From 37981bd830c14b4063dcb578fc986b43c86d6c2e Mon Sep 17 00:00:00 2001 From: dongjiang Date: Tue, 14 Jul 2026 16:19:28 +0800 Subject: [PATCH] fix: use ADMIN_PAT for CI auto-update workflows to bypass branch protection The scheduled workflows (Update Project Stats, Update Contributors) were failing with GH013 because GITHUB_TOKEN cannot bypass the "Protect default branch" ruleset. Switch to ADMIN_PAT secret which belongs to a repo admin added to the bypass list. Signed-off-by: dongjiang --- .github/workflows/update-contributors.yml | 4 ++-- .github/workflows/update-project-stats.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/update-contributors.yml b/.github/workflows/update-contributors.yml index 2912019..f20c46c 100644 --- a/.github/workflows/update-contributors.yml +++ b/.github/workflows/update-contributors.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@v7 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.ADMIN_PAT }} - uses: actions/setup-node@v6 with: node-version: 24 @@ -23,7 +23,7 @@ jobs: - name: Update contributors data run: npm run fetch:contributors env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.ADMIN_PAT }} - name: Commit and push if changed run: | git config user.name "github-actions[bot]" diff --git a/.github/workflows/update-project-stats.yml b/.github/workflows/update-project-stats.yml index 0d74e32..8eadbb1 100644 --- a/.github/workflows/update-project-stats.yml +++ b/.github/workflows/update-project-stats.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@v7 with: - token: ${{ secrets.GITHUB_TOKEN }} + token: ${{ secrets.ADMIN_PAT }} - uses: actions/setup-node@v6 with: node-version: 24 @@ -23,7 +23,7 @@ jobs: - name: Fetch project stats from GitHub API run: npm run fetch:project-stats env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ secrets.ADMIN_PAT }} - name: Commit and push if changed run: | git config user.name "github-actions[bot]"