Publish workflow with Github app bypass

Author: chriscarrollsmith

.github/workflows/publish.yml

@@ -1,27 +1,52 @@
-name: Update Documentation
+name: Publish Documentation
 
 on:
   push:
-    branches: [ main ]
-    paths:
-      - 'index.qmd'
-      - '.github/workflows/update-docs.yml'
-  workflow_dispatch:
+    branches: main
 
 jobs:
-  update-docs:
+  publish-documentation:
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: write
     steps:
+      - name: Generate token for version incrementer app
+        id: create_token
+        uses: tibdex/github-app-token@v2
+        with:
+          app_id: ${{ secrets.APP_ID }}
+          private_key: ${{ secrets.PRIVATE_KEY }}
+
       - name: Check out repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          ref: ${{ github.sha }}
+          token: ${{ steps.create_token.outputs.token }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+
+      - name: "Set up Python"
+        uses: actions/setup-python@v5
+        with:
+          python-version-file: "pyproject.toml"
+
+      - name: Install dependencies
+        run: uv sync
 
       - name: Set up Quarto
         uses: quarto-dev/quarto-actions/setup@v2
 
+      - name: Configure Git
+        run: |
+          git config --global user.name "github-actions[bot]"
+          git config --global user.email "github-actions[bot]@users.noreply.github.com"
+
+      - name: Render and Publish
+        run: uv run quarto publish gh-pages --no-prompt --no-browser
+
       - name: Render Documentation
         run: |
           # Publish Quarto documentation
@@ -33,31 +58,9 @@ jobs:
           # Remove index.html if it exists
           rm -f index.html
 
-      - name: Commit and Push Changes
-        run: |
-          git config --local user.email "github-actions[bot]@users.noreply.github.com"
-          git config --local user.name "github-actions[bot]"
-          
-          # Stage only specific files
-          git add README.md
-          
-          # Only commit if there are changes
-          git diff --staged --quiet || git commit -m "docs: Update README.md via automated workflow"
-          
-          # Push changes
-          git push
-
-      # Optional step for generating additional documentation files
-      - name: Generate Additional Documentation
-        if: false  # Disabled by default - enable when needed
-        run: |
-          # Example: Generate .txt version
-          quarto render index.qmd --output-dir . --output rules.txt --to plain
-          
-          # Example: Generate .cursorrules version
-          quarto render index.qmd --output-dir . --output rules.cursorrules --to plain
-          
-          # Commit and push additional files
-          git add rules.txt rules.cursorrules
-          git diff --staged --quiet || git commit -m "docs: Update additional documentation files"
-          git push
+      - name: Commit version change
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: "Update README"
+          branch: ${{ github.ref_name }}
+          file_pattern: "README.md"