Add renovate-app-token workflow and repository_dispatch trigger to release

- Added for Mend Renovate GitHub App token generation - Added trigger to release workflow for automated upstream releases Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-05-05 05:22:14 +00:00
2 changed files with 24 additions and 1 deletions
@@ -7,6 +7,8 @@ on:
        description: 'Release version (e.g. 1.0.0)'
        required: true
        type: string
+  repository_dispatch:
+    types: [release]

 permissions:
  contents: write
@@ -19,5 +21,5 @@ jobs:
      RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }}
      RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
    with:
-      version: ${{ inputs.version }}
+      version: ${{ inputs.version || github.event.client_payload.version }}
      upstream-repo: fenio/tns-csi
@@ -0,0 +1,21 @@
+name: Mend Renovate GitHub App Token
+
+on:
+  workflow_call:
+    outputs:
+      token:
+        description: "Short-lived GitHub App installation token"
+        value: ${{ jobs.app-token.outputs.token }}
+
+jobs:
+  app-token:
+    runs-on: runners-privilegedescalation
+    outputs:
+      token: ${{ steps.app-token.outputs.token }}
+    steps:
+      - name: Generate GitHub App token
+        id: app-token
+        uses: actions/create-github-app-token@v3
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}