fix(actions): pass GH_TOKEN as input to composite actions

Author: tannerlinsley

.github/changeset-preview/action.yml

@@ -1,5 +1,9 @@
 name: Changeset Preview
 description: Generates comment on a PR showing expected version impact
+inputs:
+  GH_TOKEN:
+    description: GitHub token used to post the preview comment
+    required: true
 runs:
   using: composite
   steps:
@@ -18,4 +22,4 @@ runs:
           --body-file /tmp/changeset-preview.md \
           --marker "<!-- changeset-version-preview -->"
       env:
-        GH_TOKEN: ${{ env.GH_TOKEN }}
+        GH_TOKEN: ${{ inputs.GH_TOKEN }}

.github/comment-on-release/README.md

@@ -56,11 +56,10 @@ Add this step to your `.github/workflows/release.yml` file after the `changesets
   uses: TanStack/config/.github/comment-on-release@main
   with:
     published-packages: ${{ steps.changesets.outputs.publishedPackages }}
-  env:
     GH_TOKEN: ${{ secrets.GH_TOKEN }}
 ```
 
-This action reads the token from the `GH_TOKEN` environment variable.
+This action requires the `GH_TOKEN` input to authenticate with the GitHub API.
 
 ## Requirements
 

.github/comment-on-release/action.yml

@@ -4,6 +4,9 @@ inputs:
   published-packages:
     description: 'JSON string of published packages from changesets/action'
     required: true
+  GH_TOKEN:
+    description: GitHub token used to comment on PRs and issues
+    required: true
 runs:
   using: composite
   steps:
@@ -12,4 +15,4 @@ runs:
       run: node ${{ github.action_path }}/comment-on-release.ts
       env:
         PUBLISHED_PACKAGES: ${{ inputs.published-packages }}
-        GH_TOKEN: ${{ env.GH_TOKEN }}
+        GH_TOKEN: ${{ inputs.GH_TOKEN }}

.github/workflows/pr.yml

@@ -63,5 +63,5 @@ jobs:
         uses: ./.github/setup
       - name: Changeset Preview
         uses: ./.github/changeset-preview
-        env:
+        with:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}

.github/workflows/release.yml

@@ -45,5 +45,4 @@ jobs:
         uses: ./.github/comment-on-release
         with:
           published-packages: ${{ steps.changesets.outputs.publishedPackages }}
-        env:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}