[PR #15] [MERGED] fix(ci): restore CI_GITHUB_TOKEN for release job #15

Closed
opened 2026-03-03 15:56:49 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/mrgoonie/human-mcp/pull/15
Author: @mrgoonie
Created: 2/28/2026
Status: Merged
Merged: 2/28/2026
Merged by: @mrgoonie

Base: mainHead: dev


📝 Commits (1)

  • 305137a fix(ci): restore CI_GITHUB_TOKEN for release job to bypass branch protection

📊 Changes

1 file changed (+2 additions, -1 deletions)

View changed files

📝 .github/workflows/publish.yml (+2 -1)

📄 Description

Summary

  • Restore CI_GITHUB_TOKEN PAT for release job checkout and semantic-release
  • Default github.token cannot bypass repository rulesets (GH013 error)
  • Test job remains with default token (read-only, no PAT needed)
  • Updated CI_GITHUB_TOKEN and NPM_TOKEN secrets with valid tokens

Root Cause

Branch protection rulesets on main block pushes from default github.token. Semantic-release needs to push tags and version commits, requiring a PAT with repo permissions.

Test plan

  • Merge and verify Publish workflow passes (test + release jobs)
  • Verify semantic-release creates new version tag and release

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/mrgoonie/human-mcp/pull/15 **Author:** [@mrgoonie](https://github.com/mrgoonie) **Created:** 2/28/2026 **Status:** ✅ Merged **Merged:** 2/28/2026 **Merged by:** [@mrgoonie](https://github.com/mrgoonie) **Base:** `main` ← **Head:** `dev` --- ### 📝 Commits (1) - [`305137a`](https://github.com/mrgoonie/human-mcp/commit/305137a8e3e9e5e5a517942406d68af858759d52) fix(ci): restore CI_GITHUB_TOKEN for release job to bypass branch protection ### 📊 Changes **1 file changed** (+2 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/publish.yml` (+2 -1) </details> ### 📄 Description ## Summary - Restore `CI_GITHUB_TOKEN` PAT for release job checkout and semantic-release - Default `github.token` cannot bypass repository rulesets (GH013 error) - Test job remains with default token (read-only, no PAT needed) - Updated `CI_GITHUB_TOKEN` and `NPM_TOKEN` secrets with valid tokens ## Root Cause Branch protection rulesets on `main` block pushes from default `github.token`. Semantic-release needs to push tags and version commits, requiring a PAT with repo permissions. ## Test plan - [ ] Merge and verify Publish workflow passes (test + release jobs) - [ ] Verify semantic-release creates new version tag and release --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-03 15:56:49 +03:00
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/human-mcp#15
No description provided.