fix(actions): pass GH_TOKEN into composite actions

Author: tannerlinsley

.github/changeset-preview/action.yml

@@ -1,5 +1,9 @@
 name: Changeset Preview
 description: Generates comment on a PR showing expected version impact
+inputs:
+  token:
+    description: GitHub token used to post the preview comment
+    required: true
 runs:
   using: composite
   steps:
@@ -18,4 +22,4 @@ runs:
           --body-file /tmp/changeset-preview.md \
           --marker "<!-- changeset-version-preview -->"
       env:
-        GH_TOKEN: ${{ secrets.GH_TOKEN }}
+        GH_TOKEN: ${{ inputs.token }}

.github/comment-on-release/README.md

@@ -56,6 +56,7 @@ Add this step to your `.github/workflows/release.yml` file after the `changesets
   uses: TanStack/config/.github/comment-on-release@main
   with:
     published-packages: ${{ steps.changesets.outputs.publishedPackages }}
+    token: ${{ secrets.GH_TOKEN }}
 ```
 
 ## Requirements

.github/comment-on-release/action.yml

@@ -4,6 +4,9 @@ inputs:
   published-packages:
     description: 'JSON string of published packages from changesets/action'
     required: true
+  token:
+    description: GitHub token used to comment on PRs and issues
+    required: true
 runs:
   using: composite
   steps:
@@ -12,4 +15,4 @@ runs:
       run: node ${{ github.action_path }}/comment-on-release.ts
       env:
         PUBLISHED_PACKAGES: ${{ inputs.published-packages }}
-        GH_TOKEN: ${{ secrets.GH_TOKEN }}
+        GH_TOKEN: ${{ inputs.token }}

.github/workflows/pr.yml

@@ -63,3 +63,5 @@ jobs:
         uses: ./.github/setup
       - name: Changeset Preview
         uses: ./.github/changeset-preview
+        with:
+          token: ${{ secrets.GH_TOKEN }}

.github/workflows/release.yml

@@ -38,8 +38,11 @@ jobs:
           publish: pnpm run changeset:publish
           commit: 'ci: Version Packages'
           title: 'ci: Version Packages'
+        env:
+          GH_TOKEN: ${{ secrets.GH_TOKEN }}
       - name: Comment on PRs and issues about release
         if: steps.changesets.outputs.published == 'true'
         uses: ./.github/comment-on-release
         with:
           published-packages: ${{ steps.changesets.outputs.publishedPackages }}
+          token: ${{ secrets.GH_TOKEN }}