Skip to content

The publisher needs a token that may open a pull request - #4454

Merged
gHashTag merged 1 commit into
masterfrom
fix/publisher-token
Sep 20, 2026
Merged

gHashTag merged 1 commit into
masterfrom
fix/publisher-token

Conversation

@gHashTag

Copy link
Copy Markdown
Owner

Refs #4321

The publisher's first scheduled run found four bee branches with real work and
published none of them:

skip queen-4451: gh pr create failed: GraphQL: GitHub Actions is not permitted
                 to create or approve pull requests (createPullRequest)

The repository setting is can_approve_pull_request_reviews: false. Turning it
on would let every workflow in the repository open a pull request; a named
token for the one job that needs it is the smaller grant. GH_AGENT_TOKEN
already exists as a secret, and the fallback to github.token keeps the job
runnable where it does not — it refuses in its own words rather than failing to
start.

🤖 Generated with Claude Code

Measured on the first scheduled run:

  gh pr create failed: GraphQL: GitHub Actions is not permitted to create or
  approve pull requests (createPullRequest)

Four bee branches with real work were found and none could be published. The
repository has can_approve_pull_request_reviews: false, which is the same
switch, and turning it on would let every workflow in the repository open a
pull request. A named token for the one job that needs it is the smaller
grant; GH_AGENT_TOKEN already exists as a secret, and the fallback to
github.token keeps the job runnable where that secret does not exist.

Refs #4321

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@gHashTag
gHashTag enabled auto-merge (squash) September 20, 2026 14:45
@github-actions

Copy link
Copy Markdown
Contributor

PR Dashboard

Generated at: 2026-09-20 14:45:31 UTC

Summary

Status Count
Total Open PRs 21
PRs with Failing Checks 18
PRs with All Checks Green 3
READY 2
FAILING 18
PENDING 0
NO CHECKS YET 0

These columns do not partition: 2 + 18 + 0 + 0 = 20, and there are 21 open PRs. A PR is being counted twice or not at all.

Seal Status

  • ⚠️ STALE -- sha256(compiler.rs)=403499176a5d != manifest seal=87e5cbd3ad94.
    The committed NMSE numbers were certified against an older compiler.rs.
    Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).

@github-actions

Copy link
Copy Markdown
Contributor

📓 NotebookLM Notebook linked to this PR

This notebook contains session context, decisions, and artifacts for this work.

@gHashTag
gHashTag merged commit d7a1530 into master Sep 20, 2026
28 of 34 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants