From bfc1af263d9c17584bbdbfefc7bf5beb7c1562d3 Mon Sep 17 00:00:00 2001
From: Ryan Willis <github@ryanwillis.com>
Date: Wed, 25 Mar 2026 17:30:13 +0000
Subject: [PATCH 1/2] fix: use insomnia-automation app for release

---
 .github/workflows/release.yml | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 85cf54f1..3fffb39a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -7,6 +7,9 @@ on:
         description: 'Tag version to release'
         required: true
 
+permissions:
+  contents: write
+
 env:
   # Release Tag to build and publish
   TAG: ${{ github.event.inputs.version }}
@@ -15,16 +18,19 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
+      - name: Generate Insomnia Automation app token
+        id: app-token
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.GHA_INSOMNIA_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.GHA_INSOMNIA_AUTOMATION_PRIVATE_KEY }}
+
       - name: Checkout code
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
-          token: ${{ secrets.PAT_INSOMNIA_INFRA }}
-
-      - name: Configure Git user
-        uses: Homebrew/actions/git-user-config@266845213695c3047d210b2e8fbc42ecdaf45802 # master
-        with:
-          username: ${{ (github.event_name == 'workflow_dispatch' && github.actor) || 'insomnia-infra' }}
+          token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: true
 
       - name: Setup Node
         uses: actions/setup-node@v6
@@ -42,10 +48,10 @@ jobs:
           git tag --list
           git remote -v
 
-      - name: Merge version commit into master
+      - name: Push version commit and tags
         run: |
-          git push origin v${{ env.TAG }}
           git push origin master
+          git push origin --tags
 
       - name: Create Tag and Release
         uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1
@@ -56,3 +62,4 @@ jobs:
           generateReleaseNotes: true
           prerelease: false
           draft: false
+          token: ${{ steps.app-token.outputs.token }}

From 7e62638066c9ade204dce45c33ab76c803a5f15e Mon Sep 17 00:00:00 2001
From: Ryan Willis <github@ryanwillis.com>
Date: Wed, 25 Mar 2026 17:45:21 +0000
Subject: [PATCH 2/2] use latest token action

---
 .github/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3fffb39a..dcbdd555 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,7 @@ jobs:
     steps:
       - name: Generate Insomnia Automation app token
         id: app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
           app-id: ${{ secrets.GHA_INSOMNIA_AUTOMATION_APP_ID }}
           private-key: ${{ secrets.GHA_INSOMNIA_AUTOMATION_PRIVATE_KEY }}
@@ -50,8 +50,8 @@ jobs:
 
       - name: Push version commit and tags
         run: |
+          git push origin v${{ env.TAG }}
           git push origin master
-          git push origin --tags
 
       - name: Create Tag and Release
         uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1