Use new org secret
MODIFY
.github/workflows/backport.yml
.github/workflows/backport.yml
@@ -28,7 +28,7 @@ jobs:
env:
NUMBER: ${{ github.event.inputs.number }}
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
commit=$(gh pr view $NUMBER --json mergeCommit --jq .mergeCommit.oid)
title=$(gh pr view $NUMBER --json title --jq .title)

MODIFY
.github/workflows/comment-driven-automation.yml
.github/workflows/comment-driven-automation.yml
@@ -56,7 +56,7 @@ jobs:
- name: Run command
env:
NUMBER: ${{ github.event.issue.number }}
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
available_commands="Available commands:
* \`@opentelemetrybot spotless\` - runs \`./gradlew spotlessApply\`

MODIFY
.github/workflows/prepare-patch-release.yml
.github/workflows/prepare-patch-release.yml
@@ -49,7 +49,7 @@ jobs:
- name: Create pull request
env:
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
message="Prepare release $VERSION"
branch="opentelemetrybot/prepare-release-${VERSION}"

MODIFY
.github/workflows/prepare-release-branch.yml
.github/workflows/prepare-release-branch.yml
@@ -61,7 +61,7 @@ jobs:
- name: Create pull request against the release branch
env:
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
message="Prepare release $VERSION"
branch="opentelemetrybot/prepare-release-${VERSION}"
@@ -110,7 +110,7 @@ jobs:
- name: Create pull request against main
env:
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
message="Update version to $NEXT_VERSION"
body="Update version to \`$NEXT_VERSION\`."

MODIFY
.github/workflows/release.yml
.github/workflows/release.yml
@@ -195,7 +195,7 @@ jobs:
env:
VERSION: ${{ needs.release.outputs.version }}
# not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
if git diff --quiet; then
if [[ $VERSION == *.0 ]]; then
@@ -224,7 +224,7 @@ jobs:
with:
version: ${{ needs.release.outputs.version }}
secrets:
- BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
+ OPENTELEMETRYBOT_GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
create-website-pull-request:
needs: release
@@ -232,4 +232,4 @@ jobs:
with:
version: ${{ needs.release.outputs.version }}
secrets:
- BOT_TOKEN: ${{ secrets.BOT_TOKEN }}
+ OPENTELEMETRYBOT_GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}

MODIFY
.github/workflows/reusable-create-operator-pull-request.yml
.github/workflows/reusable-create-operator-pull-request.yml
@@ -7,7 +7,7 @@ on:
type: string
required: true
secrets:
- BOT_TOKEN:
+ OPENTELEMETRYBOT_GITHUB_TOKEN:
required: true
# to help with partial release build failures
workflow_dispatch:
@@ -23,7 +23,7 @@ jobs:
- name: Sync opentelemetry-operator fork
env:
# this is the personal access token used for "gh repo sync" below
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
# synchronizing the fork is fast, and avoids the need to fetch the full upstream repo
# (fetching the upstream repo with "--depth 1" would lead to "shallow update not allowed"
@@ -36,7 +36,7 @@ jobs:
with:
repository: opentelemetrybot/opentelemetry-operator
# this is the personal access token used for "git push" below
- token: ${{ secrets.BOT_TOKEN }}
+ token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
- name: Update version
env:
@@ -54,7 +54,7 @@ jobs:
env:
VERSION: ${{ inputs.version }}
# this is the personal access token used for "gh pr create" below
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
message="Update the javaagent version to $VERSION"
# note that @open-telemetry/java-instrumentation-approvers cannot be used below

MODIFY
.github/workflows/reusable-create-website-pull-request.yml
.github/workflows/reusable-create-website-pull-request.yml
@@ -7,7 +7,7 @@ on:
type: string
required: true
secrets:
- BOT_TOKEN:
+ OPENTELEMETRYBOT_GITHUB_TOKEN:
required: true
# to help with partial release build failures
workflow_dispatch:
@@ -23,7 +23,7 @@ jobs:
- name: Sync opentelemetry.io fork
env:
# this is the personal access token used for "gh repo sync" below
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
# synchronizing the fork is fast, and avoids the need to fetch the full upstream repo
# (fetching the upstream repo with "--depth 1" would lead to "shallow update not allowed"
@@ -36,7 +36,7 @@ jobs:
with:
repository: opentelemetrybot/opentelemetry.io
# this is the personal access token used for "git push" below
- token: ${{ secrets.BOT_TOKEN }}
+ token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
- name: Update version
env:
@@ -55,7 +55,7 @@ jobs:
env:
VERSION: ${{ inputs.version }}
# this is the personal access token used for "gh pr create" below
- GH_TOKEN: ${{ secrets.BOT_TOKEN }}
+ GH_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
run: |
message="Update the Java instrumentation versions to $VERSION"
body="Update the Java instrumentation version to \`$VERSION\`."

Use new org secret (#7759)