Use otelbot instead for release automation (#923)

Co-authored-by: ArielDemarco <[email protected]>

Author: trask

.github/workflows/Create-Release-PR.yml

@@ -11,8 +11,7 @@ jobs:
   Release:
     runs-on: ubuntu-latest
     permissions:
-        contents: write
-        pull-requests: write
+      contents: write
     steps:
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       with: 
@@ -26,10 +25,19 @@ jobs:
         sed -i -e  's/spec.version = ".*"/spec.version = "${{ inputs.new_version }}"/' OpenTelemetry-Swift-Protocol-Exporter-Http.podspec
         sed -i -e  's/spec.version = ".*"/spec.version = "${{ inputs.new_version }}"/' OpenTelemetry-Swift-SdkResourceExtension.podspec
         sed -i -e  's/spec.version = ".*"/spec.version = "${{ inputs.new_version }}"/' OpenTelemetry-Swift-PersistenceExporter.podspec
+
+    - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+      id: otelbot-token
+      with:
+        app-id: ${{ vars.OTELBOT_APP_ID }}
+        private-key: ${{ secrets.OTELBOT_PRIVATE_KEY }}
+
     - name: Create Pull Request
       uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
       with:
-        token: ${{ secrets.RELEASE_TOKEN }}
+        # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
+        token: ${{ steps.otelbot-token.outputs.token }}
+        branch-token: ${{ secrets.GITHUB_TOKEN }}
         branch: release/${{inputs.new_version}}
         commit-message: 'Release ${{inputs.new_version}}'
         title: 'Release ${{inputs.new_version}}'
@@ -38,5 +46,3 @@ jobs:
           This PR is auto-generated by 
           [create-pull-request](https://github.com/peter-evans/create-pull-request).
         base: main
-
-

.github/workflows/update-core-dependencies.yml

@@ -13,9 +13,14 @@ on:
         default: true
         type: boolean
 
+permissions:
+  contents: read
+
 jobs:
   update-dependencies:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - name: Checkout code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
@@ -40,11 +45,19 @@ jobs:
             echo "has_changes=false" >> $GITHUB_OUTPUT
           fi
 
+      - uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        id: otelbot-token
+        with:
+          app-id: ${{ vars.OTELBOT_APP_ID }}
+          private-key: ${{ secrets.OTELBOT_PRIVATE_KEY }}
+
       - name: Create Pull Request
         if: steps.changes.outputs.has_changes == 'true' && github.event.inputs.create_pr == 'true'
         uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
-          token: ${{ secrets.RELEASE_TOKEN }}
+          # not using secrets.GITHUB_TOKEN since pull requests from that token do not run workflows
+          token: ${{ steps.otelbot-token.outputs.token }}
+          branch-token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: |
             Update opentelemetry-swift-core dependencies to ${{ github.event.inputs.core_version }}