[soimkim]

Summary

• Use the workflow github.token instead of secrets.TOKEN for changelog updates, the main-branch push, and release asset upload.
• Apply the same change to Release Drafter, which called the GitHub API with the same rejected secret.
• Release job logs showed Contents: write on github.token, which covers release reads, asset uploads, and the changelog push. secrets.TOKEN returned HTTP 401.

Test plan

• Merge this change to main before re-running the release workflow, because release workflows load the workflow file from the default branch.
• Re-run the v5.1.35 release workflow and confirm Upload Release Asset no longer returns Bad credentials.
• Confirm gren can list releases and the changelog commit is pushed.
• Open or update a pull request and confirm Release Drafter still updates the draft release.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}