, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Switches the
update-openapiworkflow'screate-pull-requesttoken from the personalBOT_PATto the org bot account bee-worker viaGHA_PAT_ADVANCED.Why: the auto-generated OpenAPI update PR is currently opened by a personal account (e.g. #825), so it can't be cleanly reviewed/approved by that same person. With the bot opening it, a maintainer can review + approve.
Already in place:
bee-workergranted write on this repoGHA_PAT_ADVANCEDsecret's allow-listAfter merge, the now-unused repo
BOT_PATsecret can be removed and the personal PAT revoked.