ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a token from https://github.com/apps/octokit (#489)

* ci: replace `OCTOKITBOT_PROJECT_ACTION_TOKEN` and `OCTOKITBOT_PAT` with a token from https://github.com/apps/octokit

* remove owner where not needed

Author: wolfy1339

.github/workflows/add_to_octokit_project.yml

@@ -12,9 +12,15 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.OCTOKIT_APP_ID }}
+          private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
+          owner: octokit
       - uses: actions/add-to-project@v1.0.2
         with:
           project-url: https://github.com/orgs/octokit/projects/10
-          github-token: ${{ secrets.OCTOKITBOT_PROJECT_ACTION_TOKEN }}
+          github-token: ${{ steps.app-token.outputs.token }}
           labeled: "Status: Stale"
           label-operator: NOT

.github/workflows/immediate-response.yml

@@ -14,6 +14,11 @@ jobs:
     if: ${{ github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' && github.actor != 'githubactions[bot]' && github.actor != 'octokitbot' }}
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.OCTOKIT_APP_ID }}
+          private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
       - name: Determine issue or PR number
         id: extract
         run: echo "NUMBER=${{ github.event.issue.number || github.event.pull_request.number }}" >> "$GITHUB_OUTPUT"
@@ -27,3 +32,4 @@ jobs:
             We have a [process in place](https://github.com/octokit/.github/blob/main/community/prioritization_response.md#overview) for prioritizing and responding to your input. 
             Because you are a part of this community please feel free to comment, add to, or pick up any issues/PRs that are labeled with `Status: Up for grabs`.
             You & others like you are the reason all of this works! So thank you & happy coding! 🚀
+          token: ${{ steps.app-token.outputs.token }}

.github/workflows/release.yml

@@ -18,6 +18,12 @@ jobs:
     name: release
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.OCTOKIT_APP_ID }}
+          private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
+          owner: octokit
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
@@ -26,5 +32,5 @@ jobs:
       - run: npm ci
       - run: npx semantic-release
         env:
-          GITHUB_TOKEN: ${{ secrets.OCTOKITBOT_PAT }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           NPM_TOKEN: ${{ secrets.OCTOKITBOT_NPM_TOKEN }}

.github/workflows/update-prettier.yml

@@ -8,6 +8,11 @@ jobs:
   update_prettier:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.OCTOKIT_APP_ID }}
+          private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
@@ -17,7 +22,7 @@ jobs:
       - run: npm run lint:fix
       - uses: gr2m/create-or-update-pull-request-action@v1.x
         env:
-          GITHUB_TOKEN: \${{ secrets.OCTOKITBOT_PAT }}
+          GITHUB_TOKEN: \${{ steps.app-token.outputs.token }}
         with:
           title: Prettier updated
           body: An update to prettier required updates to your code.

.github/workflows/update.yml

@@ -7,11 +7,16 @@ jobs:
   update:
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ vars.OCTOKIT_APP_ID }}
+          private-key: ${{ secrets.OCTOKIT_APP_PRIVATE_KEY }}
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version: 18
+          node-version: lts/*
       - run: npm ci
       - run: npm run download
       # Temporary disabled generating diff files
@@ -30,7 +35,7 @@ jobs:
       - name: update cache
         uses: gr2m/create-or-update-pull-request-action@v1.x
         env:
-          GITHUB_TOKEN: ${{ secrets.OCTOKITBOT_PAT }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         with:
           title: 🤖📯 GitHub OpenAPI Update
           body: >

.github/workflows/update_dry_run.yml

@@ -21,7 +21,7 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           cache: npm
-          node-version: 18
+          node-version: lts/*
       - run: npm ci
       - run: npm run download
       # - uses: actions/checkout@v4