From 4f2fad5483a3437adcdf4abcbc3074d98d4f6ac2 Mon Sep 17 00:00:00 2001 From: allhands-bot Date: Mon, 20 Apr 2026 18:33:18 -0300 Subject: [PATCH 1/2] chore: use OPENHANDS_BOT_GITHUB_PAT_PRIVATE instead of PAT_TOKEN --- .github/workflows/ghcr-build.yml | 2 +- .github/workflows/pr-review-by-openhands.yml | 2 +- .github/workflows/trigger-deploy-preview.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ghcr-build.yml b/.github/workflows/ghcr-build.yml index e9b105b..6d17add 100644 --- a/.github/workflows/ghcr-build.yml +++ b/.github/workflows/ghcr-build.yml @@ -112,4 +112,4 @@ jobs: head_sha: ${{ github.event.pull_request.head.sha }} pr_title: ${{ github.event.pull_request.title }} secrets: - ALLHANDS_BOT_GITHUB_PAT: ${{ secrets.ALLHANDS_BOT_GITHUB_PAT }} + ALLHANDS_BOT_GITHUB_PAT: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} diff --git a/.github/workflows/pr-review-by-openhands.yml b/.github/workflows/pr-review-by-openhands.yml index 467bee2..f10f93d 100644 --- a/.github/workflows/pr-review-by-openhands.yml +++ b/.github/workflows/pr-review-by-openhands.yml @@ -44,5 +44,5 @@ jobs: llm-base-url: https://llm-proxy.app.all-hands.dev review-style: roasted llm-api-key: ${{ secrets.LLM_API_KEY }} - github-token: ${{ secrets.ALLHANDS_BOT_GITHUB_PAT }} + github-token: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} lmnr-api-key: ${{ secrets.LMNR_SKILLS_API_KEY }} diff --git a/.github/workflows/trigger-deploy-preview.yml b/.github/workflows/trigger-deploy-preview.yml index 85daa88..ff99821 100644 --- a/.github/workflows/trigger-deploy-preview.yml +++ b/.github/workflows/trigger-deploy-preview.yml @@ -43,7 +43,7 @@ jobs: with: repository: ${{ env.DEPLOY_REPO }} ref: ${{ env.BASE_BRANCH }} - token: ${{ secrets.ALLHANDS_BOT_GITHUB_PAT }} + token: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} fetch-depth: 0 path: deploy-repo @@ -122,7 +122,7 @@ jobs: - name: Create or get deploy PR id: manage-pr env: - GH_TOKEN: ${{ secrets.ALLHANDS_BOT_GITHUB_PAT }} + GH_TOKEN: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} BRANCH_NAME: ${{ steps.deploy-pr.outputs.branch_name }} PR_TITLE: ${{ inputs.pr_title }} run: | From 2ac18e8a5ca1c14fc8b6f75f5f7dd19d06d74f53 Mon Sep 17 00:00:00 2001 From: allhands-bot Date: Wed, 22 Apr 2026 09:07:55 -0300 Subject: [PATCH 2/2] fix: align reusable workflow secret interface with internal references --- .github/workflows/ghcr-build.yml | 2 +- .github/workflows/trigger-deploy-preview.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ghcr-build.yml b/.github/workflows/ghcr-build.yml index 6d17add..392edc4 100644 --- a/.github/workflows/ghcr-build.yml +++ b/.github/workflows/ghcr-build.yml @@ -112,4 +112,4 @@ jobs: head_sha: ${{ github.event.pull_request.head.sha }} pr_title: ${{ github.event.pull_request.title }} secrets: - ALLHANDS_BOT_GITHUB_PAT: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} + OPENHANDS_BOT_GITHUB_PAT_PRIVATE: ${{ secrets.OPENHANDS_BOT_GITHUB_PAT_PRIVATE }} diff --git a/.github/workflows/trigger-deploy-preview.yml b/.github/workflows/trigger-deploy-preview.yml index ff99821..05feadc 100644 --- a/.github/workflows/trigger-deploy-preview.yml +++ b/.github/workflows/trigger-deploy-preview.yml @@ -19,7 +19,7 @@ on: required: true type: string secrets: - ALLHANDS_BOT_GITHUB_PAT: + OPENHANDS_BOT_GITHUB_PAT_PRIVATE: required: true concurrency: