feat: Add Support for a separate Github release token to the auto-update token #8173
+13
−2
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Reference: #5688 - Discussion about keeping two separate tokens; one for publishing to Github releases and the other used by the app to make requests for auto-update updates.
Now you can set a release token that has write permissions to publish your release.
The release token will be used instead of a GH_TOKEN || GITHUB_TOKEN ONLY during publishing.
The Github token defined via the Github options or environment variable will still be used as normal.
mac:
export GITHUB_RELEASE_TOKEN=<my token>
I used the Contents permission for a New fine-grained personal access token with "Read and write". "Read-only" for the usual app-update token.
So even if the app-update token is inside your app-update.yml its only read-only, yay! (Mac: you can find the app-update.yml by right-click > Show Package Contents > Contents > Resources)