Fix flaky opampProtoDownload

Author: trask

.github/workflows/build-common.yml

@@ -59,6 +59,7 @@ jobs:
         run: ./gradlew build -x spotlessCheck -x test ${{ inputs.no-build-cache && '--no-build-cache' || '' }}
         env:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Check for jApiCmp diffs
         # The jApiCmp diff compares current to latest, which isn't appropriate for release branches
@@ -123,6 +124,7 @@ jobs:
           ${{ inputs.no-build-cache && '--no-build-cache' || '' }}
         env:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Build scan
         if: ${{ !cancelled() && hashFiles('build-scan.txt') != '' }}

.github/workflows/build.yml

@@ -46,3 +46,4 @@ jobs:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/codeql.yml

@@ -65,6 +65,7 @@ jobs:
         run: ./gradlew assemble --no-build-cache --no-daemon
         env:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Perform CodeQL analysis
         uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3

.github/workflows/copilot-setup-steps.yml

@@ -34,3 +34,4 @@ jobs:
         run: ./gradlew build -x test
         env:
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}

.github/workflows/release.yml

@@ -100,6 +100,7 @@ jobs:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
           GPG_PASSWORD: ${{ secrets.GPG_PASSWORD }}
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
 
       - name: Download artifacts from Maven Central (when already published)
         if: ${{ inputs.already-published }}
@@ -244,6 +245,7 @@ jobs:
           VERSION: ${{ needs.release.outputs.version }}
           PRIOR_VERSION: ${{ needs.release.outputs.prior-version }}
           DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }}
+          GITHUB_TOKEN: ${{ github.token }}
         run: |
           ./gradlew japicmp -PapiBaseVersion=$PRIOR_VERSION -PapiNewVersion=$VERSION
           ./gradlew --refresh-dependencies japicmp

opamp-client/build.gradle.kts

@@ -67,7 +67,14 @@ abstract class DownloadAndExtractOpampProtos @Inject constructor(
     val url = URI.create(zipUrl.get()).toURL()
     downloadedZipFile.get().asFile.parentFile.mkdirs()
 
-    url.openStream().use { input: InputStream ->
+    val connection = url.openConnection()
+    // Use GitHub token if available to avoid rate limiting
+    val githubToken = System.getenv("GITHUB_TOKEN")
+    if (githubToken != null && githubToken.isNotEmpty()) {
+      connection.setRequestProperty("Authorization", "Bearer $githubToken")
+    }
+
+    connection.getInputStream().use { input: InputStream ->
       downloadedZipFile.get().asFile.outputStream().use { output: FileOutputStream ->
         input.copyTo(output)
       }