Merge branch 'main' into minor-fixes

Author: KuphJr

.github/workflows/cd.yml

@@ -14,8 +14,25 @@ jobs:
     runs-on: ubuntu-latest
     environment: production
     steps:
+      - name: Assume role capable of getting token from gati
+        uses: aws-actions/configure-aws-credentials@8c3f20df09ac63af7b3ae3d7c91f105f857d8497 # v4.0.0
+        with:
+          role-to-assume: ${{  secrets.AWS_OIDC_FUNCTIONS_TOOLKIT_CI_CHANGESET_TOKEN_ISSUER_ROLE_ARN }}
+          role-duration-seconds: '900'
+          aws-region: ${{ secrets.AWS_REGION }}
+
+      - name: Get github token from gati
+        id: gati
+        uses: smartcontractkit/chainlink-github-actions/github-app-token-issuer@main
+        with:
+          url: ${{ secrets.LAMBDA_FUNCTIONS_URL }}
+
       - name: Checkout the repo
         uses: actions/checkout@v3
+        with:
+          # This sets up the local git config so that the changesets action
+          # can commit changes to the repo on behalf of the GitHub Actions bot.
+          token: ${{ steps.gati.outputs.access-token }}
 
       - name: Setup node
         uses: actions/setup-node@v3
@@ -38,7 +55,7 @@ jobs:
         with:
           publish: npx changeset publish
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.gati.outputs.access-token }}
           # Action needs NPM_TOKEN https://github.com/changesets/action#with-publishing
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           # actions/setup-node creates an .npmrc file that references NODE_AUTH_TOKEN
@@ -57,7 +74,7 @@ jobs:
       - name: Publish dev snapshot
         if: steps.changesets.outputs.published != 'true'
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.gati.outputs.access-token }}
           # actions/setup-node creates an .npmrc file that references NODE_AUTH_TOKEN
           # https://github.com/actions/setup-node/blob/5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d/docs/advanced-usage.md?plain=1#L346
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}